Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa
File:                     da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa (raw, json)
Hash identifier:          wLDI3fWNhQHXfu6xdkeNwtilAJFuGGqG+FlyVfHGn4c=
Subject key identifier:   69:02:57:A7:2A:9B:38:66:78:5E:72:11:B4:C8:33:3E:F9:64:E3:4B
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F432858477D5BA3CF10F8C21087E52680
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     46887
IP address blocks:        208.38.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a3:cf:10:f8:c2:10:87:e5:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=3572a4c8-342d-4534-80fe-da621c619a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f6:c0:22:52:0c:ab:24:75:02:03:a5:cf:d6:
                    8e:ea:7a:5e:c3:13:d1:c5:b3:c0:51:25:cc:02:b1:
                    3c:c2:fd:03:c8:98:2a:be:34:b9:58:10:d1:df:12:
                    b3:6d:c1:4d:a6:3e:93:e3:ab:69:c3:79:80:15:65:
                    78:00:92:7a:ce:fd:b0:14:8d:60:44:3b:47:82:a2:
                    83:65:cd:0a:2a:26:c9:60:bc:41:f3:4d:05:e9:f8:
                    1c:e7:f1:68:6f:df:31:af:c0:4a:53:f8:98:b0:1c:
                    7f:12:77:72:39:ad:fc:0f:9a:04:f8:51:8a:1e:62:
                    08:a5:07:3e:fd:6a:9e:a4:01:05:20:04:95:21:3c:
                    3c:a3:a2:d1:8a:30:84:91:65:81:4b:4d:45:c4:10:
                    05:15:66:85:1a:d0:ac:a5:a3:3a:3b:d9:5b:aa:c8:
                    b3:3b:77:8b:5a:e6:c1:ad:55:05:66:ac:fc:70:30:
                    cb:26:3f:98:87:91:ac:87:df:ec:6e:2a:e4:77:dd:
                    48:03:1e:b4:b1:5a:ab:1a:be:64:a8:d4:39:d0:77:
                    9a:91:2c:54:12:3e:dd:d8:7b:02:d7:12:a7:2c:9f:
                    06:b4:0f:18:73:2d:e5:63:c5:2d:9b:90:97:7c:4b:
                    89:02:fd:c3:5d:42:b5:a0:60:a9:ab:e8:0f:99:27:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:57:A7:2A:9B:38:66:78:5E:72:11:B4:C8:33:3E:F9:64:E3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/da0fa2e6-4a73-3f53-9ebf-f31fa35eaaa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f8:51:af:81:f0:e2:55:17:99:69:fc:e4:9b:e9:77:56:14:
         16:28:2d:28:19:be:29:7d:09:fd:5a:f7:3a:1a:74:98:cc:ac:
         34:c2:e0:07:ad:ef:de:4b:94:83:89:df:b9:b1:96:8b:a5:84:
         0e:c6:92:f8:db:6c:8e:90:93:b6:60:a9:22:f2:9f:be:86:4a:
         85:e5:a1:5e:51:b7:8c:4f:be:8d:a4:35:35:26:48:b6:68:25:
         4c:70:7a:d9:22:ba:f1:b7:80:0c:49:62:aa:95:c8:73:e7:b8:
         ba:7b:57:87:b5:96:b7:c1:45:40:4d:be:27:f9:71:6f:49:57:
         e4:7e:70:68:dc:34:e4:6c:ad:a4:81:68:8a:fc:3a:ea:66:31:
         7a:d4:dc:0e:53:aa:bc:31:a9:50:5a:21:ae:a9:77:5a:a5:3c:
         ef:7c:25:ce:9f:a7:38:a2:01:d2:16:ac:bf:86:c3:fb:52:e1:
         2b:7e:f1:02:da:da:d1:a8:d0:39:98:39:ba:1e:be:fa:a3:b5:
         17:4f:71:42:ae:08:48:2e:3d:65:16:0f:6a:36:93:89:db:f7:
         7e:5a:ed:fb:85:5b:c8:95:8c:07:28:e3:c6:c7:f6:e7:3c:10:
         a7:61:72:79:b9:f7:c8:e0:85:7c:ae:52:d3:7c:29:66:f4:05:
         e4:d8:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org