Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa
File:                     1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa (raw, json)
Hash identifier:          5upmtYG8V7FN7MdkYNEtWqrykCv0A9UJRHqZq5kAwq0=
Subject key identifier:   26:E9:73:20:62:31:AA:1B:37:48:14:B2:3E:69:87:89:B0:1C:8B:DB
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858473FF0A287BD2AEFABE4B1C980
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     212238
IP address blocks:        172.102.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a2:87:bd:2a:ef:ab:e4:b1:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=ec8c23e8-3229-45ed-9995-eff5814b204e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:76:d8:41:90:80:b4:e7:f7:27:54:a6:c2:
                    63:11:6b:78:88:3d:cf:e2:f1:b1:0f:d4:9f:a7:97:
                    9c:08:e4:fc:cb:77:cb:39:a3:37:e9:8a:2b:4e:3b:
                    f9:5f:04:9e:3e:83:13:bd:ef:3b:16:18:58:c2:3c:
                    88:01:9b:01:98:10:8a:51:6b:4f:95:c3:31:dc:62:
                    18:47:91:71:1e:91:fb:1d:c1:35:9c:3f:c6:8e:40:
                    5a:97:df:44:96:b6:71:59:e0:83:b5:7b:4b:64:e5:
                    5e:bf:77:76:51:c4:0d:9c:8f:6c:26:79:17:1a:d0:
                    7e:aa:92:ae:bf:d1:10:9e:f7:7a:71:b2:c9:93:03:
                    31:6e:ef:4c:19:7b:29:76:67:6d:bb:30:bb:e3:79:
                    e4:84:af:35:39:bb:6e:75:e3:4c:17:b0:2b:76:cd:
                    23:df:48:35:52:7e:2f:ec:5d:a8:40:f0:f5:51:1c:
                    53:35:89:32:d4:e7:88:5f:8b:fb:f5:cf:70:d2:13:
                    af:bd:8f:b2:2f:c8:cb:79:7a:95:58:69:12:96:24:
                    dc:6d:23:bd:1b:ae:6d:bd:05:07:68:76:c4:ee:d1:
                    fe:ec:56:79:18:16:9c:71:bb:c4:e3:46:d6:18:ef:
                    03:02:04:72:65:1f:c7:4c:b9:4d:57:c8:b3:87:c5:
                    10:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:73:20:62:31:AA:1B:37:48:14:B2:3E:69:87:89:B0:1C:8B:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:28:41:b1:c9:db:3e:76:e4:0a:8b:d2:8b:67:a2:c1:c1:59:
         53:c1:a5:72:f9:01:5b:f5:8e:ea:5a:f2:41:94:bd:1b:cd:b6:
         38:56:c5:d3:7b:80:b7:a7:aa:a7:0f:d5:a3:7f:87:6e:46:a0:
         32:64:b4:65:f1:31:aa:85:fa:33:7e:63:ca:e5:ef:cf:cc:80:
         77:06:bb:11:7b:71:0f:2e:5e:47:e3:13:23:86:ec:63:4a:58:
         d8:86:16:d2:a0:a2:c0:aa:92:fe:75:60:7c:b6:bf:2c:a4:44:
         41:70:df:29:50:a9:fe:e5:fe:2a:13:50:b7:3f:3d:8e:2a:8f:
         c2:38:8c:0b:fc:ec:32:ce:48:43:cb:9d:1f:f7:8c:f6:0a:88:
         00:83:26:d7:e5:4a:1b:84:29:34:54:12:0e:af:ae:72:cd:df:
         cb:d6:f5:0a:bb:5f:d3:6d:6d:67:1f:e4:60:6a:5e:3a:ff:11:
         89:3d:2e:3e:87:07:fa:17:18:e9:c7:f9:d5:8e:79:2b:39:b4:
         9b:a1:3f:8b:dc:60:88:e5:45:dc:94:80:b2:88:d2:a7:5a:a3:
         7e:b1:0e:16:a5:44:0d:4d:2f:69:38:a5:51:ef:9f:57:64:28:
         33:14:ee:0a:4f:dc:69:89:93:5c:c4:cc:e0:54:c1:5c:e1:c2:
         cd:57:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:30 2024 by rpki-client on console-ams.rpki-client.org