Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
File:                     ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json)
Hash identifier:          SAOq3PT5H75dtDv/oZqJIejS+Kg0U93k8Od/3Yahc3w=
Subject key identifier:   04:C3:1D:14:44:AA:DE:49:DD:D9:DD:F4:82:70:41:C5:70:FB:AF:BC
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584774FBA43FA9A86B674EB8CA00
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     30383
IP address blocks:        198.208.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a4:3f:a9:a8:6b:67:4e:b8:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=fb643424-3c1b-4687-9dfb-9b5b58e8a1b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:cb:ae:e9:a9:94:36:c0:a0:38:84:a7:c9:
                    06:81:57:21:d1:82:70:d9:d6:35:98:1e:a1:08:d9:
                    b0:39:b0:de:e2:7a:2d:73:dd:a2:eb:03:93:40:01:
                    40:72:39:8f:2f:92:4c:19:9d:23:dd:c1:bf:fa:97:
                    74:52:6a:9c:34:9c:7d:39:79:6b:0b:7e:fe:6e:a9:
                    dd:af:eb:e8:fb:a9:0c:0a:55:9a:49:9e:e5:c7:b7:
                    dc:48:76:27:83:eb:5b:41:57:43:00:f8:7d:9d:6b:
                    51:cb:17:41:20:55:81:5d:9f:84:a0:fe:ce:f8:6e:
                    cc:49:e2:f7:36:e4:b9:94:d4:0d:c9:2c:22:10:89:
                    ab:0f:39:fb:01:bb:3c:6f:fd:79:c3:14:ab:92:a3:
                    da:88:54:99:06:c2:04:32:e0:73:1c:f5:de:a4:6b:
                    c0:10:c2:fa:ca:ab:e9:c5:c3:94:ac:69:28:8a:2e:
                    c1:a3:13:38:cd:16:b3:1c:16:5c:03:44:75:a1:c1:
                    84:35:8f:1b:5d:2f:0a:7c:bf:4f:68:de:f2:49:49:
                    ea:53:4e:5b:10:bd:3c:6f:a3:16:09:ef:74:da:0d:
                    b8:15:3d:bb:6c:ad:42:83:18:ad:19:ea:22:a9:b2:
                    e5:54:7a:b5:5e:4c:10:09:bd:0c:bf:c0:54:d1:2d:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:1D:14:44:AA:DE:49:DD:D9:DD:F4:82:70:41:C5:70:FB:AF:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:55:0b:39:08:3a:0d:cf:23:6e:b0:61:34:a1:70:0a:8a:fb:
         59:29:c4:86:e9:dc:18:d4:71:2e:bc:0f:96:e2:a8:df:b5:3b:
         ce:9c:69:a7:58:9f:86:c5:3e:38:a2:b8:df:31:7f:7e:cc:71:
         b1:0f:27:a6:a0:f7:cc:12:3a:5d:c0:3c:09:5b:73:5c:73:d3:
         c5:50:95:c0:5e:2d:e5:b1:f2:9f:a2:8f:5a:c5:c1:ef:15:86:
         a0:68:a5:04:cc:5b:bd:c2:59:cc:f2:af:dc:4b:bb:e1:07:8a:
         31:ec:52:a8:c1:c3:25:88:b1:9a:2d:1e:62:ea:ea:5f:41:d2:
         48:90:58:ac:55:d9:58:86:0c:b6:71:82:54:c3:05:2e:5a:a8:
         20:f6:d3:e9:b1:cd:64:22:c6:b5:6c:8b:90:91:11:f5:12:d2:
         5d:89:38:91:61:f1:4b:35:11:cb:ae:f7:52:19:45:02:3a:ff:
         7d:9a:d8:e5:6f:1e:f0:96:73:3b:e2:f6:e4:50:b3:6e:9d:f0:
         08:6c:23:62:76:9a:3c:00:b5:a1:ec:c0:24:13:35:00:6f:d7:
         de:81:b9:da:85:22:f3:36:b1:97:d4:2c:c6:0d:bd:88:b4:11:
         ea:51:39:de:79:d5:7a:4c:76:e0:ac:af:49:e7:7f:10:b9:62:
         8f:90:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:32 2024 by rpki-client on console-fra.rpki-client.org