Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c66ffa2a-a99d-345a-8453-751f39a0d531.roa
File:                     c66ffa2a-a99d-345a-8453-751f39a0d531.roa (raw, json)
Hash identifier:          hzWkl5zrJoVlnZTa0LbcJZmmHIaFjVpaJrpO2gGT9E4=
Subject key identifier:   08:CA:99:E6:85:E7:2C:D9:24:69:17:16:A6:04:DE:36:B1:12:68:52
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584578E308BE668FFEBEFC5F3840
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c66ffa2a-a99d-345a-8453-751f39a0d531.roa
Signing time:             Mon 08 Apr 2024 01:00:25 +0000
ROA not before:           Mon 08 Apr 2024 01:00:25 +0000
ROA not after:            Sun 07 Jul 2024 01:00:25 +0000
asID:                     19966
IP address blocks:        208.184.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:78:e3:08:be:66:8f:fe:be:fc:5f:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  8 01:00:25 2024 GMT
            Not After : Jul  7 01:00:25 2024 GMT
        Subject: CN=107c0afd-38d3-4485-ac3c-ec10bbcf7bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:d6:61:3f:ad:53:80:3a:4f:2b:4c:2b:85:
                    c6:06:63:e6:65:fb:e8:d2:c6:26:41:c4:ce:ed:53:
                    28:9b:b5:67:ea:a1:f7:95:79:14:ba:94:a4:5a:62:
                    41:ad:7e:37:07:bd:b7:5a:3f:09:e3:a5:0b:42:31:
                    f2:f9:0a:33:db:c0:f6:a6:3b:b1:d6:c2:83:ac:be:
                    f5:90:2b:51:c5:da:91:18:04:da:03:e6:0b:2e:7e:
                    3c:07:a8:ee:cc:a1:8b:74:5d:f0:0f:1c:98:a5:ea:
                    f6:49:3f:9c:b0:38:5b:a2:ea:66:ef:d5:ad:9c:b7:
                    b3:79:ec:64:29:98:8b:ef:d1:11:26:5e:34:fe:25:
                    72:c9:24:0a:a0:a4:3c:4c:b9:e2:71:4a:97:ec:7b:
                    c6:9f:33:be:ae:b3:ec:88:93:bc:ca:c7:b1:40:bd:
                    05:1e:ad:4c:c1:ae:90:a7:f3:cf:34:84:e0:ab:66:
                    f9:5d:04:01:3a:7b:5c:2e:28:58:b9:5b:2c:15:4f:
                    3a:f7:10:4e:e9:f4:60:13:a8:57:fa:57:24:19:ec:
                    74:22:c6:16:24:54:ea:e9:4e:95:f8:1c:2f:de:b0:
                    52:8c:eb:a6:c1:6a:9f:36:31:a9:f7:d8:7b:97:56:
                    64:ce:0e:58:60:b1:0d:44:71:46:3f:0f:ca:67:bc:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CA:99:E6:85:E7:2C:D9:24:69:17:16:A6:04:DE:36:B1:12:68:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c66ffa2a-a99d-345a-8453-751f39a0d531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:ca:8e:23:a3:96:8e:4e:f7:e7:14:15:22:e7:33:2c:fa:
         06:06:cd:5b:2e:5b:af:aa:f2:d8:65:75:c4:cc:3f:17:2d:3e:
         67:db:1d:eb:0c:e9:f0:e2:11:49:2e:d9:23:cf:92:3f:aa:28:
         c7:23:4b:84:8a:92:fc:df:e2:c0:0c:7a:39:c3:2c:ca:d6:3b:
         55:82:8e:f8:44:ff:0c:af:45:dc:59:96:c3:81:83:fb:fd:ee:
         f4:28:ac:0a:7c:df:78:23:22:10:70:d2:db:7d:bf:c7:bb:b6:
         3d:2e:6c:89:5f:66:e5:4d:11:91:63:23:b6:28:5e:c1:6c:08:
         d8:9a:df:c9:15:99:f5:f1:84:96:01:5d:7d:3a:28:47:be:91:
         88:9b:0d:fc:87:f9:70:6e:26:df:03:46:61:61:28:fb:b4:ea:
         ec:a7:69:2b:35:3f:81:5a:39:d6:58:19:35:dc:1d:44:1d:00:
         fc:2b:62:52:ca:67:5e:8a:92:63:91:2d:a5:01:f0:36:f5:8e:
         1d:e2:e8:97:6a:81:22:b9:2b:80:5a:6a:c1:62:53:c1:35:95:
         49:c2:0e:74:0d:6d:2c:e5:21:eb:e7:1c:60:7c:2b:e2:2f:54:
         27:ce:02:10:09:28:3a:c1:fb:b8:cb:de:5d:47:23:d4:80:a6:
         97:2f:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:23:35 2024 by rpki-client on console-fra.rpki-client.org