Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
File:                     eff67105-f705-3af7-ae6b-82a1033011ba.roa (raw, json)
Hash identifier:          6nxdnbLVX/uByn8UMN8J97fkI7nP6VKKoBx84RWOVIo=
Subject key identifier:   A8:73:AF:B2:27:15:E2:41:F4:62:52:A3:18:82:02:CF:C3:B7:BC:7A
Certificate issuer:       /CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
Certificate serial:       010D0C9F43285847FB1A2E7FC1A15E5C4A789940
Authority key identifier: D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
Signing time:             Sun 24 Nov 2024 02:00:27 +0000
ROA not before:           Sun 24 Nov 2024 02:00:27 +0000
ROA not after:            Sat 22 Feb 2025 02:00:27 +0000
asID:                     401285
IP address blocks:        209.182.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:1a:2e:7f:c1:a1:5e:5c:4a:78:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
        Validity
            Not Before: Nov 24 02:00:27 2024 GMT
            Not After : Feb 22 02:00:27 2025 GMT
        Subject: CN=23656efd-775e-4259-b9aa-9e23c6131f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:ae:04:e7:f6:a7:ae:fa:f0:39:ea:a1:c7:
                    8d:bc:d6:1b:f2:64:5b:d8:45:95:14:75:03:4b:e9:
                    07:89:5e:f1:0e:e4:38:cc:82:cf:6a:fe:c2:b8:e8:
                    be:d6:9d:c9:7d:84:db:78:de:d5:e2:1d:08:3c:e6:
                    36:8b:bc:85:c8:a6:f4:b2:2a:64:6a:ca:5c:9d:5a:
                    13:18:9d:71:ba:24:9a:0d:c1:f7:6a:21:17:0c:21:
                    ec:6a:3f:62:65:0e:98:9f:81:0d:a5:bc:d1:13:01:
                    84:3c:8e:14:57:55:24:c0:70:87:f9:25:bf:40:93:
                    0c:49:8a:73:f7:1b:05:d6:0c:75:ae:c8:59:e1:af:
                    d9:bc:f9:d4:2c:2d:45:55:22:75:72:b7:8b:25:ca:
                    30:fe:7f:c0:8e:f8:3a:4e:04:01:7c:3c:1d:1c:f1:
                    b3:d1:9c:c1:fc:ab:8f:0d:8e:59:63:09:e8:04:cb:
                    47:c3:64:e2:e7:86:00:af:02:40:b0:5f:22:01:6c:
                    ac:94:1f:2b:12:b5:34:45:03:61:05:24:df:da:35:
                    38:48:6a:2f:0e:93:df:35:5c:92:f9:ec:18:50:85:
                    d4:b3:06:12:c2:85:15:01:45:75:2a:ed:e0:c2:7e:
                    a6:49:14:9e:d2:d0:9e:78:f1:c0:90:56:3d:71:be:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:AF:B2:27:15:E2:41:F4:62:52:A3:18:82:02:CF:C3:B7:BC:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl

            X509v3 Authority Key Identifier:
                keyid:D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:72:b0:f6:b4:e0:4b:f5:ae:3a:ff:55:5f:71:d5:f8:e9:
         cd:4b:53:87:39:6f:ef:93:09:36:55:d4:cd:5f:32:1d:86:06:
         09:a0:99:6e:dc:50:ff:f0:64:db:77:0a:67:b4:a9:82:9d:92:
         02:c8:b5:8e:d5:bb:6b:df:f8:4a:42:a0:76:1c:c3:8a:26:03:
         30:59:2c:9a:1b:3c:21:91:29:f0:02:ab:6b:ec:99:d4:d4:d2:
         8d:61:f8:e5:13:af:b3:17:60:61:a7:ec:30:70:a8:fe:30:ad:
         d4:0e:06:62:34:7e:3f:67:f9:e9:8c:5f:d4:44:5a:b5:ab:f6:
         02:fc:90:7f:b3:d7:a1:94:31:15:50:ab:8d:b4:7c:7f:11:28:
         8a:c8:fa:b2:98:10:29:c4:63:98:da:a1:f7:ad:ba:80:2a:51:
         be:28:61:07:e8:9b:69:91:a3:ad:1a:b3:16:b0:ef:4e:dc:70:
         8a:28:db:b7:47:60:17:20:98:61:5c:0d:d6:58:70:d6:ab:cd:
         66:33:38:0f:40:ae:6c:76:78:6b:68:73:82:ea:4f:18:51:e0:
         4f:8e:d5:99:52:30:47:2e:0b:af:0f:43:a1:5a:7e:fb:7f:de:
         3e:f1:9b:25:ca:f9:21:ce:46:83:c8:5b:fe:43:90:70:8b:4e:
         69:ac:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:11 2024 by rpki-client on console-fra.rpki-client.org