Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76f8b234-cd57-39f8-bf42-b9b33097a159.roa
File:                     76f8b234-cd57-39f8-bf42-b9b33097a159.roa (raw, json)
Hash identifier:          HxVXf+voJmsJFAQaC/om5ftQJfVKzu5PfR9YzKlqKBw=
Subject key identifier:   A0:51:CF:C6:12:6E:38:3B:8C:59:93:70:EE:E6:1D:43:FC:92:4D:08
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838FFCE06F357943D5089708800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76f8b234-cd57-39f8-bf42-b9b33097a159.roa
Signing time:             Fri 19 Feb 2021 05:00:00 +0000
ROA not before:           Fri 19 Feb 2021 05:00:00 +0000
ROA not after:            Fri 12 Feb 2027 05:00:00 +0000
asID:                     17359
IP address blocks:        208.89.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ff:ce:06:f3:57:94:3d:50:89:70:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 19 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2027 GMT
        Subject: CN=c9d45ef6-022c-40f3-af44-9f8e6f5a1053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:e9:1b:a2:ce:ca:a2:6e:28:0f:55:83:0c:
                    9e:b6:0a:40:07:e5:62:3c:e4:16:23:9c:a0:20:1d:
                    35:40:3c:bb:ee:8d:20:ee:e4:3d:26:b7:c7:d6:25:
                    25:98:0f:5b:fb:2b:b7:20:18:e5:fc:cb:bd:3b:06:
                    4f:14:2d:8e:43:3d:22:dc:f9:de:1a:92:29:e9:11:
                    1b:18:b7:b1:66:60:28:e6:8d:43:04:5f:ed:6b:0c:
                    6d:91:5b:41:96:e1:e5:6b:34:54:67:60:64:fd:b3:
                    a7:06:60:73:cb:8a:d7:49:ad:a8:57:47:bc:f0:a4:
                    e0:0e:b3:e8:b0:68:af:cd:08:9a:8c:b5:0a:7e:29:
                    21:6c:2e:34:f4:95:93:c6:0d:a4:ba:1a:d1:f4:50:
                    53:e0:63:a3:5c:c4:b1:e5:7d:2e:ff:6b:5a:47:f8:
                    c3:27:9d:13:6d:cc:f1:91:6e:5c:96:92:ea:84:fc:
                    a1:a6:10:3b:3f:f2:7b:5b:00:4b:8e:53:f3:da:7a:
                    6d:a9:b7:27:f8:e6:d8:fb:65:c7:e7:49:ce:db:a9:
                    6c:b9:7d:75:99:1e:b4:8e:8a:82:23:6a:f3:26:94:
                    0b:37:23:de:c9:d3:9f:ca:be:b7:7f:78:78:26:d8:
                    59:ca:06:72:74:0b:8c:a6:4e:25:56:c1:ed:56:05:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:51:CF:C6:12:6E:38:3B:8C:59:93:70:EE:E6:1D:43:FC:92:4D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/76f8b234-cd57-39f8-bf42-b9b33097a159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5b:33:64:60:92:48:a0:cc:c5:3d:2b:d6:ef:03:66:39:3a:
         f6:10:52:0e:ee:a5:4a:f2:0f:e1:58:ff:c1:ba:3b:94:3e:c8:
         69:23:5a:44:5f:bd:c9:12:97:a3:45:8a:30:54:6e:07:d3:3f:
         ee:78:9f:91:1d:ff:e3:d4:f7:2d:d9:e0:d7:c0:39:27:68:90:
         d7:44:db:fc:b6:0e:28:50:ff:46:84:b4:de:7f:e5:7e:86:4f:
         ca:4d:e3:08:7b:8b:47:5a:68:4b:f7:1e:ba:b6:e3:18:58:33:
         06:6f:75:7e:fd:cf:72:2c:25:87:a5:80:00:d1:28:6c:c6:2e:
         16:0f:eb:5c:7f:10:a1:02:d7:13:b4:01:cb:ba:1f:0a:f9:eb:
         3a:06:eb:17:1c:7b:57:6d:b0:85:e3:f7:69:7c:ce:37:cf:4f:
         e7:56:b7:ae:16:13:24:6a:8b:cc:6d:e1:ef:64:57:20:6c:ed:
         89:88:94:66:7f:82:37:1e:7a:76:aa:64:86:7f:ec:c8:0d:3f:
         f7:3e:35:89:9f:e8:c5:ae:06:85:d6:cb:f9:13:f5:44:66:f4:
         b9:7b:88:30:7d:7e:87:66:05:94:3e:d6:3a:aa:09:ed:f1:04:
         8f:35:2a:6a:81:65:fb:7c:6a:31:53:9e:7a:8b:9a:60:b4:1a:
         94:d3:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:25 2024 by rpki-client on console-fra.rpki-client.org