Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa
File:                     2d4f8043-29be-3a85-bf94-295cc860e108.roa (raw, json)
Hash identifier:          0tJ8X9YSD9hBs5dzvA677LvTIpfQjAswXQ8uSp0OPZk=
Subject key identifier:   CC:DD:5A:45:97:EB:21:A6:3A:00:41:91:07:94:CE:17:7E:A3:99:A9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D834C0A50092F637F1CF8C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     3257
IP address blocks:        166.88.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:c0:a5:00:92:f6:37:f1:cf:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=6d15e8e1-ddd2-4106-8521-9312fc76cb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:7c:0a:75:8f:d0:c0:99:c7:f1:a8:10:c0:
                    54:19:1b:c9:b8:43:43:63:f9:84:bd:a3:f7:ff:3a:
                    b8:76:78:81:1c:d3:f4:4a:c4:c8:0b:6d:95:70:06:
                    36:0f:73:36:99:d1:62:a7:e2:de:60:e8:07:79:b4:
                    2f:c0:22:33:25:d7:ad:e4:d8:e1:41:90:74:38:58:
                    f2:d8:6c:6b:e0:02:5b:81:ad:83:0f:e5:5a:6b:5e:
                    a9:dc:4a:7b:d0:34:c0:84:9d:39:8a:a6:59:1b:d9:
                    4d:ae:1d:a1:96:4e:ec:e1:68:f3:94:ca:20:2e:9e:
                    43:9f:b4:59:25:0a:a8:72:fb:9a:3f:64:9b:5a:c3:
                    e1:52:38:78:60:6a:53:bd:ce:1c:cc:24:a7:0f:8b:
                    0a:d0:2b:1e:59:01:e8:92:0a:1b:9b:35:84:9c:e0:
                    d1:d0:63:26:d2:6d:4a:fd:12:ef:d7:c8:95:69:c8:
                    b9:33:39:aa:32:2a:13:44:38:5c:1d:46:cc:9b:6d:
                    f2:fb:bb:c5:fe:09:59:9a:c6:8a:40:1b:b6:fd:11:
                    a6:3a:0a:28:e4:cd:e0:be:fa:dc:f4:d6:78:54:0c:
                    d7:31:ee:aa:77:dd:03:a0:3a:3d:68:25:9a:51:6a:
                    a1:d9:57:71:4b:b1:9b:b9:8c:e2:07:18:93:3d:ee:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:5A:45:97:EB:21:A6:3A:00:41:91:07:94:CE:17:7E:A3:99:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d4f8043-29be-3a85-bf94-295cc860e108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:9f:57:69:b5:b1:e3:39:d9:b7:c7:ef:44:76:ee:eb:e9:
         5d:f2:24:fa:5c:0c:6f:5a:28:3a:21:6c:79:75:81:31:d2:9c:
         6f:78:b6:de:1e:2f:0c:c3:76:e4:9d:5c:a5:f9:08:9a:3d:ca:
         78:0e:50:69:ed:fb:c6:ac:31:3d:99:d1:a0:02:63:aa:59:fe:
         47:c2:90:95:34:f8:66:5a:02:e4:97:63:33:4b:86:34:20:99:
         dc:e1:8a:36:c4:1d:79:15:b2:35:f6:1b:43:18:52:10:1e:7f:
         67:b4:38:35:3b:ce:32:db:48:cb:71:44:c0:6a:2d:4d:48:9d:
         83:c8:da:db:81:f9:43:cc:43:04:b0:9b:ab:46:9d:5a:76:cb:
         68:bf:29:bb:8d:dc:0a:a2:a9:e0:9e:1a:6d:47:cb:97:63:e6:
         2b:13:c2:6e:61:cc:e1:68:09:a1:39:fa:ff:46:79:e4:81:54:
         bf:13:af:e9:d4:81:73:9b:23:e2:02:62:55:4f:da:a7:a7:0a:
         1d:02:a7:be:ec:17:fd:43:4a:d1:0e:86:63:03:3c:22:f2:b4:
         15:9c:27:4f:89:b5:b9:36:65:37:16:f6:a7:c7:f9:af:8e:01:
         ad:34:90:c2:e7:78:fb:a2:5d:fa:b7:6d:e3:e5:0d:c4:b8:d0:
         ce:5a:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:53 2024 by rpki-client on console-fra.rpki-client.org