Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/47b768b0-5e75-3797-a2c4-99aa3b4daea8.roa
File:                     47b768b0-5e75-3797-a2c4-99aa3b4daea8.roa (raw, json)
Hash identifier:          XYEm3ipRmpB+Yl5hEtTzO4A/VZGVk1fXTcslyWL6fcU=
Subject key identifier:   4A:C1:A4:97:70:EA:96:21:20:D3:E7:7F:94:DC:4F:B2:15:01:7B:D5
Certificate issuer:       /CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
Certificate serial:       010D0C9F4328584774FB925FC5B46CE43AC0AF00
Authority key identifier: FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/47b768b0-5e75-3797-a2c4-99aa3b4daea8.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     1706
IP address blocks:        208.75.160.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:92:5f:c5:b4:6c:e4:3a:c0:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2686c5f2-35c8-4282-ae9f-58a0bf99be68
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=51e517c5-ef6d-4771-a643-fcadad8ef8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:76:84:bf:db:52:8a:b9:1c:7e:c3:5e:bc:a0:
                    b7:20:6c:36:f9:a0:32:c7:71:1d:79:23:fa:cf:69:
                    7e:e5:8f:30:2b:97:e5:52:13:88:86:00:4b:05:da:
                    67:c0:97:1e:18:5a:f5:76:78:82:9c:9d:45:1d:5d:
                    e5:ad:f3:4a:91:d1:bb:ce:05:cc:fc:68:3b:49:d4:
                    6f:6b:9c:06:c4:cc:3e:53:0f:eb:83:59:1c:f2:84:
                    74:fd:5c:1d:16:18:94:b4:a8:ac:7a:db:e8:e6:d4:
                    41:fe:d3:4e:d9:8b:b5:39:2c:11:cc:d8:37:3a:1a:
                    4a:70:34:57:cc:42:e4:c8:fb:5e:ae:e7:aa:53:17:
                    a5:92:62:0d:0b:43:e3:11:13:1f:55:21:74:6c:7b:
                    bc:f1:9a:25:d0:e6:57:a1:0f:00:f8:d8:de:2a:72:
                    9f:63:44:f1:1d:c6:7c:8f:8e:0a:6a:94:13:77:55:
                    ad:10:6c:22:58:48:05:05:da:ca:f2:0a:89:0d:2f:
                    90:a8:8d:3c:f6:38:2c:cf:be:2a:d0:1d:c2:88:4b:
                    e1:6f:6e:af:30:1a:41:ce:bc:ff:da:4a:c9:0d:4e:
                    08:86:b5:af:2b:f4:a2:73:12:bc:12:02:1f:20:cc:
                    5b:10:9b:45:92:5b:eb:b2:3d:38:1a:3e:b5:99:f0:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C1:A4:97:70:EA:96:21:20:D3:E7:7F:94:DC:4F:B2:15:01:7B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/47b768b0-5e75-3797-a2c4-99aa3b4daea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68/2686c5f2-35c8-4282-ae9f-58a0bf99be68.crl

            X509v3 Authority Key Identifier:
                keyid:FD:76:BF:EC:61:37:91:9A:53:C9:22:3B:74:78:4F:DE:C2:36:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2686c5f2-35c8-4282-ae9f-58a0bf99be68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:31:03:a7:db:f9:a7:4d:63:fe:90:90:31:da:2a:47:84:
         5e:7e:31:53:8c:e4:33:f5:99:a0:48:a5:2f:9e:e1:78:ff:8c:
         c9:d0:89:ea:39:f9:fa:30:67:dd:cc:12:4a:a8:85:e2:ab:4f:
         a0:2f:70:24:64:df:02:8f:5a:6a:d0:c8:74:ac:95:45:c5:a0:
         2b:2a:bb:66:5c:c8:93:c5:4e:74:d9:1b:6d:f0:c7:67:2d:8c:
         24:f5:94:6e:dd:9c:1d:ba:b0:eb:aa:9d:d6:7c:72:6b:0d:fc:
         9e:d6:69:54:3d:c7:c6:19:83:9e:e3:bc:4b:48:a1:cc:71:3b:
         7a:af:f6:f8:07:f4:4b:85:40:ca:8b:f1:00:69:94:9b:ca:0d:
         f8:e2:58:2d:10:44:d1:ee:00:e6:9e:2b:e4:15:93:7b:bd:ce:
         7f:3a:f7:78:df:3f:c2:42:8a:2f:ae:dd:66:e2:6c:0f:26:76:
         3d:73:08:84:03:63:a4:cb:93:0b:fb:18:85:1b:8c:ea:22:36:
         a1:f4:6c:7c:49:d4:e0:e2:94:32:67:15:7f:20:e2:22:64:e2:
         31:02:72:7b:ba:9a:01:3c:26:ca:93:bb:f8:d5:ef:63:9f:d3:
         8b:1b:5a:07:ca:07:09:eb:f3:96:15:80:b0:70:88:36:f4:33:
         5c:b1:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:30 2024 by rpki-client on console-ams.rpki-client.org