Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa
File:                     cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa (raw, json)
Hash identifier:          krGvECI+mlhEw8pVxhpKsCk4OKysSgWev9TFW4utAUE=
Subject key identifier:   E0:A0:9C:61:B2:31:B4:27:6E:89:12:18:FB:C9:6A:82:DD:9A:DC:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584792C8A824ABF7952A3247F880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa
Signing time:             Thu 17 Oct 2024 17:12:16 +0000
ROA not before:           Thu 17 Oct 2024 17:12:16 +0000
ROA not after:            Wed 15 Jan 2025 18:12:16 +0000
asID:                     9009
IP address blocks:        168.93.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:c8:a8:24:ab:f7:95:2a:32:47:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 17 17:12:16 2024 GMT
            Not After : Jan 15 18:12:16 2025 GMT
        Subject: CN=0e7be4c4-2b54-48ce-bcf8-5cefc63d2e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:26:4a:88:9d:58:60:ab:ed:9e:bc:22:a9:
                    63:56:99:ef:70:a8:c0:6d:0e:55:a3:4e:75:a6:b9:
                    43:de:d2:1c:80:12:76:64:fb:c5:5a:26:45:f7:5f:
                    04:2c:68:3e:08:6c:c4:55:97:9f:f7:db:fb:44:66:
                    54:d6:81:e0:6e:eb:7c:f4:1e:1e:a6:c8:33:30:9d:
                    be:79:b8:af:75:ca:cd:40:23:ef:cf:b0:50:72:ac:
                    52:42:ee:6e:30:83:7b:d6:c1:fe:fb:a0:d0:85:99:
                    21:06:12:d0:df:02:2a:c3:7f:7e:07:d4:2b:49:48:
                    00:f3:6b:d6:a2:a7:59:ce:2e:4d:05:dd:ad:61:fb:
                    5d:1c:42:00:2f:48:d2:d4:c6:38:3c:16:bd:e6:d2:
                    1b:76:a3:6f:f5:e3:0a:72:8e:77:c4:41:ea:bc:f9:
                    34:b3:ff:f3:e1:b2:1a:e2:14:df:cd:c7:66:ec:72:
                    5a:b4:75:97:06:f0:72:da:91:ad:17:5a:04:c0:c0:
                    29:6d:fe:cb:7e:23:ca:4d:98:56:17:8f:ca:7e:5d:
                    96:dd:50:91:83:a3:90:4f:66:b3:c2:0d:70:28:3b:
                    a5:3a:dc:a8:57:19:09:21:9e:12:18:91:de:10:7f:
                    09:13:00:a1:d7:be:52:59:6a:77:a9:83:8c:d6:23:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A0:9C:61:B2:31:B4:27:6E:89:12:18:FB:C9:6A:82:DD:9A:DC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cca89fef-8fef-3f64-b661-9b4e3eb8ca98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:86:d6:e7:df:bf:06:8e:87:a3:1b:9d:1d:06:d3:33:26:
         23:4a:b8:f8:28:ae:19:22:0f:68:f0:fb:7b:db:32:c7:a2:36:
         97:da:90:90:2f:dd:06:00:72:b7:7d:23:63:11:c9:ce:3d:44:
         9e:91:3a:a7:a8:a6:12:25:dd:ca:5c:cf:f2:c0:c1:b2:66:2a:
         3a:66:fd:91:97:6e:f8:9f:cc:d7:6b:dc:d6:fb:8f:55:8a:93:
         ae:42:8c:45:39:8f:8d:59:e3:b1:dc:7f:e1:d9:9d:65:93:b7:
         4c:0f:56:11:40:d4:d9:3a:3a:81:16:14:65:7e:8e:a1:82:49:
         05:eb:4b:df:46:1d:7a:5e:f3:f6:eb:51:aa:13:8e:30:de:b8:
         94:d1:4c:b1:f4:22:f8:bf:41:bb:68:8e:f1:0e:a0:bc:9b:b2:
         2c:06:6b:cd:c6:c7:5a:d3:6e:25:46:32:cb:a9:bb:0a:26:e5:
         c0:96:93:7d:d2:c1:06:af:5e:01:cf:3b:31:b0:16:5b:27:02:
         48:de:60:4e:6d:9f:6e:a5:c0:09:d7:a4:84:dc:b3:2a:e3:50:
         36:cd:1d:de:72:b6:b1:5b:8a:58:c7:c7:47:3f:64:b0:03:8f:
         5d:c9:0f:ae:60:b2:b0:bb:68:6e:50:c6:ea:26:ce:02:a7:2e:
         9b:51:a2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:57 2024 by rpki-client on console-fra.rpki-client.org