Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad2d722f-5a55-3beb-aedf-2959564de331.roa
File:                     ad2d722f-5a55-3beb-aedf-2959564de331.roa (raw, json)
Hash identifier:          bkyxR7ap9hf5FTKi26XaAqK1LUkGLVhbgsPGcG4ppkM=
Subject key identifier:   98:EF:84:02:60:FC:7E:1C:07:BA:66:6D:94:3E:38:CE:05:02:BC:8D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846D8A5353B9D38D4DA51380480
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad2d722f-5a55-3beb-aedf-2959564de331.roa
Signing time:             Mon 12 Aug 2024 01:00:28 +0000
ROA not before:           Mon 12 Aug 2024 01:00:28 +0000
ROA not after:            Sun 10 Nov 2024 02:00:28 +0000
asID:                     2914
IP address blocks:        168.93.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d8:a5:35:3b:9d:38:d4:da:51:38:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 12 01:00:28 2024 GMT
            Not After : Nov 10 02:00:28 2024 GMT
        Subject: CN=e42d08fc-9c9f-47d3-8ab6-e2e796e4a18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:01:58:b4:fc:14:57:6d:ab:53:2e:e7:86:
                    50:47:f1:b9:35:5d:f9:a5:34:1d:19:5c:a8:43:9a:
                    10:4a:ed:bf:41:b4:e2:85:6a:69:f1:b2:6d:49:cc:
                    86:81:42:8a:47:c4:18:f1:29:26:86:35:05:4e:e8:
                    f1:d6:2a:06:9e:f1:c4:f9:d9:06:3a:8a:c0:a1:e0:
                    5a:69:c0:09:26:a0:e1:af:bf:2e:56:cd:eb:5f:b6:
                    a9:67:f5:fa:89:9d:0e:fc:41:ae:57:e6:1c:dd:6e:
                    5a:ae:15:9e:82:99:1a:d4:f6:e5:99:c6:94:03:c7:
                    6b:e6:63:3e:e5:94:b6:30:72:52:d3:b3:a1:f4:f9:
                    68:d6:c2:96:9a:d3:2a:4b:44:ae:92:54:f4:bb:28:
                    04:02:45:29:39:21:49:05:1b:9a:a7:4d:06:67:68:
                    34:24:14:d5:64:5e:3c:a8:d7:ee:c1:4f:a4:fa:b8:
                    98:a5:77:31:b9:aa:67:0b:76:23:4b:9d:ba:51:31:
                    8d:1c:ee:5e:cc:ec:4d:9b:17:eb:c7:23:3a:55:04:
                    48:84:71:3d:50:31:36:c0:ad:9e:b5:cf:8e:68:27:
                    1e:85:a7:8f:13:ac:3b:01:3a:97:14:a0:93:0f:e4:
                    9a:65:94:c1:d4:de:3e:50:94:a3:95:2d:0c:71:4a:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:84:02:60:FC:7E:1C:07:BA:66:6D:94:3E:38:CE:05:02:BC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ad2d722f-5a55-3beb-aedf-2959564de331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:db:f3:29:1f:a2:fa:5b:93:ef:b6:c8:c0:ad:31:26:7d:
         0a:21:34:e1:d2:8a:73:47:a4:eb:7b:81:1c:d6:8c:b8:ba:6b:
         d6:24:2f:55:cd:a2:67:e5:9f:bf:26:54:c5:10:11:65:c5:c6:
         00:13:b9:89:04:dd:1b:83:fc:c9:ba:1e:5d:1d:f4:c5:2d:77:
         1f:92:54:89:d5:c1:3e:68:b1:70:f5:49:a4:74:d9:b4:7c:2e:
         e1:b9:d6:e2:37:4a:27:8d:0a:31:00:6d:12:4d:35:08:8d:92:
         02:c9:da:be:6a:21:0a:68:94:74:fe:03:a3:83:df:73:bc:bb:
         0a:58:d6:31:5d:db:97:1a:41:74:b6:50:bd:12:e9:65:aa:6a:
         ed:61:5d:cc:8c:19:de:bd:c2:e7:51:c4:59:19:cb:70:e3:e8:
         3b:f8:db:58:57:05:47:fb:5d:41:5e:a7:1d:f4:50:16:24:e3:
         e7:27:fd:4d:7d:e0:e7:ee:84:63:b8:79:08:de:1b:8b:8f:71:
         dc:0c:91:a5:73:74:1b:26:97:35:a2:96:5d:df:4a:9c:95:0a:
         8c:c4:40:a6:7f:54:bf:58:9d:88:0b:f0:b9:b6:5d:e0:a1:c9:
         c7:3d:f6:d9:71:22:2c:4c:3c:5c:41:cb:00:ff:07:2b:91:aa:
         e7:2e:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 18:16:07 2024 by rpki-client on console-fra.rpki-client.org