Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
File:                     93a1b843-74a2-369d-b6df-752f028943a5.roa (raw, json)
Hash identifier:          eWkJeRCBr1Liu2WwfL1QToJGcWOkTbwGUH8DtuDKqVg=
Subject key identifier:   87:10:20:52:18:65:77:22:CF:83:50:E0:C2:A0:42:95:2C:6C:70:70
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F43285847A1A6805BB74C2ED84A30F380
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     4186
IP address blocks:        192.104.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:80:5b:b7:4c:2e:d8:4a:30:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=27f1ef4f-c131-4dc9-9476-980795142e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:98:9a:c1:b4:ff:c3:31:e3:30:6a:2e:66:44:
                    ca:48:38:43:d8:47:19:22:e4:f6:20:ec:59:1c:1f:
                    09:66:27:00:3c:b0:bd:12:80:8f:2c:57:94:b6:6e:
                    1f:a4:f2:72:d5:03:4b:33:a1:4d:c8:e6:17:e8:b2:
                    72:74:99:0c:13:d7:f1:b4:de:1a:1d:fc:aa:6d:3c:
                    92:48:1e:f2:75:e3:52:d9:78:89:03:48:da:22:27:
                    c5:71:4e:c7:94:c2:fd:31:89:20:40:d4:1a:d9:5c:
                    5a:09:7f:d2:15:7c:01:10:9d:e4:6e:e5:37:38:c6:
                    b3:5f:bf:bc:a0:36:a4:16:a2:af:10:52:f8:71:bb:
                    75:60:17:06:fe:7a:b3:0a:b2:ef:aa:c2:15:92:19:
                    cc:c5:e3:67:cf:09:1d:3c:ee:65:90:2d:80:7f:fd:
                    cc:fb:fa:fe:3f:2e:d9:ed:99:6b:ae:40:db:d0:c2:
                    17:d4:66:02:18:68:ee:d6:ec:43:8c:a6:0d:ae:7f:
                    09:62:2d:8d:76:1a:2d:14:1f:a3:14:8a:e3:ee:cd:
                    46:c5:d9:6c:a8:7e:90:23:ad:1b:93:af:47:84:05:
                    c3:9d:c4:96:0b:43:78:07:9a:5d:70:33:31:70:b6:
                    c0:c9:14:a0:47:50:da:89:57:12:10:e5:3a:58:06:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:20:52:18:65:77:22:CF:83:50:E0:C2:A0:42:95:2C:6C:70:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/93a1b843-74a2-369d-b6df-752f028943a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:84:7a:37:1e:de:2a:5d:8f:dd:ea:de:48:f8:01:34:61:a7:
         7a:45:10:0c:3d:0a:25:11:7f:16:43:5b:e1:16:bd:4f:65:76:
         f1:94:c8:29:e3:66:e7:eb:cd:ae:2c:97:65:d4:c7:7b:46:2b:
         3f:c9:3d:9c:26:68:b2:ad:48:c3:56:1a:c4:4a:32:4c:e6:8c:
         f0:38:cf:9e:f3:c2:80:5b:17:0d:98:af:9f:14:38:94:b9:16:
         3e:cb:af:c0:72:35:7f:c5:9e:b6:69:64:01:64:55:28:0b:2f:
         b7:24:e3:94:63:47:a9:5b:d3:62:be:2b:d8:c2:33:59:f4:e8:
         e1:39:bc:96:f3:96:56:b4:5b:95:4b:d4:6b:d9:a9:3a:9d:44:
         8d:02:13:ba:1b:eb:58:4c:17:30:cb:a2:7b:66:5e:5c:15:3b:
         cf:1f:9a:b2:9b:15:37:90:67:89:5d:43:3d:86:04:90:93:a0:
         39:3a:15:65:87:31:f9:f7:f6:72:53:4a:65:ed:8c:77:20:76:
         59:db:53:16:cc:7c:6b:01:bf:af:b6:8b:5b:80:f8:62:1e:dc:
         73:1c:3b:8c:17:19:c5:73:d9:f2:b2:ce:94:74:32:13:ec:a3:
         db:8a:dd:5a:4c:a0:ca:15:13:37:4c:8f:a0:31:f2:a3:9c:0c:
         42:04:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:45 2024 by rpki-client on console-fra.rpki-client.org