Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa
File:                     cf74587b-27aa-32a1-8742-484a2c276e4e.roa (raw, json)
Hash identifier:          x2C041OIV4Bm1tcdHcXvnkyj3h/qkHXdWOWvKnkGEhU=
Subject key identifier:   4F:2B:E6:31:CF:DC:69:08:17:6F:4A:3C:30:CB:42:48:3C:E0:6C:DB
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858473E8B496BFB82CBBA6140E700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa
Signing time:             Tue 17 Sep 2024 13:00:41 +0000
ROA not before:           Tue 17 Sep 2024 13:00:41 +0000
ROA not after:            Mon 16 Dec 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        208.89.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:8b:49:6b:fb:82:cb:ba:61:40:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 17 13:00:41 2024 GMT
            Not After : Dec 16 14:00:41 2024 GMT
        Subject: CN=9acf2fb7-205a-4255-ba30-e8cbd5533702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:52:d0:da:24:a4:84:d4:6c:53:0f:cb:ca:
                    27:ba:8b:06:50:67:b9:3d:34:bf:31:30:7d:2d:c8:
                    33:f3:6e:a1:e1:42:43:81:24:b2:55:72:8e:8f:ce:
                    52:f9:83:2b:4a:47:ff:05:18:c2:03:b4:4a:f5:83:
                    e7:94:86:58:db:c4:28:e3:ce:5c:09:d2:4b:fe:ab:
                    95:72:38:4c:41:7e:c2:97:a2:62:08:19:7d:68:24:
                    8c:8a:98:08:f6:23:88:fa:32:55:cf:72:16:aa:75:
                    18:b4:21:64:35:2f:cc:b4:48:98:19:df:52:55:a5:
                    b7:a9:6f:72:60:eb:af:72:fe:30:6b:ca:26:38:b0:
                    3a:89:2a:c2:5c:38:f9:d4:5c:0e:e1:da:aa:5a:b0:
                    d8:cd:f6:9f:bf:79:54:ac:ef:44:60:78:8c:b5:29:
                    af:0f:07:47:af:10:22:75:7e:af:0c:83:6b:b8:bc:
                    05:b6:c9:af:75:b9:25:9f:9a:90:88:e2:a4:46:7e:
                    7b:90:e7:04:da:44:2d:b1:8c:5a:05:4a:3e:a0:f4:
                    c6:e9:c6:57:6a:39:94:82:2a:65:fd:82:4a:17:f8:
                    17:ac:68:88:b2:e6:58:ff:6f:02:3c:56:6a:6c:a9:
                    ce:33:2a:fc:bf:88:a8:b4:56:ee:c8:8a:98:2b:60:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2B:E6:31:CF:DC:69:08:17:6F:4A:3C:30:CB:42:48:3C:E0:6C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/cf74587b-27aa-32a1-8742-484a2c276e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:26:a3:79:e1:9d:e1:d2:1d:2b:08:89:ab:46:de:67:fa:35:
         4f:2a:7d:77:6a:2f:c3:30:db:8c:68:47:7a:fc:4a:fa:92:e2:
         f3:3c:ec:19:a7:50:6e:08:03:af:6f:48:f8:77:46:0c:e2:86:
         5e:c5:1c:61:e3:61:cd:64:31:91:81:81:0e:c3:ff:99:36:87:
         3d:0a:f8:25:90:c3:34:5f:a0:e1:e8:1d:98:01:bd:cf:3a:18:
         37:92:45:fe:eb:5b:99:60:0c:8d:1d:57:de:93:d4:bf:68:99:
         8f:d3:43:f5:34:f4:60:f7:87:1c:a2:19:a3:48:c4:d9:91:4d:
         0d:b2:09:b4:77:b1:16:bc:fb:79:85:de:4f:00:c3:a1:a9:4f:
         18:b4:f2:b1:5f:06:e1:6e:47:bf:3c:26:e9:24:68:17:1a:10:
         9b:54:47:93:b2:8e:d4:2f:26:9c:da:71:e0:c8:f7:ce:f4:ef:
         7b:55:cb:79:9b:1c:04:33:04:e2:a1:49:e1:55:d5:5d:b9:0a:
         c0:01:a7:ed:47:ba:90:1f:b7:fa:be:68:de:5e:be:fd:a9:65:
         44:cf:94:e7:64:6f:f9:c0:92:15:70:86:ad:1f:75:6e:a5:f6:
         76:fb:6b:68:9e:43:d0:6a:75:78:0e:e0:69:35:3c:2e:5e:23:
         28:e9:8b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org