Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa
File:                     6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa (raw, json)
Hash identifier:          mSCwr2K5fFOsMMQPyJHG61HDDICoJm/0y6iuccLoHJQ=
Subject key identifier:   32:EE:6F:E5:31:8E:A2:F3:D2:D7:48:32:DB:C6:05:05:F7:16:05:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DD3F0AC3DEBFE415B280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:dd:3f:0a:c3:de:bf:e4:15:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=38075398-ed1e-4b2a-a4eb-928e79832ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:04:36:e0:4e:74:9e:e3:04:1c:eb:39:6a:
                    5c:5b:85:fc:42:88:1f:2d:9d:2c:a9:50:34:1c:fc:
                    c1:21:23:11:87:68:9e:e5:cf:3e:d3:32:b6:ba:5b:
                    39:22:62:db:64:5d:94:b5:d3:6a:68:4c:7f:c2:d8:
                    2f:5e:a2:e0:87:da:41:73:d1:e7:5e:bb:76:52:48:
                    bc:2e:41:36:86:e3:2d:04:85:31:78:a8:d6:02:86:
                    a7:3a:7f:c6:67:93:c3:d1:27:37:85:ff:3e:37:66:
                    d0:e8:5c:ef:b1:1b:dd:b5:a6:dd:63:07:b8:ec:39:
                    53:38:6d:e4:7c:f9:f3:7e:e4:c4:6d:d5:4b:4c:7c:
                    54:7f:ef:3c:f3:02:05:11:1c:79:ed:aa:e8:ed:77:
                    ac:8b:14:44:67:6d:50:6a:2f:e6:fc:6e:12:ab:df:
                    a1:4b:26:8e:44:53:b1:77:b9:17:4c:b4:e8:34:dd:
                    47:4e:79:dc:68:10:55:a0:85:33:3f:24:50:53:db:
                    ee:f9:eb:03:ee:02:23:79:57:5e:19:72:82:eb:a6:
                    1e:fe:3d:4a:b6:4f:0f:a4:24:08:c9:e1:f4:b1:cf:
                    7a:3a:96:a9:79:f9:eb:be:2a:82:b9:47:88:e5:78:
                    f6:8b:f6:8f:1f:ae:93:3b:97:60:25:14:14:fc:2a:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EE:6F:E5:31:8E:A2:F3:D2:D7:48:32:DB:C6:05:05:F7:16:05:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6929a5de-ce14-345b-8f6f-a1d3a67496f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:10:50:c7:07:d2:45:12:34:6b:3b:ec:5d:0e:ff:0a:ac:bd:
         6f:29:5b:9b:b2:f9:4c:18:4a:f8:43:27:18:76:ab:b5:d6:06:
         0f:7d:87:e0:79:38:23:59:b9:dc:a2:87:30:89:e3:46:06:1b:
         93:86:fd:ba:12:56:ff:7d:8e:83:59:dd:ae:23:2e:76:1f:7a:
         77:0e:14:2a:03:c1:12:ee:37:c0:97:f5:bf:16:0c:07:93:64:
         6c:12:a4:21:c0:ef:59:1a:af:65:b8:36:22:ce:9f:53:d6:6e:
         30:27:f6:0e:f9:b2:db:ff:c3:63:f7:bd:ce:15:21:26:38:ca:
         3b:62:01:f8:5a:32:e9:00:2b:b0:54:d3:27:b9:87:2d:16:e9:
         53:fb:42:cf:87:41:9f:b2:36:09:ef:08:0f:67:6c:91:d7:1b:
         b8:02:ae:da:7d:07:12:7a:83:70:6f:b0:d6:44:d5:b0:a6:4e:
         27:1c:4b:6a:c6:29:ce:f4:2e:fa:7d:cc:9d:88:91:cb:fe:c9:
         28:94:8c:f3:7c:5f:48:d5:bd:9c:3e:b3:10:eb:73:88:b3:5c:
         e5:0a:4a:5b:df:c1:5e:19:01:96:cd:24:5d:15:2d:88:13:4a:
         22:eb:96:15:11:7f:0a:41:9c:ee:af:51:97:c6:ac:54:1d:3c:
         93:8a:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:31 2024 by rpki-client on console-ams.rpki-client.org