Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa
File:                     97323aa4-4c62-3939-8fc0-39273a9a2b71.roa (raw, json)
Hash identifier:          oVfUQo33NCaykEqKeg7xzs20x1u7BNVEV1MVBYeKv1k=
Subject key identifier:   21:FA:EF:C0:55:B5:24:9D:E2:58:2A:3E:98:B9:8B:D9:B1:3E:86:4F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CA3F756B9A9300CEDA4E8340
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     149440
IP address blocks:        166.88.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:75:6b:9a:93:00:ce:da:4e:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=20eb6db6-8fc0-4358-b952-31ad8bc843c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:b8:ad:ed:01:53:c4:6d:19:01:c0:5b:4a:
                    62:2e:dc:00:64:9f:7e:21:9f:26:e8:bb:d4:31:fb:
                    8a:d3:35:86:f3:fa:fd:f5:e0:24:b3:af:78:24:eb:
                    82:08:bf:4e:8f:60:a1:1d:0f:88:02:fe:7c:37:8b:
                    c3:af:d9:91:ac:de:10:87:3d:33:68:1a:27:0a:a1:
                    c6:e5:6a:c8:9e:3a:06:23:4b:86:15:c8:85:32:1d:
                    b2:1b:4b:ca:88:22:18:86:62:f2:89:17:cd:c8:70:
                    5b:1c:65:47:f3:fe:e4:27:4e:b3:81:22:9a:2b:03:
                    7a:5c:ee:81:4e:b5:c3:0f:d1:f4:b8:57:84:d3:ca:
                    a4:68:2e:e1:61:02:00:7b:5a:b4:55:a3:80:2f:b8:
                    17:07:f3:56:d8:fc:01:9b:b5:56:34:3e:29:a7:55:
                    e4:66:c9:59:3d:2a:1d:51:dd:04:79:c0:ad:f9:b6:
                    bc:ff:bd:31:ec:04:29:2f:e1:7f:44:25:8a:21:33:
                    d6:e2:2e:35:7e:c5:4b:73:4a:ce:29:65:1c:73:e9:
                    fc:00:95:84:33:f3:84:00:7f:9b:89:0d:ab:d0:29:
                    1c:3e:f3:6f:1a:08:f6:fc:b1:46:9f:30:ea:4e:62:
                    c5:85:fb:3b:21:f9:cd:f5:de:ed:5e:5a:63:de:de:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FA:EF:C0:55:B5:24:9D:E2:58:2A:3E:98:B9:8B:D9:B1:3E:86:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97323aa4-4c62-3939-8fc0-39273a9a2b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:c5:e9:ec:a7:fd:10:61:a7:26:24:1b:1d:2e:de:1f:02:
         a8:ed:86:0f:bf:f5:7c:2b:1a:6a:1c:ab:8c:ef:6c:51:97:4d:
         25:d8:c7:4e:f7:7c:d9:7b:5b:b3:65:09:bc:96:4a:16:53:ff:
         34:5e:e0:32:d2:8f:fe:06:ab:5d:59:9d:00:bb:76:4a:fc:ff:
         f9:8d:bf:56:ac:5d:ea:6a:bb:4f:0d:8b:7d:97:74:2c:11:4c:
         ed:b2:f7:b9:e3:25:0d:1b:2e:e9:4a:15:da:25:83:44:b0:e8:
         8f:46:e6:c5:fe:67:d2:e8:c9:ee:af:8e:24:0b:69:04:bd:92:
         9a:38:06:89:e3:0e:e1:c5:f0:95:33:0b:e5:18:06:97:66:6e:
         f7:c2:a7:a8:8b:0c:1d:e0:69:51:35:84:4f:6b:10:5a:f2:20:
         10:3a:9e:e8:8e:6d:b4:e9:f9:a6:2a:07:c3:89:a9:91:f9:24:
         18:2e:da:e3:63:d6:10:f0:94:43:5c:08:88:3d:42:29:b1:81:
         86:bc:c6:65:f7:cb:47:01:30:d0:47:8d:a0:b0:36:21:38:d3:
         40:79:e0:a1:e5:e1:98:1f:b4:c6:17:f6:ba:8f:84:2c:54:d0:
         69:e5:7d:69:41:2b:9b:fb:fc:63:e2:eb:81:01:e3:70:49:7a:
         da:7b:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:55 2024 by rpki-client on console-fra.rpki-client.org