Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa
File:                     c304d182-c487-3a1b-8662-518b3c299709.roa (raw, json)
Hash identifier:          wYMKAEgbtDfis++b05zXgtfk/lWppqcu6X+lTpOvjAw=
Subject key identifier:   85:D9:A1:12:2C:31:AB:0F:08:AB:56:58:41:EB:7C:04:38:33:B4:A7
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285847792BAD89684616181F64DC00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     18594
IP address blocks:        208.70.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ad:89:68:46:16:18:1f:64:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=90e72921-03a2-4d64-8746-75cd4b149dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:01:ea:95:0e:5a:6c:af:dd:9a:a6:56:0a:
                    92:ac:b9:13:d6:dd:57:c4:08:bf:c8:18:b9:79:12:
                    b5:c0:83:dd:3d:d0:53:81:ac:23:b1:9b:12:2e:73:
                    f5:ca:74:31:1c:f9:16:2a:82:ee:0e:cb:c9:d5:26:
                    44:1a:e5:3a:c3:54:ca:43:87:42:3c:3b:15:53:b5:
                    af:da:5d:4d:ab:0a:c5:ff:42:25:60:44:78:63:e4:
                    51:12:32:cd:e3:2f:b4:9b:ea:1f:cd:37:19:32:e1:
                    a6:1f:16:00:a5:fa:cc:ec:e5:64:a2:60:f8:a4:82:
                    e3:61:79:cf:6f:9b:66:f6:4f:25:37:77:8a:d1:08:
                    74:21:a7:d7:98:ce:35:f9:0a:4c:b9:14:70:cc:f8:
                    bb:9f:9a:c6:08:22:a1:c1:1e:12:69:b6:18:78:51:
                    bb:32:5c:1c:3b:a2:f3:84:7f:0f:0e:b3:94:06:03:
                    c1:da:b8:f9:cd:5e:dd:54:4e:67:8b:0d:03:ee:a8:
                    10:a3:18:85:aa:e5:ca:ce:ab:93:82:7c:08:21:d8:
                    a1:ab:87:c4:f0:46:5a:38:c2:08:71:96:00:92:c3:
                    15:53:9f:51:a6:30:0c:e3:c0:88:9e:60:65:62:98:
                    56:a9:0d:e2:93:89:67:ac:02:ea:5a:d6:f0:88:c0:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D9:A1:12:2C:31:AB:0F:08:AB:56:58:41:EB:7C:04:38:33:B4:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/c304d182-c487-3a1b-8662-518b3c299709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:59:9e:40:92:b1:1e:64:3e:d7:bf:a9:d0:49:b8:22:ff:2b:
         71:7c:55:ca:61:b8:f4:61:bc:4c:6e:27:a9:8a:0f:cd:5f:97:
         9d:0a:c6:6f:47:67:16:5f:5a:ca:fb:31:04:b2:38:0c:f2:d9:
         a1:98:68:3a:59:47:48:4a:01:16:81:3d:cf:68:69:da:81:bd:
         d7:2f:af:23:4c:04:29:3a:5d:0a:69:d2:01:aa:bb:4f:7d:17:
         f4:6c:80:99:f2:ce:cc:45:b8:82:f8:24:69:87:77:0e:ab:01:
         8b:55:36:09:76:99:1f:a8:ef:7e:0a:eb:98:59:18:ff:ae:0d:
         85:1e:a4:5d:f2:b9:54:db:e8:6f:a3:d3:d8:f8:72:84:f2:b3:
         8b:b6:1e:49:29:6d:db:37:f5:f9:6c:84:8a:2f:b9:40:30:1c:
         9f:e5:ec:4d:57:3b:81:0c:41:98:75:72:61:75:46:bf:ba:95:
         7a:f5:bc:4c:03:34:e0:58:5b:48:05:09:30:0a:e6:78:28:e8:
         bb:e1:36:ae:e9:58:b6:8d:df:15:6a:0d:8d:6e:d6:98:f1:8f:
         b5:1c:79:ab:80:bb:9d:9b:a8:5a:3f:83:f7:ed:27:69:cc:64:
         86:8d:60:6f:89:93:21:6a:cc:32:d6:bc:32:b3:a0:23:3f:d6:
         c0:86:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:46 2024 by rpki-client on console-fra.rpki-client.org