Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa
File:                     d44b739e-4693-3efd-8c82-67f73703b4ec.roa (raw, json)
Hash identifier:          Yd1AIDKFjUxX4KgQEenhyZ3mEZ/i8UryCCZSnreokxQ=
Subject key identifier:   D8:8A:1C:3A:6C:66:7C:96:33:0D:FA:AE:DA:2C:69:1B:7D:29:9A:C2
Certificate issuer:       /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
Certificate serial:       010D0C9F43285847CFEDAD996F91FA6120143860
Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa
Signing time:             Fri 08 Nov 2024 14:51:10 +0000
ROA not before:           Fri 08 Nov 2024 14:51:10 +0000
ROA not after:            Thu 06 Feb 2025 14:51:10 +0000
asID:                     46149
IP address blocks:        208.96.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:ed:ad:99:6f:91:fa:61:20:14:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
        Validity
            Not Before: Nov  8 14:51:10 2024 GMT
            Not After : Feb  6 14:51:10 2025 GMT
        Subject: CN=7ae0e700-e815-4f33-a7a9-4daf56315356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:b7:34:60:f1:bb:fe:48:30:00:ed:4d:38:
                    71:df:40:f4:ce:9b:63:10:1d:93:4f:f5:cf:e5:34:
                    e6:b0:29:8c:c5:bd:69:62:7a:e4:52:92:d2:2c:ca:
                    30:bd:c9:07:8b:6f:aa:f4:97:bc:3b:3d:58:64:8b:
                    dd:d7:19:9e:b3:bd:51:d1:6e:9d:d7:54:ce:a0:ca:
                    5e:bc:8e:5d:33:1e:6e:5b:a9:93:fc:73:42:51:b6:
                    7c:c0:f4:fe:68:9a:d2:6a:84:aa:3c:b9:82:e4:ff:
                    ea:9b:49:eb:c8:f7:e3:86:10:c3:11:68:65:fa:92:
                    e9:b0:be:a6:32:79:c8:88:24:89:21:c5:38:5a:9f:
                    a2:95:39:a6:8a:0c:4e:8c:cf:1d:2f:fe:cc:d2:93:
                    d0:89:be:12:71:51:82:a2:13:d0:ef:f7:4c:2e:c8:
                    47:d9:1f:07:fd:f9:6b:c0:9a:ef:c1:cc:03:e8:8f:
                    84:c8:a8:ef:78:2b:3f:fa:b2:67:36:fe:be:83:da:
                    b0:c8:29:26:77:f9:c1:56:8e:e9:2a:a7:35:00:60:
                    be:4a:94:e0:52:c2:9c:f2:56:19:e4:93:34:75:e1:
                    65:97:c8:04:30:0e:36:b9:c4:10:ae:1e:38:49:32:
                    4f:c3:58:b6:7e:f0:1d:64:07:fc:13:4d:32:5c:e3:
                    7f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8A:1C:3A:6C:66:7C:96:33:0D:FA:AE:DA:2C:69:1B:7D:29:9A:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:54:79:78:e7:cc:87:a7:52:c8:96:bc:8d:5a:34:86:3a:54:
         ba:9d:5e:28:cd:23:31:98:8a:02:98:63:38:49:b8:b7:de:1e:
         58:0c:fe:09:ab:8d:4e:18:ea:3f:dd:e2:12:32:f7:2f:e1:79:
         76:a3:f0:fb:d1:7e:b1:e2:55:53:ad:60:8c:41:68:45:e0:a0:
         a3:c4:7b:21:88:54:f2:38:20:e2:f3:93:01:4a:5e:3c:7a:90:
         e7:9b:9d:03:e8:2a:f2:5d:d0:46:ec:2c:b9:0e:9c:85:31:9e:
         62:9f:f0:83:98:19:09:ef:b7:30:8a:d4:b3:f7:62:0c:56:b4:
         49:7e:17:a5:a7:cb:e7:ed:6f:de:11:39:f8:03:9f:64:f1:09:
         5d:3e:08:fc:d3:1e:d2:dd:57:07:9d:8b:d6:4f:71:64:a9:21:
         e5:93:4a:92:e4:d6:5e:4c:7e:09:65:3b:86:cd:32:be:05:ab:
         1c:e7:40:67:c2:7e:99:7f:ec:fa:7f:bc:73:c8:79:5d:21:bc:
         ff:f4:2d:e3:4c:d7:16:c8:96:83:c2:e2:e9:62:84:98:34:e8:
         8a:3d:fa:f8:79:bc:bc:dc:ac:ce:c8:d8:f3:99:37:1c:02:ff:
         96:fc:bb:c8:37:33:65:af:5e:70:b6:ea:bf:ce:7f:cd:45:43:
         91:da:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:21 2024 by rpki-client on console-ams.rpki-client.org