Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa
File:                     76028751-035c-3651-88e2-a1d009ea9b7f.roa (raw, json)
Hash identifier:          yL515f6MAxTBrwI66us4MgonSsRnBDFx6Sob/qab7wc=
Subject key identifier:   94:7E:5A:F7:F5:6E:1C:3B:93:54:26:10:00:AB:5E:77:30:D2:A8:0B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847EFEF896928D3E9AD6D2A2B00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     140952
IP address blocks:        108.171.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:89:69:28:d3:e9:ad:6d:2a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=bd66bc2a-66ed-4b1b-97b9-d7489aa5e933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:25:f1:fb:19:e9:59:15:66:c4:26:e5:d8:6f:
                    00:f2:1d:c6:1b:02:eb:45:ed:78:bf:8d:fd:11:17:
                    ab:3c:21:6f:57:fd:9d:09:aa:50:e6:07:c4:0f:05:
                    0e:78:00:8c:86:94:61:14:a7:4b:7f:85:c4:ab:04:
                    c5:05:a3:6f:8f:37:91:af:32:de:2a:b7:e4:99:e9:
                    e8:b8:8d:4e:a7:67:4e:0b:56:96:e9:f4:b9:20:23:
                    7c:eb:be:4f:41:ce:52:df:a3:c1:cb:f7:f5:c3:26:
                    c5:35:a5:7a:9d:ea:3d:ff:ee:eb:f7:ba:d9:ec:73:
                    fe:7f:fd:ff:e7:98:1a:22:71:a8:fc:67:d6:75:a4:
                    93:b2:68:16:a4:1b:a2:73:cf:03:be:67:ca:6f:07:
                    0e:ab:47:86:8a:18:d9:38:41:97:81:5a:a0:c9:bb:
                    47:46:cd:71:cc:ed:99:a4:88:e8:c6:c3:a4:1a:d3:
                    e3:c7:b2:0b:d4:28:c5:1e:87:bc:04:24:cb:e2:61:
                    c7:d7:d8:a1:e8:b4:e5:c5:e6:e8:24:1f:c8:e1:3f:
                    c9:e6:21:35:74:ff:08:a8:a3:16:93:ad:c3:5a:88:
                    d9:95:e2:73:da:a8:3d:6d:36:99:cf:90:21:66:9e:
                    a0:59:a3:cf:ca:48:61:49:75:71:06:13:02:05:7a:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7E:5A:F7:F5:6E:1C:3B:93:54:26:10:00:AB:5E:77:30:D2:A8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/76028751-035c-3651-88e2-a1d009ea9b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f7:4a:fd:b6:8d:d6:1c:c7:ab:52:f0:27:85:86:58:8a:e5:
         87:22:48:54:63:d3:c3:d6:9b:63:1d:53:87:79:0f:fc:a9:b1:
         c5:c6:7e:c2:a3:52:21:fb:f0:fc:a5:6c:59:9c:d3:2f:60:51:
         75:dd:26:59:eb:b0:29:db:7f:cd:86:e9:23:26:54:4e:93:78:
         65:b9:9d:62:a8:b5:8e:ac:50:7b:e9:d4:75:50:b2:4a:80:84:
         19:ed:ae:f0:7e:86:14:77:7b:73:f6:56:d1:6d:3f:50:2f:a1:
         10:7e:9e:96:bb:ce:da:46:ce:81:4b:1d:c2:4f:c4:a1:7d:d7:
         25:5f:3c:f7:06:bc:39:e3:76:16:4c:76:d4:62:c8:14:b3:7c:
         11:a0:15:49:5a:cb:bd:37:ae:12:e3:30:2c:f3:b3:ce:e6:1d:
         85:8a:b3:9c:ad:ad:69:a9:72:30:df:65:6e:87:46:ee:f2:1a:
         a0:30:2d:c6:45:e2:87:a8:f2:a3:5d:5c:3f:47:0e:26:8c:c8:
         8a:35:92:84:26:42:6d:95:43:99:dd:56:cd:e7:74:6c:50:9a:
         26:66:26:10:ff:a7:ba:77:c4:ce:03:b0:64:2c:1f:61:2d:3c:
         f7:3a:1c:11:2d:bd:e7:b7:1a:ca:ba:21:18:2c:17:55:5b:66:
         c1:a9:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org