Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa
File:                     cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa (raw, json)
Hash identifier:          h3eG7nE9TnrGeO4Fu5bzrX58TC03faKoCG4C6Vu7UN0=
Subject key identifier:   9C:BC:71:7A:B2:32:78:08:EE:4D:3C:E9:40:79:CB:68:40:7A:DE:3C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847CFD4E4064DC8699D2230A500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     18779
IP address blocks:        166.88.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:e4:06:4d:c8:69:9d:22:30:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2feee9ff-9cc4-43d2-be49-a47079fe625c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:68:4b:37:b4:0f:4f:12:7f:b2:e1:29:ec:
                    72:33:34:97:75:bb:d6:62:9e:82:31:1a:18:38:0d:
                    d1:68:e2:8d:dd:0e:ac:68:f3:40:b9:08:58:3b:1f:
                    40:56:13:f9:09:de:0a:6d:de:27:40:11:cd:24:e8:
                    7a:5b:5f:64:04:72:6a:7c:a0:71:a2:00:17:e8:33:
                    92:a3:be:1c:70:e2:e7:db:89:b1:62:eb:f1:35:fe:
                    dd:71:6f:a1:1a:62:a6:48:42:63:3a:66:d7:be:61:
                    3e:6f:cb:36:7a:53:f2:33:75:5f:4f:36:50:49:c3:
                    b0:c5:d6:77:dc:8c:ea:c5:5d:1d:75:56:bb:7e:41:
                    4b:23:78:7b:73:7a:83:66:eb:ac:d7:02:21:e9:4e:
                    9d:2c:cd:38:02:a9:e4:c7:4b:b6:0e:a7:c8:46:ba:
                    36:b0:f1:8d:85:15:b1:c1:ea:ad:e1:2a:76:07:df:
                    36:42:08:b4:67:5f:8f:aa:cb:39:96:70:fd:2d:d3:
                    18:03:e3:3b:2e:d0:f4:f1:40:49:81:e9:bf:d2:1a:
                    f9:8c:24:44:74:70:1d:10:1a:14:8c:16:bc:19:5c:
                    48:62:a0:14:26:69:e2:78:49:ef:8b:80:65:52:f2:
                    4c:7e:5c:dc:ca:f4:c7:b4:da:5f:a8:13:71:83:4c:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BC:71:7A:B2:32:78:08:EE:4D:3C:E9:40:79:CB:68:40:7A:DE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cd89ca28-97ed-3bd4-bbf1-c4067e23e4cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5b:eb:15:b9:4f:94:4c:98:53:72:50:6f:4d:58:d4:f4:35:
         58:c9:3a:d9:8e:20:d8:19:3d:f6:ee:ce:ab:1c:17:d0:97:28:
         dc:74:c7:68:ec:f4:a2:97:52:d2:51:ce:93:e9:06:8d:c7:23:
         b8:5a:e6:a6:db:5b:49:a2:60:a4:43:73:6c:79:50:db:80:08:
         17:27:6e:6d:9a:d0:b0:a2:11:b0:77:49:84:c8:c9:8e:ad:b2:
         a2:3e:aa:3b:28:e1:5f:02:08:b3:0e:98:0e:76:8e:f0:fd:2c:
         a2:65:c5:13:cf:82:a8:cc:0d:c4:f9:69:60:fc:a6:2a:60:45:
         72:ff:84:9c:d0:1b:1c:93:c8:10:8d:00:f6:81:c0:c2:6c:08:
         e7:7b:d3:4a:bc:10:17:10:fd:96:a0:6e:15:01:d7:d8:8f:ec:
         86:b1:bf:ff:f6:aa:ce:ef:9a:83:5a:e2:ea:30:58:19:31:bb:
         d2:f1:b5:71:d5:c6:ff:41:5a:ef:1f:8f:21:a9:6e:db:48:1d:
         18:86:e6:24:a9:21:27:49:87:05:61:ac:27:05:30:e0:ec:78:
         6a:93:65:3c:62:1b:8f:1e:98:74:e1:72:28:85:f9:18:2c:05:
         2e:d5:d4:e1:f2:bc:b8:7c:fd:ca:6d:34:68:75:2d:16:84:92:
         e7:bb:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:57 2024 by rpki-client on console-fra.rpki-client.org