Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
File:                     df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa (raw, json)
Hash identifier:          b8uNg2ZYvlAEBrb9obHbQNR5sZZAYVNqJCE4/8P2BBg=
Subject key identifier:   CE:BC:FE:DC:F1:DF:C2:A0:52:8C:21:90:18:A0:C0:C3:26:D8:57:FA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D404A1FBD45D568838841770
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     209854
IP address blocks:        166.88.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a1:fb:d4:5d:56:88:38:84:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=e885e392-556c-4ba2-8fb8-9a218a59f358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:68:7b:cb:f2:2b:21:a2:ad:68:3a:74:46:
                    fb:f2:75:dd:d7:de:ca:48:8f:b0:82:5c:69:c7:d0:
                    bd:cf:12:e4:b5:49:50:b8:55:6c:31:5c:65:61:5c:
                    10:d1:ae:18:80:b3:be:d6:d9:86:11:aa:0a:23:49:
                    af:79:78:5c:24:63:57:29:aa:77:49:73:36:06:9c:
                    7c:e2:e9:75:aa:0d:1a:4c:5c:75:e0:b1:a3:49:76:
                    7a:9c:3b:0d:94:d4:30:73:35:1c:c5:0e:14:8c:1b:
                    ae:1e:e0:c2:60:69:36:ea:29:de:f8:71:63:99:75:
                    ca:87:b3:1e:9a:41:e2:df:99:0a:66:ed:ab:3b:1e:
                    1a:79:f6:4d:54:76:c9:f0:3a:49:38:65:9c:3b:7e:
                    1b:8e:00:ad:d0:f2:ce:46:d7:7a:4e:bc:a0:db:c2:
                    3f:d4:b0:3e:28:20:9c:9c:47:b8:8a:1d:58:15:fd:
                    d0:03:0d:55:9e:5e:fa:9d:f0:42:70:50:db:27:25:
                    7a:5f:2e:0a:10:7f:80:ac:e7:d0:c1:ea:f6:1b:e5:
                    50:9d:db:3c:8e:cf:f7:4a:56:94:ec:79:1f:c1:0b:
                    23:96:e1:a7:c5:ba:4f:cc:03:6c:78:25:41:81:c1:
                    16:7a:11:c8:53:4d:84:dc:cb:a8:4c:00:4c:2b:fb:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:FE:DC:F1:DF:C2:A0:52:8C:21:90:18:A0:C0:C3:26:D8:57:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df96cebe-5e13-3f30-ae5c-9d42045eaa06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:7e:f1:70:e5:21:d1:41:77:d1:0a:30:09:6d:01:d9:59:
         ca:78:c0:28:e3:b5:51:55:22:e1:7a:1d:03:6b:29:6e:5a:7f:
         27:a2:b0:9d:eb:1f:d0:ca:a5:76:c8:7b:72:2c:34:e9:64:56:
         f9:08:88:e8:68:5a:be:ce:3d:77:9c:43:7c:cb:9e:f9:b0:6e:
         58:28:2f:8a:e6:33:9e:4f:e2:bf:a9:b6:4d:f3:0c:f3:7b:76:
         82:30:8d:92:6e:d6:49:fc:5d:f1:55:ce:c9:1a:ca:46:2f:c8:
         84:a6:6e:07:3a:31:9a:37:9f:90:f7:ef:33:4f:4a:a1:42:d4:
         09:b0:60:2c:fa:40:f0:0d:ae:3c:46:a3:83:1d:63:e4:68:53:
         d3:d5:fb:c3:72:f2:e0:45:71:80:1d:f6:8d:a2:8e:af:e7:1d:
         ae:ef:38:77:25:2d:18:31:c9:e6:78:ae:a3:39:b4:82:59:78:
         55:66:5f:03:6b:6d:18:05:f2:9f:94:42:6a:67:35:d8:cb:31:
         60:8b:c3:c6:06:fa:9d:eb:89:23:73:5e:36:37:24:f0:4c:64:
         e8:69:af:f1:60:4f:22:47:d6:47:bd:db:eb:b0:60:82:f1:13:
         1a:c5:c8:e0:95:a5:d3:6e:fb:55:7c:df:1f:3c:c4:83:68:b2:
         3b:79:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:38 2024 by rpki-client on console-ams.rpki-client.org