Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
File:                     67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa (raw, json)
Hash identifier:          cFF8b8DDbRwDev0zxfEvvGdOCnOxkrMPKQJT092K9bw=
Subject key identifier:   4E:84:96:F3:B9:B7:40:9F:B3:90:67:8B:87:24:3C:19:91:13:7A:2E
Certificate issuer:       /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
Certificate serial:       010D0C9F432858476B36453812907C383BF32200
Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        208.75.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:45:38:12:90:7c:38:3b:f3:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=e92902d3-8644-4b71-b8e5-a3c1f2573c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:e4:2b:42:10:86:51:53:6a:94:64:ab:1e:
                    93:25:ca:52:e2:51:95:46:31:b6:0b:a5:9b:66:ad:
                    e7:51:2b:2f:10:de:31:4c:88:34:61:27:9c:85:88:
                    44:f0:f3:58:5a:22:c3:2f:c5:fd:b4:69:dc:f6:12:
                    10:61:f1:11:d8:2d:69:d7:19:32:f3:0b:d4:fb:5b:
                    43:81:09:33:cd:21:a5:fc:e7:57:4b:1e:78:b8:25:
                    8a:ec:74:8b:46:8d:b5:35:b0:db:82:95:4f:33:32:
                    1d:63:e9:f0:43:37:9c:40:29:3a:f0:71:b2:2d:61:
                    d8:80:c2:00:df:e6:56:e5:05:65:a7:77:91:da:68:
                    d2:a9:1f:3a:f7:27:67:cc:2f:56:41:12:f8:e6:90:
                    0e:99:13:f3:a7:1e:ff:39:c9:83:e0:5a:ae:2d:7f:
                    09:90:b6:04:fa:07:38:70:c8:c8:92:80:8b:70:f1:
                    8d:dd:f6:f8:4a:a3:32:40:38:21:39:2b:4e:67:48:
                    c4:7a:e9:97:f4:e6:86:e4:ff:78:b7:b4:02:2f:06:
                    a3:09:06:da:6d:0b:43:d6:e2:70:c1:23:27:10:7a:
                    66:35:84:ef:28:ec:b9:e1:af:27:12:9d:85:0a:e0:
                    42:1c:4b:f6:d1:aa:0e:72:40:0d:a1:1b:23:f3:81:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:96:F3:B9:B7:40:9F:B3:90:67:8B:87:24:3C:19:91:13:7A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/67fd2f28-8c3f-3e15-8ce0-1545ead9068e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl

            X509v3 Authority Key Identifier:
                keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5d:cd:d4:9a:d9:8c:fe:6f:78:95:be:9d:95:e6:c6:b6:f3:
         5f:2f:bb:b7:5a:7e:d4:64:49:ae:ac:8c:c0:9f:3b:a0:32:03:
         67:35:6a:ba:fd:2a:fe:be:ac:75:0a:52:2b:1c:8e:46:b7:6d:
         01:2f:95:52:7f:b1:e0:84:ed:82:6a:14:7e:d1:2f:7e:80:65:
         67:20:49:02:8f:40:0d:b1:39:a3:83:51:6a:c9:1a:b4:42:09:
         fe:fd:f4:1f:43:0e:85:bc:7c:ac:b6:dd:93:75:2c:ff:e8:44:
         93:21:be:a8:c0:09:1f:7a:13:b9:ad:60:42:a3:19:7e:bc:cd:
         f7:ed:b9:ca:0f:e9:99:6f:c8:40:0c:14:36:f9:57:02:6b:29:
         b2:34:dd:96:b8:ae:05:6f:46:5c:24:3d:85:91:a4:1e:ff:b1:
         c5:c0:ce:58:61:89:6f:e3:d5:36:a0:7d:c3:e0:8c:fb:60:b8:
         75:60:6f:aa:18:3f:c7:51:d5:37:1e:69:9f:8f:37:9e:c7:83:
         6f:c5:88:0d:06:6f:ac:1f:01:22:d9:63:88:94:3f:fe:66:6d:
         2d:e3:90:6d:4a:2b:7f:10:8c:ec:d2:fe:ec:fc:ac:09:c4:a9:
         af:28:af:df:2d:00:be:dd:6f:cb:cf:2d:6f:22:e5:bd:a2:58:
         89:10:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org