Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa
File:                     cddcfce5-dc59-36c9-9b2f-1ec929661322.roa (raw, json)
Hash identifier:          P+rQ8Si92PZZRhZ3xV7HN/twIjfrTfrhFnoaB4+iCqs=
Subject key identifier:   6C:05:D0:BD:C7:84:B6:EB:C5:9D:B9:49:1D:11:C1:05:F7:BE:4D:D4
Certificate issuer:       /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial:       010D0C9F432858476F663A1B2FA6471F7C6DC000
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     139247
IP address blocks:        208.99.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:3a:1b:2f:a6:47:1f:7c:6d:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=f471e03a-7024-4b61-b74c-02e092877901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:e5:1b:08:71:fa:26:76:77:6a:5f:f0:78:
                    bf:f8:07:3f:29:93:05:0d:0e:94:5f:a0:99:81:42:
                    17:5d:a6:c1:07:28:f6:86:12:14:c5:8a:60:20:92:
                    25:17:74:9e:07:57:64:bd:89:33:94:8b:bb:28:f3:
                    cf:3e:09:f1:8e:07:93:f9:08:fa:20:1e:b1:ed:57:
                    1f:86:4c:1e:bd:e6:f3:4e:5c:10:20:06:99:81:91:
                    35:4a:8d:ac:70:e7:0f:84:60:38:4e:d6:b1:0f:33:
                    5e:a2:9c:06:ef:ed:d3:bb:65:40:fb:ee:69:85:70:
                    af:01:22:78:e0:d9:eb:03:80:91:1e:f0:97:04:76:
                    66:bb:2f:d4:f5:f1:45:4c:25:50:02:d4:8d:4b:7d:
                    a2:61:57:d5:5f:67:29:d2:a7:4e:8f:08:6f:84:3c:
                    1b:6c:55:6d:e4:49:6a:80:c3:8d:ff:7c:54:47:50:
                    c8:8d:ff:10:32:bd:ba:e1:59:ca:54:b0:c5:23:ed:
                    93:02:15:2e:a5:e7:2b:ae:42:49:2c:cf:fe:52:52:
                    0b:b0:66:3a:d0:29:09:d6:03:01:8c:49:1c:83:55:
                    1d:36:4c:b4:2f:ab:9b:09:ac:e2:b5:dc:a8:bc:d8:
                    6b:e4:af:4e:59:33:68:49:0f:36:d3:e6:63:dc:69:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:D0:BD:C7:84:B6:EB:C5:9D:B9:49:1D:11:C1:05:F7:BE:4D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl

            X509v3 Authority Key Identifier:
                keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b2:d9:8e:ae:09:18:34:ec:0a:f4:af:28:d5:01:82:b4:78:
         ec:26:98:67:f9:bf:32:e8:af:5e:c6:b4:dc:4a:a1:98:f8:c6:
         ca:53:6d:bf:f3:05:ac:e7:06:15:86:81:7f:c2:b1:57:dc:15:
         c2:31:f5:e1:d2:ce:13:db:47:51:59:3a:2e:b5:f1:2f:e0:45:
         e5:82:e0:53:42:46:d1:c8:42:56:e8:22:46:17:fb:5f:7a:2c:
         c0:c3:3f:4d:02:0d:a3:e4:44:bd:e6:74:d1:28:0c:a9:40:7d:
         3a:4a:15:f0:6d:8e:5c:87:d3:e9:ef:81:95:08:48:12:c7:33:
         59:9c:67:e0:64:a3:df:5d:df:d1:9a:01:75:f7:97:16:3d:b9:
         ee:29:86:2d:df:88:a1:7e:0a:49:37:0d:7c:a2:10:c9:69:84:
         49:58:f1:92:f5:7f:49:bd:4e:ac:ad:09:8b:06:bd:1d:ef:b8:
         1c:0e:95:80:35:9d:3d:e7:59:df:7e:30:19:3e:13:59:c9:64:
         7c:52:d4:46:bf:89:37:73:f9:5e:40:fb:4e:d1:18:c8:e6:6d:
         64:0d:03:c6:49:84:72:d7:d8:d5:33:3e:5e:67:cf:d6:ea:7c:
         9a:f7:e3:35:9c:da:de:34:39:f0:2c:3c:42:e2:5a:25:9b:a1:
         7b:36:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:39 2024 by rpki-client on console-fra.rpki-client.org