Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa
File:                     10b807b1-e711-3d18-8639-ef43944d7fd6.roa (raw, json)
Hash identifier:          gGHtTpJESXqbAuIOH6zl00MWtoF6jb7TNQ11dv7Jf5c=
Subject key identifier:   22:5F:87:B4:D3:CC:8C:F7:4D:86:68:C7:90:BF:BB:1C:6C:E4:92:59
Certificate issuer:       /CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
Certificate serial:       010D0C9F432858475910B8D13EF6B467F06B7A00
Authority key identifier: 95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     396982
IP address blocks:        168.100.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b8:d1:3e:f6:b4:67:f0:6b:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6663be-0957-45cd-86d6-e3d6354f6b9b
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=911973e1-2640-4ed9-b313-52ddfc43de92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7d:c0:f6:70:17:e5:35:6b:80:a9:b5:ba:4c:
                    f0:fe:6f:d5:0e:83:54:41:54:70:bb:b3:ca:92:18:
                    09:f2:80:1c:ba:69:8e:1d:40:60:fb:12:9f:1b:50:
                    7d:1b:04:2a:4e:00:1a:14:55:8a:34:d8:f2:13:11:
                    04:95:ff:76:6a:d7:84:c4:fb:73:70:4b:8a:78:2e:
                    10:f8:f2:21:f8:98:d4:19:ea:05:3b:79:72:90:e8:
                    ea:a6:95:e0:ff:4e:fc:15:2b:0f:0c:45:a2:5e:f3:
                    f4:69:d1:14:9f:57:b8:dc:7b:46:de:dd:95:af:e8:
                    66:45:76:cd:e7:59:24:b5:d8:2c:3a:73:91:30:34:
                    6c:43:29:9c:c8:59:bb:a4:c5:c9:45:e3:fb:b5:2e:
                    9a:30:8d:9d:84:64:f8:85:28:f1:a2:a9:32:ec:9e:
                    0f:d6:81:c3:32:75:23:63:8c:53:c7:a1:f0:e6:84:
                    7f:60:d7:4d:9f:84:99:df:fc:bd:a0:0e:f9:3e:b3:
                    f0:3b:37:7f:9e:8e:8a:dc:4a:cc:8e:3f:c0:bd:a3:
                    32:42:f8:a6:26:58:72:1b:b0:67:6a:71:65:2b:eb:
                    a1:82:2e:1d:d0:ea:fb:c1:29:e5:e0:21:62:e4:c2:
                    2c:fe:c9:30:97:58:ee:bd:be:b2:ec:0c:f6:a6:d1:
                    fb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5F:87:B4:D3:CC:8C:F7:4D:86:68:C7:90:BF:BB:1C:6C:E4:92:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/10b807b1-e711-3d18-8639-ef43944d7fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b/8f6663be-0957-45cd-86d6-e3d6354f6b9b.crl

            X509v3 Authority Key Identifier:
                keyid:95:35:DC:88:C9:4E:85:61:93:6A:C8:A6:BD:08:11:D0:A0:AE:7E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f6663be-0957-45cd-86d6-e3d6354f6b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:de:bd:db:da:13:aa:4d:a4:30:70:2f:02:fa:a2:62:cd:c3:
         3c:2e:84:0e:26:8f:00:08:85:9a:b1:8f:cb:ae:68:ad:fd:19:
         ec:0b:9b:54:ba:5d:69:54:0c:c3:8b:52:f8:3a:a3:1e:a2:ed:
         55:a3:d9:85:78:7b:fc:68:3a:d3:40:e8:44:ab:79:57:5d:9b:
         3f:3e:a1:76:62:09:59:a6:0a:57:d8:95:c8:eb:d2:ae:27:f4:
         c8:b1:b2:de:d7:6b:80:29:7d:42:24:c3:ef:94:e1:74:7b:22:
         fa:01:49:6a:34:06:a2:4b:ae:e2:da:d2:c6:0f:06:ed:e4:47:
         88:fb:00:ba:be:7e:2c:6d:5e:e3:04:08:ec:26:51:8d:2c:44:
         45:c4:ad:fa:8f:db:c8:37:60:8d:09:a0:d0:3f:f5:fc:a7:8c:
         da:31:f8:cd:58:09:17:ab:25:a7:15:49:0a:b5:1f:34:ed:40:
         57:a6:ca:2c:34:ca:76:ef:89:28:ac:26:f8:35:d2:e9:08:c4:
         51:55:91:18:1a:01:4c:63:c8:7e:b9:30:d5:3a:bc:f5:50:e5:
         9c:9d:1a:e3:ca:33:04:57:29:66:73:f0:bb:87:55:8e:a8:77:
         b0:14:63:a9:5e:d1:5e:ee:ec:a5:0e:fb:ef:86:88:99:39:40:
         af:bc:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org