Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa
File:                     868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json)
Hash identifier:          U0y5LtyQknwVHlSnBCvYckzA/lenZ6teiMbJNgEIgek=
Subject key identifier:   C8:4B:BB:2B:02:1A:53:AB:C5:FC:B0:E5:A4:2B:CD:35:E4:2D:BB:4B
Certificate issuer:       /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial:       010D0C9F4328584769D0D9169CE4DC6806B2FB40
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     16671
IP address blocks:        208.88.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d9:16:9c:e4:dc:68:06:b2:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=2563924d-7ded-44e1-a460-fd29cf47ea9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:fb:a8:b0:e2:14:31:ec:2b:f3:98:fe:d1:
                    4d:aa:8b:db:8d:54:cc:14:59:5b:e0:39:4c:72:db:
                    32:04:2c:18:1b:26:d4:d5:c5:2d:61:05:72:1b:71:
                    a5:70:1e:6e:92:ae:03:f4:08:8b:58:f4:0f:40:fd:
                    65:28:dc:48:a5:97:6a:6c:cb:34:79:fd:f9:ab:e3:
                    f6:9e:bc:23:6b:25:10:28:3e:39:01:e6:68:a7:5d:
                    30:f3:75:10:c6:48:6a:2e:2a:69:f6:d6:e7:62:1e:
                    6a:ca:b1:77:64:e8:f7:79:0d:f4:4e:6b:17:6c:98:
                    46:2e:79:09:2e:6a:5a:95:89:6c:41:ac:f8:d2:f7:
                    0f:0e:5a:6c:e8:12:bb:59:e8:54:3d:4b:4d:d8:ed:
                    e7:ae:fb:0e:a8:20:65:aa:ee:dc:37:4e:c3:0d:37:
                    66:05:44:88:79:98:a4:c4:f2:85:63:e8:9e:ba:b9:
                    c5:74:eb:87:b2:ca:25:36:b3:ee:cd:39:96:62:b7:
                    ec:05:17:9e:ae:1a:85:63:09:71:fe:f2:ba:22:94:
                    a8:f1:db:ab:79:b8:78:9d:5c:61:01:50:4b:12:90:
                    30:95:55:9e:51:ac:04:43:b8:b3:99:28:25:ea:4c:
                    f5:c1:d7:ea:5b:cc:18:99:68:4b:b8:67:4d:d9:bb:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4B:BB:2B:02:1A:53:AB:C5:FC:B0:E5:A4:2B:CD:35:E4:2D:BB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl

            X509v3 Authority Key Identifier:
                keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:66:dd:52:ac:a1:a9:5b:f6:6f:1a:7f:7c:7d:bb:4b:6a:
         40:e7:58:d3:67:5d:fe:7e:e6:33:82:28:8a:a0:e3:46:b6:aa:
         d5:26:eb:2d:68:bb:fc:85:e3:96:b6:43:a2:cd:fc:74:6f:c7:
         f0:59:40:19:27:bd:8d:85:50:6a:13:12:f7:f4:71:af:95:e7:
         2d:bb:ca:34:86:8c:10:ed:5b:4c:20:ae:45:a0:2a:9c:58:63:
         31:49:86:bb:3d:d1:1c:df:55:1c:ea:d9:65:d9:91:f3:84:c8:
         05:c6:1e:07:33:1c:27:6b:70:34:02:6b:b3:75:fc:c3:c5:62:
         63:88:e6:36:03:ab:ea:ac:68:e6:78:5b:49:8a:a9:6c:d4:bf:
         61:7a:48:e2:6a:da:29:d3:ea:44:29:bf:0f:a4:29:5c:37:3e:
         6e:67:c3:2b:5c:73:c3:f9:64:0e:b5:69:9a:5b:a4:fa:c7:48:
         66:3e:4b:74:24:e5:96:43:e1:b3:71:54:60:d0:11:97:b2:49:
         94:91:85:bb:e9:57:b5:97:3f:58:14:1d:68:32:b1:1e:b0:e8:
         e1:67:a1:ad:e4:c8:58:7f:42:ec:a8:2f:51:69:bd:b2:cd:80:
         fe:30:de:de:95:5f:d9:1e:5b:1e:90:d0:ed:dc:4e:ec:9d:db:
         cb:fa:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org