Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa
File:                     ec87e182-1298-3a9f-b8ca-3428281070d9.roa (raw, json)
Hash identifier:          /FK6kTrsA0/5Ba2grvcdwzJrg9IGzrVV3KN8VMf3/Zw=
Subject key identifier:   D2:4B:1A:03:FC:F8:6C:F1:91:16:3C:B3:F5:05:18:C1:49:7F:62:8A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584733608B0B90C68DF8DDF7319C
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     62651
IP address blocks:        108.171.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8b:0b:90:c6:8d:f8:dd:f7:31:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=2cbb6359-8ab9-42c8-a65b-26d4f1f2e38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:6c:d2:8b:34:ef:2a:78:ff:ad:0a:84:26:
                    03:b6:29:98:e9:02:b6:80:7d:b2:4f:58:24:2e:2c:
                    5a:4d:82:8b:12:e9:78:9e:74:2e:5e:54:22:2b:d7:
                    a1:3f:d4:bb:f4:fe:20:ac:c1:16:ff:bb:b0:ed:6d:
                    d7:e9:2d:2f:62:e1:ba:78:1e:fe:00:6e:e6:17:4e:
                    3b:1b:ce:a8:4c:71:b6:97:88:50:4c:4b:44:1a:00:
                    8e:16:36:8a:a7:7c:80:97:a1:71:02:78:02:a5:78:
                    b4:6c:ce:f3:5c:8c:3e:25:4e:6f:0c:a1:44:8b:20:
                    d6:14:12:2b:49:4c:1c:3d:11:0a:61:6f:29:9c:f7:
                    20:5e:f4:e6:2d:d4:b3:64:99:38:56:de:85:b9:30:
                    6f:19:ee:73:95:04:b1:de:79:c2:5f:12:7a:0d:c4:
                    b8:87:be:d0:5a:c2:ee:d6:2c:92:15:bf:ff:fb:c9:
                    bb:19:da:93:37:47:d6:21:ac:93:f4:f9:36:72:a8:
                    d9:cd:db:bd:8b:b2:68:1a:b7:36:1d:ea:53:31:77:
                    17:c6:57:43:e3:cd:e6:aa:7a:7c:09:63:78:29:eb:
                    30:bd:f9:8e:a6:e9:63:e2:01:be:0a:9d:90:93:ed:
                    de:05:1c:b7:6c:71:59:5d:aa:e0:d1:0c:ad:8e:74:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4B:1A:03:FC:F8:6C:F1:91:16:3C:B3:F5:05:18:C1:49:7F:62:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ec87e182-1298-3a9f-b8ca-3428281070d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:8d:4f:d6:35:de:12:1f:bf:57:39:6b:37:83:1f:85:f0:
         a7:44:98:94:ad:b0:e9:a9:11:e4:cd:5c:6b:40:ba:54:10:b7:
         d5:d4:22:2f:d2:72:e3:6d:46:c7:ba:92:9b:c2:cb:0c:bb:60:
         64:6b:47:c4:c1:ad:6a:db:08:e7:c0:50:bd:83:83:11:65:fc:
         70:17:04:5f:e7:f0:58:f4:81:5d:1c:68:4b:1a:b2:bc:83:0d:
         b4:ed:4a:20:c6:ca:1a:02:77:b6:c5:02:e8:bf:81:7a:b7:f7:
         56:fb:bc:a9:84:3c:4e:b1:61:6d:36:f9:ed:ec:56:9c:5d:0e:
         9d:29:b3:23:0d:f1:19:37:50:89:a4:69:e0:4c:75:cf:59:74:
         90:8e:05:a8:aa:f9:fc:bc:97:17:68:65:66:a9:d2:4d:3d:11:
         a8:db:5a:b0:11:92:78:02:80:97:d3:72:cb:db:df:87:1e:31:
         a7:f5:46:2c:38:38:34:21:b6:4a:e3:2b:51:9c:07:9d:70:7f:
         fe:7c:7c:10:68:8a:91:29:53:8e:5e:3a:51:a3:f5:cf:21:06:
         d8:dc:ba:9b:73:86:0c:91:92:dc:3a:92:34:06:03:ea:75:7d:
         3a:50:9e:08:64:51:4b:b8:72:4a:94:35:92:a0:0e:af:71:20:
         63:4d:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:19 2024 by rpki-client on console-ams.rpki-client.org