Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
File:                     529eec86-aabc-3d34-8797-dab3f5a00262.roa (raw, json)
Hash identifier:          5t0YlWQfm4N8yeQcd/rP42EJ3IVtBqNHcuCj+IN66HU=
Subject key identifier:   04:60:19:EF:7D:57:D4:2E:94:1C:40:64:16:93:BD:F2:5B:46:6A:B8
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F43285847537B6E2097CEF76BD6B71600
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3565
IP address blocks:        208.68.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6e:20:97:ce:f7:6b:d6:b7:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=21fe23fc-4c37-4c16-88a0-5a3361e80d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:5a:18:22:13:8e:ef:51:e6:47:b1:87:7b:
                    27:cb:be:e7:34:da:d5:72:e4:99:2c:1e:d9:5a:80:
                    35:d0:08:1f:bf:01:3e:db:02:58:78:b5:ec:06:a3:
                    8e:34:be:02:78:5a:70:d9:4e:27:ea:d6:4d:90:be:
                    cb:25:d5:d0:9f:ee:a2:7f:9e:72:81:cc:8f:b8:25:
                    b9:b1:f2:6f:6f:28:57:1b:d3:f5:c9:4e:18:0b:aa:
                    49:33:fb:73:e8:62:1e:c3:f9:5d:3e:e1:68:1a:d4:
                    95:b2:03:19:85:a0:38:4d:23:9b:de:f5:27:ec:11:
                    97:ce:ca:9b:17:9e:be:ff:1c:1f:f6:74:a6:ec:96:
                    ad:b5:79:a9:eb:ad:2b:92:a2:2d:61:c0:0a:fb:83:
                    06:a2:95:6b:e2:49:64:5b:69:cf:6c:6a:f8:d6:6f:
                    b1:99:f7:32:85:e8:3e:a7:b0:01:31:cf:e7:32:d0:
                    90:50:66:af:fd:5b:8f:e9:6d:e4:1f:4c:a9:98:5a:
                    73:5a:e1:7e:a2:54:52:82:90:70:0a:4b:01:d6:10:
                    75:f0:bc:6f:39:b9:0a:05:e1:ce:e6:5e:e5:06:9a:
                    71:f7:23:2a:60:ba:0d:cd:36:4d:80:65:f9:dc:07:
                    3a:2c:5a:20:a0:e6:98:8e:d4:65:a1:e9:41:6f:60:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:19:EF:7D:57:D4:2E:94:1C:40:64:16:93:BD:F2:5B:46:6A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:66:d5:7f:67:f1:30:ff:65:76:08:06:ac:c0:63:fb:8a:d1:
         de:4d:dd:79:07:5e:45:a6:ec:34:23:01:a1:1b:87:3e:d2:cc:
         7c:0a:d2:c3:11:ad:85:86:c6:02:b0:5e:9a:85:9d:9c:5b:a1:
         1a:5a:c6:5c:f1:8c:9c:83:01:61:a0:c2:50:e2:77:77:05:3b:
         7e:ea:54:63:bc:5b:1a:2b:80:00:a6:77:95:9a:25:e9:3f:c2:
         54:4c:34:84:25:2b:b9:f7:9d:7d:9e:14:c6:16:9a:95:bb:96:
         b0:80:99:4b:76:d4:cb:e1:6e:10:e2:fe:7d:94:b9:97:eb:66:
         92:ee:09:1f:24:86:de:7e:32:ad:92:6b:77:41:4e:17:97:24:
         45:bb:f8:54:d8:2f:7f:fa:2d:30:95:3b:68:5a:a4:bb:d1:f7:
         03:ba:92:83:ab:37:a2:e4:de:69:49:ba:99:42:6e:ec:ae:eb:
         43:9e:d3:64:25:81:3c:62:a6:33:6c:d8:27:6d:44:58:42:9b:
         bb:1c:ed:8f:13:c9:82:8a:6e:ce:ea:28:37:02:1a:a3:e7:43:
         69:e5:8d:fc:6f:f3:ee:0b:39:26:90:d6:c5:b0:5e:87:ff:a7:
         77:67:af:8a:52:24:f2:f5:b6:d6:38:c8:a6:74:a3:0f:c5:ac:
         f3:b4:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:05 2024 by rpki-client on console-ams.rpki-client.org