Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
File:                     1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json)
Hash identifier:          gS3DDmcQ69VUy6Sya/hYpqYkqtNkuvwwsiv+xG8XnHc=
Subject key identifier:   2F:B4:D0:46:61:AC:91:C2:25:75:31:73:BB:D0:8C:03:62:7C:2C:A3
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F43285847E8F4CA12C19BC454818F9780
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     33322
IP address blocks:        208.67.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:ca:12:c1:9b:c4:54:81:8f:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a33c08cf-172f-4d85-9dfa-b5c4960d5673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:a5:0f:a1:9e:45:eb:7b:8d:e2:93:ea:6b:
                    b1:9a:62:34:30:fc:39:72:53:14:46:fe:01:74:d0:
                    24:0c:17:32:6b:94:7b:7b:00:9f:41:a2:0f:5c:3f:
                    44:6b:42:17:c6:c8:d7:8b:94:0a:2f:06:ff:47:27:
                    19:fc:fc:a5:f5:4c:1c:71:0e:2f:e8:2c:56:c5:fb:
                    0e:1e:b2:4a:57:7b:0c:b5:d0:f4:6a:06:6d:5f:d4:
                    31:59:17:71:9c:91:74:6b:35:0f:3c:47:1e:40:de:
                    3b:81:09:d4:e7:1f:80:b6:26:e1:2c:f4:71:a3:8d:
                    f0:3a:c9:a7:c8:73:d3:18:7e:93:d2:94:25:fd:f6:
                    ad:21:f4:c2:dc:bd:bc:2a:2c:8f:7b:23:bf:b3:65:
                    05:61:c3:fe:ea:7c:d8:cb:86:37:94:ed:80:2e:d3:
                    8e:0f:07:c0:1d:a1:b6:ca:27:96:56:75:e2:05:21:
                    96:fb:05:b0:27:1e:84:3a:ab:f2:b9:83:cf:18:6c:
                    21:fb:d0:58:6b:35:33:d9:54:4f:0e:ad:55:09:88:
                    93:68:ce:98:92:a9:62:ec:00:44:43:4f:4e:d3:d0:
                    d8:c3:0f:64:03:cd:0b:05:13:24:32:ec:6b:78:f9:
                    af:86:5f:ca:cc:23:1b:c2:4a:c6:74:c8:cb:2b:98:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:D0:46:61:AC:91:C2:25:75:31:73:BB:D0:8C:03:62:7C:2C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:0a:81:f2:09:28:a0:d5:5e:99:05:01:45:59:95:78:c1:c5:
         4d:ba:c1:37:4b:c2:72:e3:91:69:78:d2:8a:38:7d:11:3f:9a:
         86:22:68:5c:42:81:0a:6e:14:c4:5e:8c:74:73:d9:d6:64:ca:
         9d:01:ae:27:85:d6:35:60:2d:fd:5d:3b:f2:2a:ff:cd:32:cc:
         ef:b5:4c:27:11:52:15:40:33:b3:0f:8f:b8:6b:d4:4d:b6:89:
         b1:70:aa:bc:8c:3a:ef:64:9a:6a:62:04:5c:90:d4:e8:b7:bc:
         90:99:4c:e7:4b:99:84:04:99:a6:95:ed:b5:25:c0:4c:d7:b2:
         8e:b1:ec:34:fd:c8:b0:c9:08:cb:e8:e9:bc:37:cd:b4:25:ef:
         68:27:e5:46:b5:8e:e7:25:68:cc:75:a1:6b:34:f5:20:3f:9e:
         e4:75:4f:81:79:6e:ee:4e:b7:f4:40:84:14:d6:32:07:5c:ff:
         2b:50:46:da:ce:c1:85:0d:e8:be:bf:0f:3a:08:92:88:64:bb:
         63:c0:1e:e9:c3:94:a1:dd:5b:8b:4c:8e:0c:f9:75:af:b0:f6:
         a7:d2:8b:bd:b1:61:b4:4f:b1:0f:05:6c:5c:e7:4e:52:31:b4:
         7b:af:d2:9d:59:00:d6:c1:0d:37:c1:8c:bb:12:04:7f:32:f6:
         85:d0:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:28 2024 by rpki-client on console-ams.rpki-client.org