Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa
File:                     38bc1d74-81e1-3524-b3c8-8d395773d081.roa (raw, json)
Hash identifier:          TlmQYbu3ORrN6teT1D8HVER3RXFKyMa6qugzDBVeBbI=
Subject key identifier:   8D:69:7A:6A:78:25:E9:56:BA:42:75:89:C5:7C:F1:10:7F:06:4F:2A
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285847213B180922A30D637CD0CB00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1403
IP address blocks:        107.167.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:18:09:22:a3:0d:63:7c:d0:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=38c310f0-c354-4993-8627-3c575d75eb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:d3:d0:82:52:d1:c6:1c:db:fa:a0:d0:d8:
                    a3:9b:ce:d5:e8:01:6f:b2:8d:41:1e:dd:b2:69:ff:
                    f9:2b:b4:0b:9b:86:1a:72:45:45:d8:a8:e4:9e:f8:
                    ba:60:bc:da:71:cc:26:4b:3d:2b:d2:1c:f8:ea:48:
                    27:e4:0b:11:c1:cb:3c:6e:0a:b9:85:7d:80:d5:9f:
                    e0:a4:b9:02:6e:be:20:d9:6b:ce:da:b9:1e:f4:ae:
                    1d:81:40:01:7e:3c:ef:aa:09:77:a4:a3:0f:df:79:
                    90:38:36:7c:1b:56:5e:44:9f:20:b5:ec:ce:ab:05:
                    e0:6d:35:df:1d:08:8c:d3:dd:74:5b:60:fc:2d:b1:
                    a1:dc:a9:4b:7c:96:b4:65:4b:06:e5:cf:9a:7f:a5:
                    4f:94:36:99:40:c5:40:28:e1:10:9a:14:81:ba:93:
                    28:bd:7f:02:cc:6b:b2:b6:9e:83:a6:c4:66:a6:4a:
                    b2:3c:d7:65:48:8c:fe:ae:91:f8:2a:fc:cb:e1:ed:
                    f6:35:bf:cb:14:44:31:27:32:af:e9:df:84:0b:22:
                    76:65:dc:4c:4f:cd:36:f8:dd:d0:fc:d1:7a:c9:9f:
                    92:ff:17:4f:fa:40:14:68:ea:01:c1:5b:bd:52:18:
                    ee:83:02:43:3d:37:83:19:d7:4b:97:24:b5:63:0b:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:69:7A:6A:78:25:E9:56:BA:42:75:89:C5:7C:F1:10:7F:06:4F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/38bc1d74-81e1-3524-b3c8-8d395773d081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:9a:6c:ea:76:8f:aa:99:46:0d:72:92:1a:c7:b0:be:e3:
         d6:dc:3f:79:0f:b5:ee:89:5c:01:07:33:03:13:c1:ac:09:9c:
         e2:0b:da:ad:79:f1:a6:1b:7d:4a:5d:97:27:87:3b:49:f0:14:
         f8:b3:0d:1c:c7:6d:fb:5d:5d:bf:e3:e6:d5:7a:18:82:31:a8:
         95:d9:dc:a9:06:14:4b:97:a9:97:24:30:7f:18:da:1c:85:7d:
         3c:8d:cc:c9:6b:a4:22:93:13:5e:b8:15:e5:0e:05:c0:7d:7f:
         84:4c:a0:7b:e3:54:af:d5:de:9e:7b:1b:a8:02:45:3e:cd:4e:
         b0:73:e7:6f:7b:68:61:62:f3:2d:cf:79:2a:f6:8b:81:b5:f2:
         34:96:9c:ee:38:8c:fe:4e:9b:45:57:3a:cf:c0:c0:a1:c3:6a:
         7e:7c:6d:b0:8a:65:5b:94:a4:5e:41:a3:fe:be:84:0b:fe:15:
         92:44:da:55:2a:e3:4e:e1:48:b4:b7:e9:f4:de:e7:0b:20:e6:
         e2:5a:0e:96:34:58:31:db:4b:7a:0e:93:bd:fc:a0:97:48:f2:
         31:b7:af:06:a1:a6:28:7f:f2:26:32:a3:69:56:33:e8:49:64:
         02:4e:6d:3a:6f:18:be:45:cb:01:7d:f6:23:5b:c3:27:2c:6d:
         6e:74:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:33 2024 by rpki-client on console-fra.rpki-client.org