Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/7cb2fcac-43ed-3b3a-b7ae-a868f5ac2349.roa
File:                     7cb2fcac-43ed-3b3a-b7ae-a868f5ac2349.roa (raw, json)
Hash identifier:          OmyesRwRf6S0q3Gk8mtq0PURU1nLCxArkABtIl736fs=
Subject key identifier:   9F:4C:75:1C:C4:90:F2:38:43:1C:A7:06:11:F4:65:D7:C7:D6:3C:35
Certificate issuer:       /CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
Certificate serial:       010D0C9F43285847A5D69F2930EB01D5FE7E3C80
Authority key identifier: C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/7cb2fcac-43ed-3b3a-b7ae-a868f5ac2349.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        204.90.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:9f:29:30:eb:01:d5:fe:7e:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=1d107e2a-eb16-453f-89e1-a984b0c99ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:5a:b0:0e:30:86:b8:b9:86:f9:0b:98:2f:
                    3c:d2:d8:cb:c2:34:69:27:56:20:81:a5:18:fe:ac:
                    8a:b0:f2:75:30:4e:00:c3:2d:c0:31:6f:98:dd:c4:
                    61:9a:ec:0a:db:13:f8:39:78:dd:9d:b8:b7:d4:9a:
                    93:fc:f2:0e:ef:29:be:11:de:9a:93:4e:02:92:9a:
                    85:b9:1c:c1:58:59:53:53:c6:df:dd:aa:38:b5:db:
                    37:62:7e:40:8d:3a:1b:54:fb:78:3a:2b:3c:fa:be:
                    64:88:94:67:89:7c:21:fa:c8:d7:51:ca:80:9d:77:
                    f6:2b:89:4e:07:ff:c3:73:f7:1b:1a:ec:b6:46:cd:
                    7c:84:84:6c:be:67:b5:44:2a:10:07:65:4c:f1:58:
                    fc:fc:3b:1b:c4:88:7d:64:96:16:32:43:ab:6b:cf:
                    d5:f1:14:38:a7:38:8d:8a:42:f5:7b:a6:83:92:5e:
                    20:1f:04:7a:62:6d:2b:90:b9:65:1e:68:62:32:85:
                    f0:2d:83:17:a7:c9:1f:66:f6:47:bc:ce:6c:3f:98:
                    c9:ab:08:2d:96:58:e6:9f:47:a6:09:80:d6:bd:ed:
                    13:1a:48:c9:58:1c:b8:59:7f:64:55:e6:21:2b:06:
                    b5:ad:1a:3c:e2:ea:c4:c8:a4:35:a9:92:58:4b:70:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4C:75:1C:C4:90:F2:38:43:1C:A7:06:11:F4:65:D7:C7:D6:3C:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/7cb2fcac-43ed-3b3a-b7ae-a868f5ac2349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl

            X509v3 Authority Key Identifier:
                keyid:C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:18:2c:60:89:7e:54:ce:e9:ab:93:5a:41:22:01:8f:e6:1a:
         7d:0f:a4:82:5e:a1:50:2c:7c:b6:90:af:c3:c7:eb:e8:37:c2:
         3a:c9:74:34:e7:04:bd:b0:15:26:4f:45:94:8f:fc:1c:0b:57:
         9d:25:1f:a7:6a:65:19:81:44:f9:2c:ad:7a:1f:1c:e4:19:8f:
         ba:5a:ba:80:5c:b9:b6:d1:a8:a6:82:9d:4e:7e:01:71:7b:9e:
         ef:a5:1d:1f:d4:4b:ac:7d:92:5d:70:87:95:2c:bc:b3:c9:eb:
         7b:43:8e:fb:34:10:e3:0d:35:b3:0b:8d:cb:03:4d:de:be:9a:
         19:5a:a3:aa:be:08:a5:70:c8:ba:67:b8:af:1a:5f:6f:6b:3d:
         fb:dc:46:0d:d8:87:e4:ef:ab:b1:4c:85:6c:a5:7c:92:80:11:
         33:e7:bc:4f:cf:74:d8:29:38:6b:72:ce:f4:6e:71:ae:c5:e2:
         6f:14:e9:97:f2:60:81:f6:c1:3f:50:74:3b:ab:e1:a6:4e:89:
         0e:40:43:fc:f9:5e:f9:ed:53:b0:33:af:a8:d4:72:e0:5f:65:
         da:7a:f2:a3:2f:34:5b:da:a7:19:68:5e:21:c3:e6:93:65:97:
         c7:16:ae:fa:fe:ce:26:da:3e:0b:7f:c6:62:9a:25:c1:7c:93:
         67:3a:28:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:28 2024 by rpki-client on console-fra.rpki-client.org