Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
File:                     9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json)
Hash identifier:          BzcT7hO7mxl69ZrRh8jsrEEECBFX1Gh5oRCDBoj/MhM=
Subject key identifier:   42:1C:AF:09:96:DD:85:C9:EF:5F:60:1C:BC:02:DC:DA:76:CA:CF:2D
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F43285847924BE554037FF300531C2440
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        208.88.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e5:54:03:7f:f3:00:53:1c:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=23bd68d0-e6f9-43f1-ba23-5645ced0cd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:32:f2:9b:da:5f:48:36:c2:7e:1e:31:5f:
                    da:5f:7e:19:a8:57:3a:b2:2d:e0:ee:eb:a2:0f:71:
                    97:4a:1d:ef:90:f7:1f:8b:f2:1c:14:9d:c2:64:88:
                    47:fe:ce:ef:53:29:2d:7c:2e:4a:29:d0:73:d7:e5:
                    12:79:63:7f:15:63:f7:96:49:35:48:ba:ff:77:0d:
                    1f:c4:3b:3f:59:2d:15:cd:36:54:18:da:09:f7:5d:
                    f7:6e:76:ab:f1:d7:ef:58:f3:1b:dd:9c:d4:b7:d8:
                    10:09:c6:d7:4e:06:5d:e3:82:97:12:ca:6b:95:7a:
                    70:1d:7d:23:19:57:0e:a0:95:57:c9:63:dc:3d:ed:
                    e7:57:36:ba:1c:aa:41:37:6b:dc:f0:37:24:3e:45:
                    81:fd:87:33:a0:26:07:2e:f9:90:3e:d8:bb:aa:44:
                    45:99:bf:ad:9d:4c:78:68:66:81:40:f2:4f:4f:fa:
                    0a:ac:6e:8e:ef:92:f7:b2:3f:8a:23:4a:72:b9:7c:
                    0c:24:ce:97:68:2d:73:7c:6d:97:48:59:1c:c0:1d:
                    f4:fe:2f:96:bd:37:89:9a:d7:13:b8:0e:da:5d:f0:
                    e9:cc:db:65:44:37:58:40:ee:d2:a3:c5:d1:9a:7d:
                    59:89:c5:42:9b:9f:5e:bc:64:c6:ab:df:81:b7:67:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1C:AF:09:96:DD:85:C9:EF:5F:60:1C:BC:02:DC:DA:76:CA:CF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:77:9e:e3:c9:d1:e4:81:cc:8a:38:4d:e9:39:27:de:9f:
         25:8d:a4:fa:37:f8:58:9b:f6:56:19:c9:fd:3c:03:ed:6a:34:
         e1:19:1b:04:db:cb:c1:e6:c6:08:65:e1:91:90:1d:12:d3:c3:
         25:e4:ea:55:e1:34:fd:1a:fa:51:3f:33:8d:35:30:91:02:55:
         b6:5b:8e:bb:95:2e:dd:3b:7a:0f:69:11:8d:50:50:fd:c0:5f:
         50:2f:b9:e0:c8:9d:54:fd:d6:ed:5c:85:9c:17:82:15:75:a9:
         9d:fe:8e:97:d2:4d:97:6a:5a:ca:f6:23:69:12:99:bb:67:b3:
         cf:7b:44:53:14:5f:46:81:fe:b9:26:0d:85:5b:97:a5:7b:08:
         55:d0:62:75:f5:81:88:a4:6f:1d:dd:56:cb:e6:4f:06:2e:49:
         cb:45:28:db:a8:16:38:0e:91:83:fb:72:25:38:bf:84:10:c8:
         53:15:a4:8d:23:62:c8:97:8d:64:12:79:80:c4:33:c9:00:0c:
         88:33:c2:46:0b:95:12:12:39:ec:0e:11:67:86:38:5c:15:ab:
         15:0e:66:1e:bc:c1:ee:3a:16:81:44:ec:ce:97:c7:27:aa:92:
         26:62:b7:e8:56:06:5d:79:50:02:7e:6c:9a:1a:ba:b5:55:ef:
         79:41:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:47 2024 by rpki-client on console-fra.rpki-client.org