Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File:                     e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier:          iFQHJ745I+ZvSv9ZI0bvSVeF/Rn+0aJy2kEZQHIrl7Q=
Subject key identifier:   E8:7C:77:7F:18:61:59:DD:8D:11:71:C0:CC:03:94:79:41:5A:F5:D5
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584774FBA9142F3FA2A308EDDB80
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        172.85.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a9:14:2f:3f:a2:a3:08:ed:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=50371b90-dc75-4524-a390-36acc5123332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:a3:ad:e5:e4:6c:7a:61:be:39:ed:2e:54:
                    f2:9d:0a:e9:82:b9:3b:00:c6:f6:e6:5f:80:56:6c:
                    a0:3d:d0:3f:8c:b7:97:42:12:f2:9f:eb:6c:01:0e:
                    f5:c5:d0:c1:cc:c1:5c:f0:74:ec:f4:50:44:a7:6d:
                    63:e9:9f:45:57:de:58:8e:10:d8:45:8d:67:30:d9:
                    b9:f9:f3:e2:51:a0:2f:32:55:d8:80:06:71:d1:da:
                    77:98:5b:cf:f4:4d:0f:55:29:07:80:5d:04:20:52:
                    5c:06:00:32:9c:d0:42:0f:f7:7a:0b:ab:c5:b3:fe:
                    33:04:c7:10:60:81:85:40:f1:5a:a8:8d:c2:c2:d3:
                    b6:06:b2:7e:b6:31:ac:3e:9b:8f:8b:fb:49:62:f0:
                    cc:67:9d:94:f1:57:73:db:15:df:b9:75:b1:fb:a6:
                    56:0c:f0:4d:cf:d2:51:68:3c:de:f8:f5:4d:89:27:
                    d4:46:2c:61:00:65:78:d3:07:bf:aa:e1:34:19:1d:
                    03:58:89:61:0d:f5:2e:c1:65:a3:0f:b3:b2:26:8b:
                    11:78:9c:d1:22:d8:8f:c5:3a:a0:85:cb:f1:7b:62:
                    a8:97:31:89:aa:98:ea:85:36:00:d0:90:59:be:d3:
                    b1:5d:97:9f:fd:1b:37:86:99:09:17:d0:4c:d1:35:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:77:7F:18:61:59:DD:8D:11:71:C0:CC:03:94:79:41:5A:F5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:fa:ba:95:3d:ab:d9:44:81:51:db:b9:79:1d:ac:fa:52:
         bf:4b:37:e7:68:73:7d:b6:76:4a:c5:d0:ee:10:fe:38:de:de:
         72:ab:87:72:4e:17:80:ae:cd:9e:32:13:64:39:31:62:5b:b3:
         15:e9:e3:4d:f4:d4:c6:cb:36:07:a7:19:5f:5c:0e:85:a1:86:
         ae:77:a0:79:46:9c:61:82:df:d3:3b:b1:ae:9c:54:10:26:9b:
         34:0c:f4:fe:33:d5:cb:6e:6b:17:9e:e5:88:5a:eb:3d:4c:c0:
         e6:d2:1e:d8:89:9b:6c:d8:98:b3:1d:1b:1b:f1:be:1f:f5:12:
         ae:ef:00:c2:90:53:83:07:91:ba:08:72:9f:92:76:ec:46:8e:
         6b:6c:58:2b:d8:32:74:03:dd:83:41:77:8d:87:18:51:9f:0a:
         84:66:c5:b6:21:0f:e6:3c:43:26:13:86:e1:69:b4:3e:a8:0c:
         c2:33:00:78:e6:35:72:32:a5:e8:4c:7f:14:6f:a9:6e:47:bf:
         80:2f:8c:e2:a6:b4:91:49:d8:82:27:76:f6:fc:3c:97:b7:7a:
         1e:5f:1e:79:43:59:92:8d:fa:5a:3c:bd:b6:53:20:82:76:b9:
         ff:4e:67:9c:29:88:88:69:85:82:7c:8a:2f:b8:90:17:7b:f1:
         51:f2:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org