Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
File:                     0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa (raw, json)
Hash identifier:          Q++iIKPhl0ws576551KUdg4FQIZXS79L3PPpDr2LJHw=
Subject key identifier:   58:CE:88:2F:27:E4:78:91:D7:FA:E1:31:E0:49:09:B8:D5:91:25:AD
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584774FB906D9A19493AFC63ED00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     33392
IP address blocks:        208.103.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:90:6d:9a:19:49:3a:fc:63:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=fa61cafa-92ef-4aa2-8547-aed44eccb05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:c3:04:81:62:32:96:a1:3e:dd:b1:e9:bf:
                    8d:68:01:b3:82:fe:9b:cb:57:5d:cf:7d:3b:b2:a1:
                    6f:5f:27:67:43:37:d9:b1:c1:4c:e0:56:e0:97:11:
                    c5:81:96:da:87:7a:6d:f7:fa:62:5e:a5:96:3c:0b:
                    f2:52:46:cb:c0:e1:ce:89:ab:05:d6:83:0d:84:3b:
                    dd:cb:9b:3b:d1:b7:cd:ad:87:94:9c:6e:01:15:d9:
                    f8:ca:01:dc:dd:33:be:76:ff:ef:2e:ca:ff:18:e5:
                    93:11:d6:d7:e5:f0:ee:49:52:b3:7a:eb:e5:c5:47:
                    23:64:95:dd:46:d3:d8:b9:8b:74:c5:0d:2f:8a:67:
                    3f:01:34:87:ed:a8:e5:98:45:01:1c:1e:f0:3b:ef:
                    fc:39:bb:2b:4a:41:9e:7a:9c:df:41:7d:79:38:a4:
                    05:c7:e9:3a:6c:07:80:c2:d2:74:16:98:97:33:28:
                    24:9e:04:35:a1:42:f6:84:ec:c3:c5:cb:f1:b1:b2:
                    f7:db:60:f8:48:54:58:1d:87:14:4b:09:42:8d:8f:
                    a8:a8:44:90:b0:87:6f:29:73:8a:df:96:35:41:6c:
                    2c:a5:8c:4d:e1:2e:67:8c:7a:c1:5f:68:b9:39:cf:
                    69:e8:07:21:3a:4a:15:b9:35:12:f8:ca:be:86:31:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CE:88:2F:27:E4:78:91:D7:FA:E1:31:E0:49:09:B8:D5:91:25:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0987dcfd-f8fa-3254-8afc-0968ccd1701b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d0:9e:8a:e8:36:d8:2c:d4:61:f3:e1:54:54:18:cb:1d:98:
         9e:3c:4f:84:53:27:e3:a3:f1:2b:83:c7:93:5c:5d:56:84:54:
         33:5e:dc:74:e6:70:53:6d:57:82:e1:cf:6a:ea:6b:c4:a8:40:
         78:26:31:bf:6a:48:85:a9:e0:7e:d6:59:bc:70:89:2c:a1:e7:
         4c:65:ae:2b:93:6f:33:4c:5d:5a:a5:26:46:43:b5:ec:5c:3e:
         9c:5d:45:02:ad:de:63:86:9d:bf:05:cd:7e:8f:13:8f:4c:c8:
         07:33:3a:05:3c:e3:40:d2:c0:e5:35:49:bb:fd:51:fb:82:28:
         74:18:d9:fb:27:ca:09:da:43:db:4a:70:63:29:d7:3f:f8:ab:
         6c:44:44:75:6c:4a:6e:6e:39:d4:7d:b8:c4:5d:77:ec:b0:9d:
         fd:25:bf:8a:67:ae:9e:7a:91:bf:a1:1e:8d:ab:da:07:d6:90:
         c9:b5:31:93:32:da:9b:26:1e:bb:55:3c:96:29:e7:6a:e4:7f:
         11:bb:5d:ea:c9:c7:b2:b3:27:89:19:1c:c2:f1:23:36:82:fb:
         5e:08:41:44:42:a3:99:aa:84:9e:70:86:dd:79:f2:28:38:03:
         ca:4d:74:e2:e5:22:66:63:2e:69:3d:e4:21:9e:aa:a4:47:9b:
         62:05:cd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org