Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa
File:                     8d23c4fa-8881-3757-874e-a5c9212614c8.roa (raw, json)
Hash identifier:          uQ5DhNkCX5XBrXwj0196d5cTkBuwZ4eM/kXmpGgsUqI=
Subject key identifier:   2F:0A:79:0E:4F:34:4D:75:83:F7:4B:9A:08:BC:4E:7D:B6:17:E7:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DCDF965CD662237E1500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:dc:df:96:5c:d6:62:23:7e:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=72ad796f-638d-4326-a631-a9827c4ce38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:29:50:d4:0b:c0:48:3b:c7:7f:8d:9a:30:06:
                    bc:14:33:94:75:f3:44:94:ac:69:ac:b7:aa:cf:4a:
                    dc:af:b9:27:09:b4:2f:69:e0:48:6c:f8:b9:02:bf:
                    a0:9f:ab:5f:d8:47:7c:57:46:ba:15:6b:1a:a2:04:
                    7d:58:c6:d4:f2:c9:c8:46:81:b9:35:87:06:2c:3e:
                    b9:ac:89:b7:14:0b:09:0a:03:7f:01:cb:01:84:87:
                    78:25:19:e6:e8:f9:9a:22:4c:58:d7:46:1d:34:25:
                    af:ce:19:2a:bb:4a:ec:fe:1c:b3:c9:03:54:88:47:
                    ba:80:c9:ec:43:26:ed:e4:b8:15:a9:74:57:1c:0d:
                    7b:06:74:0d:87:bb:5c:92:73:c3:29:86:b3:56:7c:
                    6a:34:7f:7e:4a:29:10:6d:c5:da:52:41:68:59:f4:
                    6a:df:b7:df:a4:e5:c6:a2:94:4a:56:c9:10:df:f7:
                    89:7a:3d:62:b4:a8:4f:e7:b5:ff:da:c8:73:2c:27:
                    39:cf:f8:51:bc:f3:13:c6:bb:35:d0:2c:fd:9d:01:
                    60:2b:e6:04:e3:72:c2:82:13:54:e5:4c:2d:76:99:
                    18:09:b5:be:71:73:19:e5:d8:12:1f:fe:f5:a3:e6:
                    cb:0c:c4:50:db:6d:91:28:6a:40:55:06:2b:72:03:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0A:79:0E:4F:34:4D:75:83:F7:4B:9A:08:BC:4E:7D:B6:17:E7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d23c4fa-8881-3757-874e-a5c9212614c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:d3:7d:29:72:64:f6:59:f9:c7:50:cd:21:64:77:83:fe:
         85:16:e5:4a:4d:80:2d:22:a8:4c:f8:af:06:28:c9:e2:3c:ad:
         f9:54:8c:2b:58:e0:39:85:34:c7:d4:f7:a8:a1:d9:8c:9e:af:
         51:2e:b4:da:6b:69:96:37:e6:6c:c2:93:45:48:80:86:72:b4:
         71:e4:88:43:ec:54:15:b8:a0:96:f2:de:14:93:6a:40:26:08:
         d7:99:11:bd:51:4e:d5:d2:20:1b:5e:aa:18:0e:5e:ec:88:51:
         57:5d:85:e7:25:71:7b:ab:ed:e3:da:5e:18:56:2c:c2:f8:b4:
         bc:1d:db:60:af:06:24:65:aa:a0:ea:0a:df:c6:b4:53:3a:42:
         f7:b9:c4:c0:1a:99:54:5c:71:a8:03:9d:8a:85:d5:ac:9d:56:
         8e:da:4e:8b:95:f3:8a:9e:f3:53:5f:eb:ed:da:7b:ac:ea:df:
         95:66:18:34:a1:07:50:11:25:f8:cb:5c:95:a6:30:ab:93:8a:
         79:27:f3:b5:e1:fd:df:a8:a7:19:29:e3:29:f2:90:01:ae:b4:
         03:44:71:e9:80:2f:ad:ba:cc:d1:7d:1d:0e:a3:c9:1e:e4:f2:
         94:17:a3:d9:23:10:b4:25:c3:fd:e0:a7:6f:41:54:c0:cb:2e:
         23:bf:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:32 2024 by rpki-client on console-ams.rpki-client.org