Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
File:                     44f98da8-316e-3e2e-a620-17a85c3d1158.roa (raw, json)
Hash identifier:          uIw2LCcObgeEIU40kaZHiuVOtDpwdnDVAuoheMQtyL0=
Subject key identifier:   FB:31:63:D4:03:02:42:08:DD:2D:B8:F5:86:2B:75:25:F8:9E:86:52
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F43285847EBBF8807155F10318CA822E0
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     912
IP address blocks:        208.93.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:88:07:15:5f:10:31:8c:a8:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=52374e28-eace-4e64-aa40-169c2888895c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:87:68:06:f5:ca:c6:d0:1a:4c:1a:97:b9:7a:
                    16:02:c9:41:10:4d:8b:8e:86:a3:8d:08:c8:4d:26:
                    d9:25:26:ae:16:ab:d0:63:71:af:6f:49:a5:a8:33:
                    66:6a:44:51:05:30:1b:d4:a8:b8:c8:52:e4:93:ba:
                    f4:fa:19:47:c2:3b:57:17:cf:ee:44:50:90:96:88:
                    55:31:c2:94:fe:54:4c:92:ec:e1:f9:f4:22:a9:4d:
                    f3:3e:01:04:f9:46:7c:3b:4b:db:6f:e1:b0:8c:29:
                    e8:b9:09:4c:33:b6:ea:54:b6:b3:db:50:70:83:5e:
                    74:55:50:83:30:57:e8:e3:a5:97:d7:62:63:1b:d0:
                    cb:b1:a7:49:c1:5a:60:58:4b:44:4d:63:80:22:e3:
                    8f:f7:7a:bd:af:9a:2e:bf:3f:5f:53:e7:ef:d8:98:
                    31:e1:25:14:26:e6:c8:37:08:ac:0a:8a:ff:5f:f0:
                    ab:ba:8d:90:a6:8f:f8:ce:91:e1:ba:76:d3:e8:c0:
                    55:51:83:4f:7e:0d:5b:d6:b2:b6:df:8c:48:bf:fd:
                    22:57:bb:bd:65:2c:60:80:83:98:ae:7a:22:23:c3:
                    18:3c:b3:d2:66:06:ff:8f:51:c3:24:7b:18:d0:92:
                    07:7c:73:aa:37:17:a4:c2:fe:85:f9:70:ef:a0:ae:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:63:D4:03:02:42:08:DD:2D:B8:F5:86:2B:75:25:F8:9E:86:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:19:17:d8:21:80:28:47:73:fe:48:9f:84:69:54:ef:4e:
         e5:13:01:9f:d3:b7:8c:b0:6e:1e:f4:18:46:0e:58:a1:3e:8f:
         74:13:70:ed:b6:4d:64:81:58:df:75:76:df:d1:7d:b5:d7:56:
         b5:55:b3:38:65:ab:25:82:74:e0:41:3d:40:95:70:b6:b9:89:
         88:e1:02:3e:21:fd:13:c4:b5:3d:ec:83:77:5b:fa:72:86:f6:
         d0:e5:1d:2a:d3:2a:b0:2e:1b:0e:00:84:22:1f:58:4c:57:04:
         c9:7c:8a:6a:0d:56:d1:55:84:63:cc:d8:fb:47:95:26:d3:bf:
         6e:5f:a3:96:db:63:7b:65:9c:b8:49:02:ff:6a:69:94:98:d3:
         9f:c4:35:a7:66:c1:a3:c7:b6:f2:4d:d8:e7:7a:8a:54:2a:b6:
         9f:c1:73:47:5d:84:8d:7b:ec:dd:f6:aa:79:11:2b:58:1c:a9:
         d5:48:28:ea:f8:76:14:56:da:88:fd:65:28:db:77:4a:53:c2:
         e5:18:3e:27:c9:37:f8:c5:6d:49:ab:41:f0:30:60:5d:70:b3:
         d1:33:e5:e8:37:38:a8:00:13:aa:90:86:7f:19:66:0f:cc:58:
         96:42:8d:e6:30:61:28:fa:8e:f3:af:97:c0:53:6c:d4:11:5f:
         ce:17:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:21 2024 by rpki-client on console-fra.rpki-client.org