Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/55b182d4-2867-32a2-a648-db4c742f1c53.roa
File:                     55b182d4-2867-32a2-a648-db4c742f1c53.roa (raw, json)
Hash identifier:          vBPoWbs9lsGCD8Dqjh+5AjfHbzSKF+DcJnlo2UzgFqA=
Subject key identifier:   04:DC:95:CC:7D:AA:3C:92:81:CE:04:BF:09:F7:B0:25:10:85:FF:1C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845909DEA0108F1C874C55C5E00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/55b182d4-2867-32a2-a648-db4c742f1c53.roa
Signing time:             Tue 16 Apr 2024 13:00:33 +0000
ROA not before:           Tue 16 Apr 2024 13:00:33 +0000
ROA not after:            Mon 15 Jul 2024 13:00:33 +0000
asID:                     13652
IP address blocks:        108.179.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:90:9d:ea:01:08:f1:c8:74:c5:5c:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 16 13:00:33 2024 GMT
            Not After : Jul 15 13:00:33 2024 GMT
        Subject: CN=4258fb6a-c0ac-445a-9e78-f231458f3135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:c0:7f:23:63:59:29:6b:aa:e6:ac:79:88:
                    b7:17:4d:a1:78:0e:97:f4:df:a4:2d:42:dd:bc:9f:
                    f0:93:ac:97:34:18:df:cd:a2:1d:08:fe:e3:a4:14:
                    f0:b1:c5:41:df:47:b5:a8:63:46:cb:e6:7b:3a:be:
                    63:15:b3:ca:5c:0c:fe:0f:54:5a:80:67:bc:fa:2b:
                    5f:04:27:45:81:02:7d:f5:77:30:1e:2d:73:71:54:
                    d8:ce:76:5d:c0:da:a5:30:f2:9e:f8:76:d7:55:e0:
                    4c:27:67:02:53:36:a8:f7:96:cc:57:4f:fe:da:d8:
                    4e:35:6d:29:10:ff:cc:1d:6f:16:21:cd:58:35:a6:
                    ba:7c:32:10:2e:bd:32:81:d6:e4:c7:e3:19:15:95:
                    48:6c:a4:64:68:23:b9:ea:d0:3c:7c:cc:87:4d:58:
                    11:ef:72:df:f3:1d:85:f4:dc:91:d3:a7:2d:2a:3c:
                    ba:b8:d0:34:19:d5:eb:b7:92:35:af:15:16:d6:0c:
                    db:58:75:20:94:77:ba:92:5a:e4:d7:1e:14:a3:3d:
                    8e:54:a9:34:44:09:77:ce:53:b2:ed:37:93:da:22:
                    cb:c7:d3:a0:56:1c:ff:aa:6d:62:56:a8:ed:5a:79:
                    be:96:58:7d:47:ac:f4:10:bb:fc:e5:7c:1d:82:ea:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DC:95:CC:7D:AA:3C:92:81:CE:04:BF:09:F7:B0:25:10:85:FF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/55b182d4-2867-32a2-a648-db4c742f1c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:d8:90:1c:41:b2:f8:b2:99:37:88:0a:72:4d:00:27:13:
         b3:7a:ae:fd:02:8f:2f:30:35:11:0b:78:ce:14:98:a4:85:a2:
         b1:d2:44:ea:ec:09:a0:19:58:bd:e1:cf:d9:af:a3:ca:a8:55:
         7a:f6:fd:5a:bf:5b:b3:31:ef:3d:b2:40:46:c0:98:ee:3e:83:
         77:ad:c6:1d:d2:1c:46:38:05:75:90:82:2b:ad:8e:0d:ef:88:
         85:14:26:32:c2:dd:d3:67:99:a4:c2:12:87:45:10:18:89:24:
         13:e4:ec:44:04:ee:73:d5:05:2c:f1:0f:ee:85:ad:88:cd:00:
         1a:86:13:0e:69:d5:6e:1c:df:1d:94:e4:04:1c:f3:d9:13:fd:
         71:13:d3:d9:f5:15:2b:32:af:29:c6:3d:61:e7:39:02:2e:ee:
         40:a1:5c:38:9e:2d:3b:59:da:9f:81:26:56:aa:b2:66:83:eb:
         ff:29:a4:a2:4d:d3:46:0f:aa:90:d5:4c:b4:5c:fc:49:94:6d:
         38:9e:10:a7:a6:e3:39:aa:97:91:33:88:14:2d:a8:3a:06:98:
         a1:c6:09:36:9c:93:46:37:0b:c5:02:ea:be:1c:7d:a1:f6:f7:
         ab:b5:85:24:cc:9e:cc:6e:c7:9f:5a:90:c5:9c:e2:4e:2e:8f:
         c0:4a:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:01:50 2024 by rpki-client on console-ams.rpki-client.org