Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa
File:                     bd08393c-45f4-32bc-aeef-2679261fb921.roa (raw, json)
Hash identifier:          4OrB0fQ9wAJxrVqb5fQQOl2LkSRybECDwjNAbyL7SaA=
Subject key identifier:   E5:5B:1D:75:D9:05:9B:8D:21:EF:00:C1:90:64:33:AB:D8:12:CB:48
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F43285847A5D69CE2735891465EF62940
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     14333
IP address blocks:        208.72.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:9c:e2:73:58:91:46:5e:f6:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=cd13509c-4c5b-42e7-b986-a986bc2509a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4c:33:a5:e2:e1:88:d4:bb:3b:c0:8f:f7:af:
                    70:42:0c:82:d4:fd:55:de:a5:45:5c:ed:3a:1c:45:
                    93:37:29:3b:2f:b8:fe:73:e2:53:d6:9f:18:0f:28:
                    42:90:69:b1:46:0a:f5:56:03:f9:2c:a8:62:a7:d0:
                    95:c1:0a:62:dc:7d:8f:55:a9:56:f0:ee:b2:ba:e2:
                    fd:50:6a:2d:5e:20:db:82:32:8b:87:2d:f1:5e:c4:
                    23:48:ed:18:e3:19:72:d2:c9:fa:4f:af:c6:53:05:
                    af:34:73:14:56:41:35:f1:73:a7:38:a9:df:7b:b5:
                    7a:1f:43:69:49:12:89:b7:e1:04:5a:0c:e3:2c:9e:
                    34:78:22:ad:fd:61:d1:5e:54:3b:89:be:9c:69:a1:
                    6f:ac:91:3d:cb:82:7f:ca:d0:ba:48:97:92:61:76:
                    40:6c:a7:da:3c:e9:7f:de:b8:de:6c:62:06:69:5a:
                    35:f4:0e:26:16:e8:be:ad:8d:90:dc:22:49:72:b3:
                    5d:64:43:fe:4e:2a:89:3a:c4:a3:06:c9:da:bc:77:
                    06:f4:17:d2:88:e3:17:2a:9f:a7:6c:cd:e8:47:70:
                    ac:97:c8:46:7e:61:40:b5:82:90:49:91:1b:1f:78:
                    63:9a:0c:22:76:64:57:8d:eb:78:72:b6:64:38:79:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5B:1D:75:D9:05:9B:8D:21:EF:00:C1:90:64:33:AB:D8:12:CB:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/bd08393c-45f4-32bc-aeef-2679261fb921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:af:ef:52:c1:dd:4a:3d:15:69:e1:73:23:c3:18:f0:28:
         61:85:8f:77:31:f9:f4:de:de:ee:f2:1b:1b:c4:19:7a:6e:2c:
         ee:3a:da:6a:16:0c:1b:57:32:70:6b:51:a4:49:c1:45:d0:5a:
         ce:78:21:46:5d:6d:54:51:94:ad:87:1e:77:cf:06:cb:7b:e5:
         fd:5d:83:a5:9f:4f:9f:e6:97:66:c5:82:b0:15:39:c5:1a:b1:
         24:08:a7:21:22:9a:2b:00:c6:9a:f6:87:e3:41:cd:dd:14:84:
         68:c9:72:9a:b4:cb:ef:9f:99:de:9c:c2:33:d3:6f:96:46:0f:
         4a:4e:9d:9d:1b:cb:2e:d5:5e:41:33:e8:d5:6e:ce:03:82:8e:
         50:eb:7a:2c:ed:17:d4:6a:76:4b:25:fc:59:d1:30:dd:9a:03:
         f4:a3:7e:fc:17:70:e0:43:35:98:e4:1b:8e:2c:db:c8:97:bf:
         59:8a:d8:b2:ba:3c:66:5c:a8:f4:03:f6:ce:2f:e8:bb:e6:13:
         22:69:5c:be:49:7d:64:c6:e8:25:50:c6:68:0d:c1:a8:41:f5:
         23:05:b1:8f:a0:a7:72:4b:05:7e:fe:06:94:24:7b:52:86:34:
         84:d5:c6:4f:6a:af:ee:7b:e3:9e:82:02:21:07:dd:02:dd:fb:
         2d:af:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:06 2024 by rpki-client on console-ams.rpki-client.org