Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa
File:                     2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa (raw, json)
Hash identifier:          04DpR8eq9rq7NnPSDZx6SYIbr9mfENBtI5liYPcFpQk=
Subject key identifier:   4B:1E:3B:7A:87:C6:44:D4:04:AE:F4:C7:CA:90:5F:8D:13:13:4F:70
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285847292AE03223390613D347D460
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa
Signing time:             Mon 09 Sep 2024 21:14:29 +0000
ROA not before:           Mon 09 Sep 2024 21:14:29 +0000
ROA not after:            Sun 08 Dec 2024 22:14:29 +0000
asID:                     8100
IP address blocks:        186.190.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:2a:e0:32:23:39:06:13:d3:47:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Sep  9 21:14:29 2024 GMT
            Not After : Dec  8 22:14:29 2024 GMT
        Subject: CN=0d7ee906-b5c0-4e68-ad01-3c8621e32080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:1d:ed:7d:b4:57:8d:36:63:e7:51:4b:d8:
                    85:da:2e:4b:c6:df:b0:aa:f5:77:87:f7:7e:18:9a:
                    4b:27:8e:e1:30:34:56:4a:87:37:da:b4:50:b6:76:
                    af:99:26:94:05:4e:78:82:06:bf:99:d6:a8:52:46:
                    28:eb:c0:4a:f1:3c:fb:b4:f5:ee:61:3b:2e:26:ec:
                    0e:0a:7c:01:d7:c9:01:2a:fc:f2:8e:d4:06:b4:af:
                    4d:17:aa:c7:ad:23:c9:f5:cf:a5:45:e4:db:7f:c7:
                    b9:30:03:56:f3:37:bc:a8:b8:04:9c:88:23:30:42:
                    50:34:f0:c8:88:4c:3a:f9:6c:48:76:c4:6f:95:a2:
                    af:b6:66:6b:d8:48:94:2b:77:dd:79:ae:9f:4f:c6:
                    fd:d3:89:c4:64:9b:d3:21:65:1e:74:56:db:4a:8b:
                    42:71:8b:1e:d8:13:6b:34:cf:6b:56:12:1c:81:bb:
                    7c:96:57:e5:50:11:91:5e:97:72:47:da:b6:d9:76:
                    0c:44:c1:71:5e:29:0b:08:94:12:65:13:ea:f5:d1:
                    15:df:87:b2:ee:7c:91:63:79:0e:0c:f4:7f:2f:32:
                    a9:0e:9d:9d:1e:69:7b:81:c5:0c:a4:5a:9b:dd:a9:
                    2d:50:64:36:ed:81:33:ce:5a:47:80:c9:90:4d:9d:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:3B:7A:87:C6:44:D4:04:AE:F4:C7:CA:90:5F:8D:13:13:4F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/2baa4345-9972-39b4-8f3b-fc39fc293a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a1:b2:05:a1:50:e8:1e:2d:10:52:cd:3c:9e:f7:35:6e:ad:
         d3:2f:56:08:33:16:c2:b9:86:f6:9e:03:75:60:03:96:57:16:
         28:0c:2c:a5:f7:6f:cb:25:70:a6:0e:00:76:bd:89:e0:e5:68:
         17:57:c0:64:96:c1:c3:51:81:7a:af:0d:07:88:d7:b6:1c:7f:
         ac:5d:80:ce:39:d1:21:8e:de:94:0e:22:29:ea:b0:a8:08:37:
         11:6b:f0:f5:a5:8f:6b:85:6b:ef:e9:f5:50:67:dd:98:70:06:
         1a:25:67:fd:22:4b:7e:db:61:86:7d:94:6e:45:3f:44:58:ae:
         0c:c0:ae:8d:3c:a3:9a:37:0a:fa:b7:8b:b4:a5:94:0f:3d:9d:
         92:e4:24:2d:3a:59:c4:f5:cd:8d:01:8e:b5:44:43:43:ad:fe:
         62:a2:40:1b:15:5a:66:9a:35:ae:56:d6:58:c0:97:d8:c6:ef:
         eb:30:ed:bd:6b:fc:43:a2:dc:a4:d4:c6:65:b8:e3:d1:fe:b9:
         61:7e:52:68:ee:3c:04:aa:15:d7:d3:c2:13:da:3a:88:46:44:
         da:2f:2b:be:0e:0f:44:a1:31:5a:bf:a1:7c:c4:e7:37:a4:f3:
         5b:ea:2a:58:c9:48:4b:32:c8:bb:3d:f6:d1:b0:41:42:93:6c:
         c6:e3:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 05:59:11 2024 by rpki-client on console-fra.rpki-client.org