Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/ed2d6ac9-12ba-3b03-8d41-053117336bd0.roa
File:                     ed2d6ac9-12ba-3b03-8d41-053117336bd0.roa (raw, json)
Hash identifier:          h7S2ObgpciQ+E+XgEm8VpKSWQJ+wE9bDsMgX556fZFg=
Subject key identifier:   E2:6D:D6:61:E4:30:97:1F:64:27:75:10:F2:44:24:61:B4:22:91:52
Certificate issuer:       /CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
Certificate serial:       010D0C9F43285847B3CC0EE94D1B1DA86855BF00
Authority key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/ed2d6ac9-12ba-3b03-8d41-053117336bd0.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     40328
IP address blocks:        108.59.96.0/20 maxlen: 20
                          108.59.96.0/23 maxlen: 23
                          108.59.98.0/23 maxlen: 23
                          108.59.100.0/24 maxlen: 24
                          108.59.101.0/24 maxlen: 24
                          108.59.102.0/24 maxlen: 24
                          108.59.103.0/24 maxlen: 24
                          108.59.105.0/24 maxlen: 24
                          108.59.106.0/23 maxlen: 23
                          108.59.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0e:e9:4d:1b:1d:a8:68:55:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=f51adb61-8f78-4bd3-874a-9531378716df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:85:65:eb:4b:1e:a7:30:ca:4b:25:21:44:95:
                    81:69:06:44:e4:ea:73:e3:85:67:fa:ab:78:99:60:
                    74:ed:a9:7f:57:84:a9:44:bf:17:cc:83:ad:82:2a:
                    23:b2:e1:01:94:34:c7:c1:6e:11:5b:43:49:3e:b0:
                    79:93:0f:39:5c:b5:13:d8:b8:cb:68:ea:fd:af:72:
                    e4:1d:0b:b9:49:69:94:6e:80:dd:a7:76:99:c5:a3:
                    19:31:4e:9e:b6:28:cc:c9:92:62:3b:5d:39:59:fb:
                    5d:07:f4:b6:18:7b:69:0c:6f:56:30:16:9e:bf:38:
                    d3:4a:c4:09:3a:7d:28:a3:c8:f5:a4:ed:ce:03:85:
                    e3:08:af:81:90:56:cf:94:06:f3:68:9c:1b:e7:cf:
                    db:d2:b5:f0:a8:a6:48:d8:2b:0d:b9:d5:52:44:1c:
                    50:b9:69:63:d1:31:e5:91:ae:2b:df:3a:87:0a:92:
                    2d:63:62:f8:0a:77:f3:8f:93:4b:a6:f1:25:8f:e7:
                    60:c7:ae:5f:08:23:03:f7:6e:22:5b:95:6b:9d:4e:
                    34:21:08:90:12:ab:c0:b5:66:07:46:1f:50:ed:1f:
                    dd:7e:d3:78:55:d8:5c:d1:80:cc:2b:fe:62:81:b6:
                    5b:c0:37:b7:e1:dd:fa:98:ce:5b:3a:b8:ac:8f:ac:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6D:D6:61:E4:30:97:1F:64:27:75:10:F2:44:24:61:B4:22:91:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/ed2d6ac9-12ba-3b03-8d41-053117336bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.crl

            X509v3 Authority Key Identifier:
                keyid:3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:be:bb:dc:ae:5f:83:0e:60:56:29:c6:f5:a3:12:fb:e5:0d:
         09:d3:6b:83:2a:56:0f:cb:be:4a:81:03:ee:43:d1:1e:2c:51:
         25:ea:9a:9f:9b:d8:58:47:9b:22:94:81:e6:69:51:3a:9f:0f:
         98:2e:94:92:46:12:ba:46:0b:13:d2:27:4c:ba:c9:b6:1a:82:
         92:70:2b:2d:9d:2d:53:c1:ca:7c:50:3a:74:29:ee:af:61:b6:
         54:62:ec:f5:62:7b:ab:6d:e9:94:ea:33:9f:47:9d:bd:54:4c:
         52:e6:8f:cf:32:60:f7:2a:cc:9b:80:d4:00:bb:42:5a:9c:fe:
         2d:b7:30:47:3f:09:71:1e:f1:84:07:c2:0a:07:3c:ab:20:69:
         0a:a4:45:9d:4f:bd:eb:c2:d6:4c:2a:61:37:68:fd:e0:94:9f:
         43:16:5e:5b:35:2e:c1:27:49:dc:d8:8f:a0:bc:04:91:b7:b1:
         bd:a5:37:72:79:cf:7b:4d:d8:93:2e:65:2c:f7:ca:05:56:0b:
         c4:39:02:69:17:c4:62:0d:31:e4:37:df:63:d5:ec:40:3a:62:
         72:4e:4e:23:0d:85:3f:4a:e8:33:94:25:77:ee:8b:8f:f0:ef:
         f5:5e:82:fb:8e:00:cd:f3:f5:b0:5f:77:8b:e9:a4:8a:c6:45:
         19:04:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:17 2024 by rpki-client on console-fra.rpki-client.org