Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          7f/ZHUeRTgCH8+LjC+gVI77MdIwZUT7eD1GFCiNGW+k=
Subject key identifier:   D1:16:A6:D9:96:78:21:9F:DA:15:25:55:AA:84:65:15:C5:F1:B8:DC
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F43285843B4A02E65795D505767CFDF00
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Sun 29 Oct 2023 01:00:15 +0000
ROA not before:           Sun 29 Oct 2023 01:00:15 +0000
ROA not after:            Sat 27 Jan 2024 02:00:15 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Oct 2023 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b4:a0:2e:65:79:5d:50:57:67:cf:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Oct 29 01:00:15 2023 GMT
            Not After : Jan 27 02:00:15 2024 GMT
        Subject: CN=e0b04883-af09-4b5e-93a0-5b4b83e1c16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:67:75:58:72:80:04:96:41:1c:72:01:12:
                    17:fa:ce:06:39:c7:07:d9:d6:5c:87:5a:f2:66:54:
                    9d:dc:c8:57:25:2f:bb:c5:ed:cd:05:2d:ca:3e:ce:
                    b1:2c:71:6f:af:35:8e:20:89:58:30:1d:ef:e3:18:
                    e5:f5:14:38:d4:4c:72:69:9f:54:c2:3a:68:52:d0:
                    61:cc:7e:6e:21:d3:6a:29:77:66:d9:23:cf:74:16:
                    c9:14:40:ad:9e:61:f7:21:fb:66:4d:5b:b2:ae:7b:
                    8e:59:0e:34:bd:e8:b7:14:fb:e7:d1:99:df:34:f6:
                    bf:28:f2:2c:b8:75:9a:5d:e2:09:e0:b9:a6:45:da:
                    56:75:92:b3:8b:c5:47:93:89:0d:f7:11:b7:99:fd:
                    c6:12:f4:fc:23:9b:9a:5e:2f:19:55:d2:67:ed:f2:
                    d8:90:ae:86:b5:aa:7f:2c:b3:2b:c6:fc:31:76:44:
                    a9:df:60:51:11:b9:ae:ea:20:86:14:b0:5e:00:56:
                    19:df:de:70:ab:ea:ad:a8:2b:38:67:47:16:97:b0:
                    c2:94:ca:65:87:52:63:0b:8a:0f:b5:39:10:1a:f2:
                    e7:26:d8:33:6e:37:75:0e:4c:b3:1b:1e:90:33:3a:
                    fc:0b:63:2b:9c:c6:9d:72:61:9a:aa:1d:6e:39:d7:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:16:A6:D9:96:78:21:9F:DA:15:25:55:AA:84:65:15:C5:F1:B8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e4:ac:29:24:43:68:b4:fb:07:96:e4:d1:77:60:1f:50:35:
         61:36:64:5a:9e:5b:32:a9:db:9a:cf:33:98:b1:82:1b:b9:7a:
         15:03:3c:c4:d2:9a:f7:b3:13:b1:17:61:4d:13:f9:a2:5b:16:
         a0:76:5d:59:d2:6a:03:ea:73:34:03:35:12:f8:ef:67:4b:62:
         3f:91:4f:63:54:08:03:36:45:3c:b3:fa:28:ad:e7:36:cb:b5:
         f2:d9:d7:3d:2d:97:17:2b:ef:bd:fd:71:f3:b7:11:42:45:d2:
         33:89:07:ff:ca:bb:4d:87:91:67:3e:26:13:b9:fa:72:ec:cf:
         ce:71:27:de:2b:34:9b:2d:56:4f:09:c6:bc:59:81:41:d5:8c:
         30:ac:c9:1b:e3:97:6e:ea:e0:b2:38:10:91:78:6f:3c:3d:ea:
         34:5e:d5:20:21:a8:d0:8e:2d:28:3f:26:ec:c4:de:44:4b:ec:
         cf:5b:4f:60:c7:ca:a9:ca:a0:c1:8c:58:91:db:7f:f3:86:ac:
         9f:1c:27:0b:9d:9a:a4:f5:7d:72:4e:f1:20:16:a3:26:da:e7:
         62:31:1e:7a:a3:f4:d5:fd:5e:b0:1d:52:c0:77:f1:f7:b6:ba:
         a2:49:c0:f9:5f:55:60:57:cc:b3:22:da:a2:95:db:57:6d:df:
         c5:32:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 01:29:56 2023 by rpki-client on console-ams.rpki-client.org