Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa
File:                     a8e245fc-951e-3fcd-9679-08cebaa12375.roa (raw, json)
Hash identifier:          GYtBhD+MOmU0TqbvCEUXGgYKrRoz1IvoMuVgG6//AM0=
Subject key identifier:   2B:3F:31:C4:F9:B2:E3:71:B3:87:9C:4C:05:BC:38:D0:64:F9:74:B0
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F432858477BA353CB3FC53094AE2AAC00
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa
Signing time:             Wed 09 Oct 2024 10:13:28 +0000
ROA not before:           Wed 09 Oct 2024 10:13:28 +0000
ROA not after:            Tue 07 Jan 2025 11:13:28 +0000
asID:                     2698
IP address blocks:        192.188.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:a3:53:cb:3f:c5:30:94:ae:2a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Oct  9 10:13:28 2024 GMT
            Not After : Jan  7 11:13:28 2025 GMT
        Subject: CN=08eb1f72-b513-449c-99c8-d8e6d3577b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6a:07:aa:9b:d9:ae:1e:c0:d1:1d:b6:01:04:
                    79:d1:42:01:81:f1:81:66:7c:00:1e:83:7e:dc:da:
                    36:31:20:23:7b:c2:ee:9c:21:96:18:30:de:c9:b8:
                    4c:c3:b3:88:ef:9a:28:fd:bf:67:ad:89:03:92:b8:
                    86:1f:e4:28:98:ac:41:c4:7e:e3:88:fe:90:5b:7a:
                    f1:c1:48:cc:de:05:f9:89:20:50:e2:61:50:4e:ea:
                    b0:2e:de:df:c8:35:a3:2a:8b:a8:e1:e6:18:c8:ff:
                    c0:e1:8e:c5:a6:50:b0:1e:7b:df:a4:42:4f:e1:cc:
                    90:2c:7d:0c:ec:68:36:f3:68:62:84:4f:2d:b0:5a:
                    4a:33:6b:1b:2a:18:41:c2:e3:78:09:26:a6:7d:5e:
                    54:2d:3a:e7:97:f7:cf:45:27:4d:1a:75:41:34:52:
                    05:07:cc:ba:19:ad:d3:a5:2f:47:df:23:26:7b:fd:
                    ef:03:bf:61:fe:de:14:6b:03:c7:2b:27:47:f4:11:
                    85:56:2b:a3:ce:2e:a8:2e:2a:88:dc:61:21:7a:6a:
                    14:09:61:4a:a3:75:45:11:af:57:71:16:e1:2e:dd:
                    2c:35:44:32:9c:8b:8c:6e:93:57:58:38:c1:a7:ad:
                    35:77:de:2f:34:12:e6:4f:de:39:c0:0d:a7:9c:27:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:31:C4:F9:B2:E3:71:B3:87:9C:4C:05:BC:38:D0:64:F9:74:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/a8e245fc-951e-3fcd-9679-08cebaa12375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:11:64:cb:02:68:8b:29:a8:48:56:38:43:dd:2b:da:ae:8e:
         d1:db:ce:dc:f9:34:f2:76:d9:30:e1:85:e5:c6:e1:fc:85:d7:
         79:08:15:d3:6a:6c:22:c4:c1:a4:0a:52:82:6b:e1:e4:5c:7a:
         5e:d3:da:e3:11:a5:e9:15:fd:a3:9e:70:fc:9c:ae:d0:20:56:
         6a:33:88:d5:87:7d:bf:77:f9:32:a1:96:41:32:9e:96:61:2d:
         fe:7b:7c:25:69:f7:c8:d2:82:8a:8b:f9:e9:24:de:b8:90:e0:
         3a:e2:df:da:b9:b0:0c:eb:b6:4f:47:8c:3e:71:71:2a:09:bf:
         6f:8d:c3:12:12:54:d5:f7:f9:a0:aa:9b:ec:40:71:1b:e1:66:
         7b:cf:58:2e:23:d2:93:a4:c6:8f:a8:4b:ae:0d:82:9c:04:c1:
         c1:1e:0b:0c:7f:67:b9:90:b5:20:95:f2:30:5a:0f:41:16:fd:
         cf:e2:ae:3d:af:50:34:f2:ab:d0:f0:ef:5d:2a:ec:f8:6f:1f:
         a2:11:26:5d:e6:2f:7f:51:47:1b:e4:62:d5:64:8a:1c:e1:3d:
         f6:55:69:a5:2a:de:9b:d0:5a:e4:20:b8:03:49:84:21:5d:56:
         23:a1:1c:68:8c:67:e6:b4:76:b2:39:eb:22:e1:d0:55:78:dd:
         d2:43:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org