Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa
File:                     c424ffca-8608-3f6f-8ce3-25f13376cd72.roa (raw, json)
Hash identifier:          qzTzrE6pfc/0KtXWfMaXNkpfo0FwWGuZDzvrJxd+Vf4=
Subject key identifier:   7E:91:B5:9E:F8:67:AC:B2:24:C8:BF:29:39:AA:91:7C:27:B1:29:00
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584742BB3DD97BF880634D8E4500
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     1273
IP address blocks:        208.175.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:3d:d9:7b:f8:80:63:4d:8e:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=c2e31995-de56-4874-9858-8069cac9bdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:83:2c:20:46:e6:bb:d3:13:5b:3a:2f:5f:fb:
                    72:9f:41:5d:1d:41:65:8b:ca:7b:39:3f:31:62:cf:
                    91:fb:95:b2:48:f4:fe:42:22:d8:d3:33:16:9a:65:
                    13:51:74:64:59:24:56:d6:8d:51:91:16:d0:24:ea:
                    2e:26:a4:ce:d3:91:f3:8e:31:77:ce:f3:c7:15:95:
                    5d:4f:32:6a:fd:d6:f3:e3:f9:07:34:c0:78:02:7c:
                    1b:eb:81:55:f3:39:b9:79:d8:c4:cd:b8:64:39:4b:
                    03:0f:bf:65:1e:80:5f:33:a0:7f:49:20:87:e9:e0:
                    5a:98:80:b9:f6:e7:83:63:e9:bb:a7:4e:dd:ee:d7:
                    2c:1d:c8:e0:89:77:33:4c:5d:21:74:74:b3:6a:6e:
                    35:8b:d6:0f:ac:3e:01:04:ea:82:db:a6:88:b7:f8:
                    a5:4d:00:bc:3d:0d:75:c1:d7:a5:93:84:52:0b:b6:
                    30:35:8b:8c:0c:e5:37:8c:19:75:3a:1d:da:3f:0d:
                    d2:d4:ef:03:51:11:2e:ba:1f:4b:8a:f0:99:11:b8:
                    1e:3f:4d:27:0d:5e:b8:bd:03:0f:09:79:53:b8:1a:
                    f0:2c:a3:72:dc:f6:fa:ca:e6:ff:4a:05:f0:52:48:
                    cb:f4:d8:d7:16:6c:5d:e9:1e:b0:8b:c6:7f:f3:81:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:91:B5:9E:F8:67:AC:B2:24:C8:BF:29:39:AA:91:7C:27:B1:29:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.175.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c1:a6:5b:4b:78:b1:e7:7a:8f:74:d1:38:78:d0:ab:3f:d3:
         cb:7f:59:9a:c8:e9:6c:1e:39:c5:f0:86:38:88:c7:bd:9c:2b:
         91:b7:ed:c2:97:41:67:08:14:bb:ca:42:2f:53:ba:24:0a:77:
         a3:1c:64:f7:92:91:de:ca:36:bb:84:53:63:01:81:c6:68:f5:
         50:e5:fd:c0:7e:86:ea:5f:93:71:c2:6b:22:75:44:51:8f:f4:
         b7:5a:6c:e9:e5:75:7c:63:33:23:17:dd:f7:36:c7:68:22:14:
         21:16:06:d4:20:79:c5:b7:6b:c6:25:39:f6:e6:5d:96:8a:bf:
         a5:cf:00:a0:33:72:39:22:7e:ec:f9:d5:a1:13:5e:cf:f2:5c:
         0e:ce:06:30:0a:64:0f:ef:d3:c8:ba:de:17:e8:e3:6d:de:4f:
         d6:c3:8f:5c:0b:1e:6e:ce:a5:12:e3:20:71:3f:36:68:ef:8d:
         ed:43:3d:02:13:23:db:71:3a:53:d7:a1:20:27:48:84:72:f6:
         fd:8a:e4:6b:d0:7a:d2:a8:58:f7:8c:22:89:03:e2:0b:82:86:
         e3:ed:93:b7:55:31:52:ee:50:8a:4d:20:4f:98:cf:ab:5c:2b:
         c2:78:e9:0a:29:3f:0b:fc:8b:4e:d0:ed:58:88:82:d8:38:43:
         19:58:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:04 2024 by rpki-client on console-ams.rpki-client.org