Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a86a8327-10f3-3379-86fc-8b5fd73ddb79.roa
File:                     a86a8327-10f3-3379-86fc-8b5fd73ddb79.roa (raw, json)
Hash identifier:          jUzmpl7ReP9Yrj1HXin5mThHLcNhC9VsDvMxKjXoZ6w=
Subject key identifier:   58:DF:C2:92:34:FC:FC:FF:74:24:B5:7F:D7:EA:EB:39:6A:66:75:F6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4DBF796E333D7834EB3C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a86a8327-10f3-3379-86fc-8b5fd73ddb79.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:db:f7:96:e3:33:d7:83:4e:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=c866f02a-5bef-45c6-a608-e0cc8f618db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:a2:c8:4d:b1:02:f2:ab:a7:21:f5:09:6a:
                    20:59:d7:fa:a8:5a:59:5f:ef:2f:17:cd:d2:22:f5:
                    11:a9:46:fe:31:ca:f3:79:25:72:e2:76:d0:db:46:
                    af:45:87:a3:b8:95:83:37:a0:b8:f0:1a:38:3e:6e:
                    b9:ac:1a:72:54:2d:94:02:16:a5:d8:c2:44:7b:3c:
                    65:ba:51:e3:a6:29:58:cf:cf:85:c6:e6:3f:3f:03:
                    68:5c:6c:0f:00:1c:4d:46:75:2e:a6:41:51:81:ac:
                    22:df:0d:15:b1:fe:d2:59:20:6f:ca:97:9c:b0:3b:
                    14:fb:d4:17:ee:58:e6:93:52:10:66:67:91:cb:ca:
                    f1:68:8a:b2:26:9f:75:03:18:34:2c:cc:f3:cb:ce:
                    a5:83:11:e5:0d:42:48:e7:49:f3:0b:20:a9:a9:f2:
                    06:20:c3:3a:b9:e5:20:f9:7d:7b:7c:d6:40:ff:87:
                    90:fe:1c:f1:03:15:b7:d7:98:c6:27:3f:d7:b1:49:
                    6c:08:16:6f:1d:4a:18:64:f2:03:87:a5:32:44:36:
                    5c:a0:d8:d8:08:82:69:57:fc:9f:fa:97:b8:f3:a8:
                    44:f4:c5:9a:bb:bb:3f:4d:c1:af:ac:77:75:b6:d5:
                    79:57:08:6d:7a:51:29:e9:a2:71:1f:ff:60:7f:2d:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DF:C2:92:34:FC:FC:FF:74:24:B5:7F:D7:EA:EB:39:6A:66:75:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a86a8327-10f3-3379-86fc-8b5fd73ddb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7e:6e:86:24:06:b2:17:32:9d:ec:ea:39:eb:36:7e:7b:d3:
         32:c0:0f:d2:c3:ee:c5:a4:cb:56:c9:5b:0d:33:fb:42:18:2c:
         4d:30:c0:42:c8:54:1c:c4:9d:10:9a:0d:53:61:3f:1f:98:b7:
         bc:c9:08:41:53:4e:41:08:b3:75:c4:9e:5a:2e:fc:d2:78:9b:
         69:8d:6b:7f:89:1b:36:de:5c:0c:b8:3a:42:0e:7e:a3:50:ca:
         db:4d:5a:01:a9:15:75:ed:d6:3c:f6:c7:96:8f:bb:ee:d8:c8:
         1b:2f:2b:f6:4c:9e:9b:0e:c0:d3:7a:b1:92:17:8b:65:17:53:
         6a:2b:db:e3:f6:47:87:d9:47:88:59:e5:9e:54:6e:10:92:46:
         ce:05:60:c7:01:bc:83:2a:ce:be:49:1e:39:ec:8e:a8:28:ac:
         ca:9d:35:16:fa:27:f8:66:9f:07:fa:da:df:10:01:b1:09:e1:
         94:06:44:a8:67:df:08:67:7f:25:b8:ca:44:a8:bc:9e:5d:2d:
         1b:8d:a7:3d:3f:8b:d7:bd:6c:39:08:72:fb:2f:98:7e:81:dc:
         17:c7:92:f6:22:02:69:5e:28:c5:3d:11:2b:e0:23:bd:2f:90:
         a2:ae:29:fe:45:f1:ac:7b:a7:38:54:c6:42:8b:ed:d9:3e:10:
         69:4c:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:56 2024 by rpki-client on console-fra.rpki-client.org