Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          qXYwDxtLHjOxdq8uNM4e3ANcMJAtSJ1in7LmE9Xjs8M=
Subject key identifier:   A1:EA:76:78:45:BF:4D:96:0F:7E:2F:AC:C9:82:FD:E0:4A:15:36:9E
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F43285847213B255D1400D03E4A670360
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:25:5d:14:00:d0:3e:4a:67:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=e63414a8-5aca-4704-a5e0-95a811feceb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:8f:bb:95:27:b3:d0:d3:44:3d:71:51:42:
                    ae:61:f0:51:5a:42:30:6d:06:8c:dc:9f:39:b0:54:
                    0d:03:33:76:5a:9d:a6:66:e8:8c:a9:0b:23:90:bf:
                    8e:ba:a0:a5:a9:8f:eb:6d:fb:0a:7b:15:82:75:f4:
                    ea:07:59:c0:f0:82:67:b1:0f:05:8f:f2:67:59:5c:
                    69:1b:44:e0:71:7a:af:ab:10:e8:82:a5:9b:41:22:
                    39:2c:11:76:8f:a1:d6:e3:37:e7:b2:3e:76:0b:9a:
                    7b:01:35:a2:b7:bf:20:55:fe:4b:5c:09:95:6b:cd:
                    ea:3a:1b:70:7b:f0:1a:26:6d:a4:bf:b6:66:1f:42:
                    da:80:81:0e:47:34:bc:6a:70:c7:c7:7f:d0:a5:42:
                    76:8e:1d:f5:54:7d:a0:eb:08:00:b6:5a:54:59:c1:
                    ee:00:a4:50:89:90:6a:0d:b8:6d:08:24:be:dc:3b:
                    9f:b6:59:68:72:c5:d9:b3:1d:83:8f:a8:58:d2:fe:
                    cd:61:7e:66:a4:49:c9:49:1a:88:53:cb:95:01:36:
                    a0:7c:18:c9:b3:34:85:39:33:1c:bc:b8:49:0f:85:
                    55:7d:6b:c4:a4:1f:4d:a2:83:98:e6:ba:e0:d0:f5:
                    ff:fa:06:e8:a7:ee:ba:de:f3:cc:8e:e1:d5:e7:d0:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EA:76:78:45:BF:4D:96:0F:7E:2F:AC:C9:82:FD:E0:4A:15:36:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:b1:d6:10:21:43:54:25:43:14:a5:1e:60:ed:29:97:8c:
         f9:e8:22:4d:e2:ae:d2:b9:a9:00:dc:a6:d4:ef:58:cd:b7:8f:
         70:d7:11:e3:d4:06:45:41:d4:be:52:f7:1c:e0:05:8a:77:9f:
         82:e1:26:92:ad:68:fe:ba:d8:f0:8a:43:ad:ef:4f:51:c3:43:
         d6:6b:fa:8d:ce:ce:d6:11:d2:4b:14:a3:57:b2:29:d1:cb:9e:
         f1:31:96:12:ab:81:d1:da:a1:38:62:45:03:38:25:6e:6c:82:
         35:eb:86:c4:f9:d8:06:72:9d:e2:41:85:ee:8b:96:eb:33:74:
         38:df:49:18:7c:ec:07:db:c7:e1:87:98:b3:f0:2c:29:c5:42:
         69:a1:1f:bf:79:b5:10:90:b9:bb:67:2f:3c:45:f6:f6:34:0d:
         a7:d3:51:89:e3:4a:b5:5c:e4:2b:24:fe:6f:a1:48:56:a8:7d:
         51:df:e0:ab:07:87:6d:f9:1d:07:14:e3:a0:28:24:8e:19:bf:
         8e:13:9b:f9:d3:ca:7a:05:9e:2f:eb:a3:d0:0e:39:5c:93:19:
         95:ac:1f:ae:88:ec:fc:c7:de:ee:c8:6e:16:e4:b3:09:59:fd:
         d1:c6:3f:9b:ea:10:9a:1b:2f:fb:88:a6:78:55:8d:61:6b:be:
         63:23:f1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:19 2024 by rpki-client on console-fra.rpki-client.org