Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/197762bf-3143-34ab-9130-ccc6ebf76ac1.roa
File:                     197762bf-3143-34ab-9130-ccc6ebf76ac1.roa (raw, json)
Hash identifier:          VL0tJGmv6TiUaQ0J1e1fE1TKKLOy4Xf6Fj/aMeRD80o=
Subject key identifier:   43:11:B0:A6:76:A3:F7:AA:1F:62:D9:29:7A:D5:4A:C4:CF:E6:6F:19
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584546239F54BC9A04939FE5DEE0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/197762bf-3143-34ab-9130-ccc6ebf76ac1.roa
Signing time:             Wed 20 Mar 2024 20:44:26 +0000
ROA not before:           Wed 20 Mar 2024 20:44:26 +0000
ROA not after:            Tue 18 Jun 2024 20:44:26 +0000
asID:                     36040
IP address blocks:        208.117.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:23:9f:54:bc:9a:04:93:9f:e5:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 20 20:44:26 2024 GMT
            Not After : Jun 18 20:44:26 2024 GMT
        Subject: CN=f7864628-4665-42b1-94ee-e27c8655d1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:0e:55:96:e1:ca:37:95:6a:47:76:2d:4f:
                    c6:aa:72:85:39:d3:19:a9:d4:de:0c:42:90:52:cb:
                    87:b2:d9:d6:9c:f6:1f:65:95:da:d5:b4:c2:6b:80:
                    93:30:56:d4:03:3c:71:f0:1b:ef:01:1c:20:e6:02:
                    0a:a4:dc:59:08:41:62:e8:c6:ea:49:8f:a3:cd:d0:
                    12:ef:74:ff:12:f3:49:45:e3:b1:be:6d:59:01:61:
                    0c:c6:12:33:56:fa:23:00:1e:1e:31:2a:fb:96:05:
                    06:9d:e3:2b:3a:fc:05:d5:8a:6b:4b:77:e7:a0:b9:
                    fd:30:43:40:4d:a5:49:bf:bb:7d:d8:1b:3b:31:d7:
                    a5:12:65:cd:02:79:0d:79:b7:cf:43:ca:fb:29:03:
                    1c:e2:e5:42:a1:f4:55:89:65:f5:3f:6a:9f:21:09:
                    29:a6:89:85:37:a7:a6:b3:2a:d4:12:f9:d7:01:f6:
                    24:45:d2:65:f7:18:1f:5c:bd:ad:48:44:57:47:65:
                    82:fb:61:99:1e:e2:78:ff:a8:4f:e8:25:e4:36:f3:
                    7d:0c:b2:11:d9:02:33:cd:a9:78:f5:f3:e4:c6:0f:
                    09:73:d3:e0:24:ce:80:ab:b1:6c:cc:23:54:5e:3d:
                    7d:37:60:a5:25:72:43:c4:99:cf:f1:ca:ce:88:c7:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:B0:A6:76:A3:F7:AA:1F:62:D9:29:7A:D5:4A:C4:CF:E6:6F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/197762bf-3143-34ab-9130-ccc6ebf76ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:97:bb:1e:9c:be:ec:46:7f:05:4e:32:ed:3f:f8:9a:dd:
         69:49:f7:fa:ce:06:f0:76:75:c2:40:8c:bb:a9:42:3e:35:17:
         9d:55:50:ba:fa:c4:8b:00:83:c7:2b:17:f9:b6:62:46:cf:5a:
         4c:9a:d9:f9:e6:db:ca:6a:ea:c8:9a:1f:73:f5:bd:e9:43:39:
         d0:5d:2d:fa:9e:42:ec:d4:56:34:5e:0d:7a:f9:65:0f:75:70:
         2c:f3:3c:c7:d9:a0:ab:c7:36:f4:a8:58:4b:65:24:89:d6:0b:
         63:97:47:80:56:67:f5:d1:0b:3d:f6:c8:cf:35:b8:4e:55:de:
         89:3f:cc:f9:ac:27:be:b8:48:4f:f7:b2:46:95:a8:87:c5:97:
         7d:9e:5b:ff:36:cb:19:f7:48:35:8b:67:4e:8e:0a:4e:01:f9:
         93:a4:78:f7:ae:8c:91:c7:6d:3b:e4:72:cb:7b:62:63:cc:06:
         ce:b0:2e:ea:01:aa:6c:b9:ad:64:f8:3b:0c:87:57:3c:c3:8f:
         bb:fd:2c:01:ce:d8:01:6f:84:6f:70:e5:3d:64:8a:87:9b:f1:
         52:ec:58:0e:7c:b4:d2:3d:00:c8:a2:ec:27:32:d4:4b:67:d0:
         21:71:e7:4b:57:39:3f:5b:6e:98:c0:c4:f5:0e:46:b5:fe:18:
         9f:a7:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:36:15 2024 by rpki-client on console-ams.rpki-client.org