Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9bf26dc-2b5d-3866-9cf5-d7de4348270e.roa
File:                     f9bf26dc-2b5d-3866-9cf5-d7de4348270e.roa (raw, json)
Hash identifier:          OCd4AAD9SRKjgKaU1KuANlpwhaqKimB50lyQtEid7Qw=
Subject key identifier:   9F:90:1A:3E:00:FA:9E:AB:1C:AA:EF:E8:01:2D:86:6A:21:26:7D:02
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847A69993DE6FD6FDECBE5495B0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9bf26dc-2b5d-3866-9cf5-d7de4348270e.roa
Signing time:             Thu 24 Oct 2024 19:33:35 +0000
ROA not before:           Thu 24 Oct 2024 19:33:35 +0000
ROA not after:            Wed 22 Jan 2025 20:33:35 +0000
asID:                     401152
IP address blocks:        168.93.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:99:93:de:6f:d6:fd:ec:be:54:95:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 24 19:33:35 2024 GMT
            Not After : Jan 22 20:33:35 2025 GMT
        Subject: CN=7f5a880e-3eb9-45da-b981-c281787f6142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:d7:aa:fa:81:1f:d4:63:88:1f:fb:ed:4f:
                    37:b7:e2:8b:7d:bf:4d:2b:1a:75:cb:e8:4f:b3:dc:
                    af:64:a4:ae:97:30:aa:13:f9:ed:9e:52:f3:b9:cd:
                    2f:36:93:8d:81:8a:c0:cc:75:74:58:d5:e7:b1:57:
                    77:91:85:dc:d1:13:cc:02:25:04:94:c3:c1:14:1b:
                    f2:2b:87:e0:31:e4:05:d2:97:f4:42:e1:a3:02:33:
                    d8:29:57:ec:4b:d3:6c:38:f0:90:53:5a:eb:f0:b9:
                    10:f7:69:69:08:d0:22:f7:71:7b:af:45:15:82:92:
                    2f:ef:f5:45:6d:eb:15:ed:c9:6d:52:26:d1:5b:61:
                    77:74:ab:e9:21:8f:07:37:a5:cd:6e:cf:58:83:ea:
                    ca:5e:4a:1c:c3:c9:1c:96:ce:34:50:dc:9e:3d:51:
                    8c:38:4c:dd:fb:d0:e1:d4:9d:09:da:9c:88:df:c8:
                    71:09:85:73:81:d8:53:7c:17:0b:4d:f4:8c:d7:55:
                    97:91:83:2c:3d:c7:81:a1:d7:4c:fd:a4:19:9a:25:
                    44:3e:81:97:ab:a1:5b:8d:c7:b7:4f:c3:7a:c1:c3:
                    d0:c3:02:a9:26:4e:e0:5e:57:ed:0b:91:03:3e:ca:
                    c3:ad:f5:b6:92:f9:75:f3:7c:51:8a:20:a9:09:05:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:1A:3E:00:FA:9E:AB:1C:AA:EF:E8:01:2D:86:6A:21:26:7D:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9bf26dc-2b5d-3866-9cf5-d7de4348270e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a4:a6:b6:15:3d:c4:a4:bf:92:dd:55:8c:5f:b8:65:40:30:
         48:d5:fa:80:39:14:d4:50:8f:47:85:f7:4e:23:8d:58:c4:87:
         da:e7:fe:3d:20:61:29:f9:3f:e2:85:86:05:6a:3d:16:f8:3b:
         84:89:f1:5d:96:c7:6e:e8:1a:05:64:a7:6d:6a:c3:e5:dc:96:
         bd:4c:9f:c5:b5:41:5d:1d:ce:bc:f8:ae:e0:9c:aa:34:c9:e6:
         bd:37:80:11:e8:7f:8c:61:3c:c3:70:3a:28:54:b8:95:24:c1:
         02:72:9a:6e:66:e3:4c:03:0f:ee:98:e5:1e:e0:80:7f:40:b9:
         b5:2c:ce:50:39:3b:60:4c:f6:45:36:27:ce:d4:73:90:5d:fe:
         99:f8:0f:31:e3:ed:8c:6a:41:0f:41:08:78:0f:38:a2:15:c5:
         1c:d3:18:e2:a4:fb:43:40:99:fd:0e:35:a9:6f:e1:18:33:85:
         9c:21:63:5a:d7:ff:46:06:b2:c6:35:d6:6d:bb:09:49:ff:46:
         63:b6:5a:88:37:99:cf:5e:10:5f:3d:0b:4a:20:5d:06:9e:44:
         87:ab:bd:be:b5:fa:48:4e:2f:da:f9:b8:dc:e9:7d:3e:ba:b7:
         35:01:13:5d:6e:4f:c4:bd:f9:02:ef:43:96:e3:35:a3:a6:cd:
         15:d7:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:39 2024 by rpki-client on console-ams.rpki-client.org