Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa
File:                     cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa (raw, json)
Hash identifier:          phJ2X8m1Vc62ewt9pO8B6i0m6GwoASyoY+Tt9zc0AY4=
Subject key identifier:   83:2B:F4:3D:69:4F:33:0E:71:AC:07:91:09:1C:91:7B:B9:D7:4C:7C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E62A9CCAB8E492E7EEFDC280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        208.117.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:9c:ca:b8:e4:92:e7:ee:fd:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5654549c-213e-42f0-a294-40ec111043ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:a4:23:fc:4f:5e:17:4a:b6:82:07:86:9d:
                    5c:56:d0:b9:08:b3:1b:8b:3b:7c:76:c7:85:21:5c:
                    62:7d:90:9d:f1:a5:0c:75:5d:18:4e:14:61:d5:96:
                    07:04:f1:7e:3c:09:a1:04:c9:90:de:f0:bb:d5:f4:
                    b5:44:46:f9:14:dd:f7:ce:58:71:de:24:39:f1:23:
                    2d:15:ca:c1:ed:91:23:83:a7:29:53:da:a7:a3:0c:
                    3c:33:5a:56:3c:42:49:d6:71:b8:bd:a8:0e:fe:97:
                    cb:fb:9f:7d:c2:da:bc:f7:76:22:05:9d:a0:14:d4:
                    64:d6:18:d3:74:07:cd:9e:14:85:ce:30:3c:1a:f6:
                    67:c6:a9:56:a8:91:63:6f:ab:2a:e5:0c:7c:f8:c9:
                    46:58:03:21:c6:08:01:d0:dd:f8:f4:05:e2:b2:ad:
                    cd:16:56:df:73:b7:82:e9:32:12:e8:69:b9:67:48:
                    e4:03:ef:30:7e:4b:52:df:e2:c5:78:5e:dd:99:cf:
                    5b:13:fb:32:f7:ae:7b:5b:46:bc:d4:c1:c2:82:04:
                    e4:63:f3:67:9b:7e:8a:22:b7:21:29:f1:01:a2:ca:
                    de:2f:7f:b1:6a:ee:a0:1f:9b:e7:3c:74:04:e2:7b:
                    0f:ea:6a:15:07:81:05:f2:7c:ff:e3:31:4b:bc:40:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:F4:3D:69:4F:33:0E:71:AC:07:91:09:1C:91:7B:B9:D7:4C:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:5d:83:d4:54:81:1a:cf:5b:75:12:d7:ef:8c:20:3f:12:2e:
         a3:d4:44:7c:b6:56:de:ec:ad:39:20:d5:ed:d5:90:ad:26:2c:
         7b:2a:7b:de:b0:a0:04:e0:85:1b:d9:8f:f3:78:ca:10:a4:c1:
         2f:60:21:1f:66:d7:dd:28:fb:cb:53:12:4c:9e:7e:a5:78:54:
         22:e8:c5:ed:bb:2c:fc:f0:8c:56:24:e2:ff:f5:36:55:ae:ae:
         0b:69:ec:02:4b:9f:6a:e3:92:d4:58:a8:1a:35:0a:7c:e8:2a:
         c7:0d:28:74:10:03:e9:42:87:3d:cf:30:99:bd:a6:e2:21:16:
         8d:1c:8a:33:bf:2c:84:a4:a3:2d:04:11:b8:2a:40:41:92:4c:
         72:6e:6e:e6:c1:e5:8b:21:2d:dc:81:5f:ef:7f:fc:98:ab:dd:
         c1:df:e0:65:01:5d:0e:b4:5f:c1:cb:22:3d:d8:91:c5:c3:b4:
         0c:d7:dd:d8:45:53:ad:0a:ef:98:ec:0f:4d:8f:a7:1c:ef:9f:
         ae:7c:5d:ec:59:97:1d:87:79:6a:5b:1f:34:30:c8:5d:90:3e:
         16:d4:88:7c:e6:71:0d:f1:88:9e:2e:c5:ef:e1:4d:7c:0b:3d:
         65:39:e7:03:64:26:62:b7:bb:f4:21:87:22:36:e1:44:ad:00:
         fd:d4:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----