Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36fbde8b-4b39-379e-a4ef-439fe7b508c5.roa
File:                     36fbde8b-4b39-379e-a4ef-439fe7b508c5.roa (raw, json)
Hash identifier:          OIRUzDYosLZRBAJosGOqM3AdIxeGZEQT+w/78srnn8Q=
Subject key identifier:   4C:EA:E4:06:EB:49:27:8D:08:39:D7:89:54:0C:25:34:69:F0:21:CB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A67A46A749FDAA2EDA06D080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36fbde8b-4b39-379e-a4ef-439fe7b508c5.roa
Signing time:             Thu 24 Oct 2024 18:30:30 +0000
ROA not before:           Thu 24 Oct 2024 18:30:30 +0000
ROA not after:            Wed 22 Jan 2025 19:30:30 +0000
asID:                     395793
IP address blocks:        166.88.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:7a:46:a7:49:fd:aa:2e:da:06:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 18:30:30 2024 GMT
            Not After : Jan 22 19:30:30 2025 GMT
        Subject: CN=9c2717f1-daf2-461f-b35c-c37e93bc43ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:6c:d5:fe:5d:b4:ed:e2:84:36:32:7b:67:
                    65:94:42:69:ac:ea:f9:a0:1e:27:a6:88:f3:c7:d6:
                    2f:f3:35:b0:10:bf:be:ee:be:43:17:e5:7e:6e:f7:
                    35:da:45:df:5d:c8:3a:3f:37:0d:0d:4d:b7:c1:df:
                    35:6d:c6:58:47:ae:d5:c9:00:f3:62:11:ff:fb:7a:
                    33:8e:ad:9c:60:94:bb:b3:d7:9c:01:b9:07:b1:0b:
                    35:24:c0:42:dc:f9:29:8d:32:1e:65:d5:23:f6:56:
                    94:1e:f4:e5:72:34:96:1e:6e:74:12:61:d9:c2:3b:
                    1f:6d:64:46:80:38:9d:de:41:b1:0b:b7:23:f7:9c:
                    33:f5:3f:79:3a:56:98:ba:64:5a:f2:5d:b2:e6:db:
                    e5:08:06:e9:46:1e:71:fa:81:fa:3d:34:73:bb:ad:
                    7b:44:aa:8e:f4:16:d2:ff:5c:bf:5c:88:e2:0a:fc:
                    0c:04:f7:56:a5:da:98:6d:8c:fa:84:fa:c0:99:b6:
                    2c:a1:29:c6:51:92:84:da:a4:27:4f:71:a2:f2:83:
                    8a:78:15:6c:fe:ef:35:4c:1e:18:bf:56:20:15:9b:
                    40:ef:ba:fa:4c:58:2e:60:a4:16:20:f6:ba:b6:b9:
                    66:a2:ea:05:5f:d7:ca:3a:40:13:0f:6a:8e:16:00:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:E4:06:EB:49:27:8D:08:39:D7:89:54:0C:25:34:69:F0:21:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/36fbde8b-4b39-379e-a4ef-439fe7b508c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:bd:fb:a3:2c:28:64:9f:3e:96:e0:46:b6:2b:0b:94:9b:
         6b:4a:f6:2e:b3:d6:79:ac:a5:15:8f:aa:6a:b9:5f:37:9b:f4:
         ed:ca:82:65:8f:b5:4b:97:59:9d:75:c7:b5:3c:22:90:ce:60:
         8a:0c:78:90:8a:11:96:d3:ba:74:04:a3:b0:b6:6c:2d:69:4f:
         c6:61:d3:05:d2:14:94:ee:b2:90:0d:4a:d5:37:6d:1c:71:b3:
         89:78:af:55:00:73:2c:01:68:a5:04:79:f2:5c:66:64:90:04:
         99:05:53:62:94:21:9f:95:49:3d:3e:fa:90:ff:f6:73:82:a9:
         19:5d:02:84:e5:1d:32:3e:f4:ac:be:9a:c8:9b:16:fb:17:8b:
         31:b1:a8:77:0e:b0:80:fe:c2:28:0a:eb:95:50:a7:0b:0b:42:
         7e:3c:f8:87:e5:08:ef:7c:70:31:66:88:c2:4a:0b:1e:05:86:
         6a:6b:35:8b:c2:6e:65:f4:de:66:69:f0:dd:3a:69:3c:b1:90:
         12:2a:16:6e:72:60:13:f7:63:6c:2c:0a:e2:06:26:0f:ca:0d:
         64:58:dd:43:74:bf:5d:df:13:7f:15:72:da:29:4e:b6:9b:cc:
         f6:9c:76:a1:36:5b:3b:05:b7:6c:43:c3:99:e8:ae:3c:b7:a3:
         3a:a5:ec:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:30 2024 by rpki-client on console-ams.rpki-client.org