Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
File:                     5757907e-a152-3421-ae20-7d46415d4c4e.roa (raw, json)
Hash identifier:          1mDTp8dmVzMPdB8xLXqHljp3iKFVvCy2K0mH4f8OH1w=
Subject key identifier:   69:87:E1:47:30:E3:DD:49:3A:69:65:30:32:84:38:1D:27:CF:C8:62
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F432858474585FB5601EBA25214B1B200
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     36634
IP address blocks:        205.221.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fb:56:01:eb:a2:52:14:b1:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=f77a6195-f4a4-4f1b-853b-e6c803644904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c5:9d:16:b2:63:d6:41:d1:5d:83:d8:4f:a1:
                    24:4f:81:0a:59:b7:2d:8b:09:62:91:7a:8f:c9:61:
                    d2:40:f2:43:1d:23:a2:82:47:8c:97:64:d6:91:d1:
                    92:bd:58:15:cc:af:16:17:22:e7:38:bb:e3:fa:7c:
                    77:9e:da:8e:ee:4c:f0:e4:c8:81:f0:54:14:0a:8c:
                    9f:1e:a8:ff:b9:ea:3d:df:04:8b:8a:0b:72:26:1c:
                    74:34:56:b1:4b:2a:11:3d:fc:a3:e8:6d:a6:78:05:
                    c4:d3:01:40:ec:8a:c2:dd:93:f6:b4:8d:e6:7f:74:
                    ff:55:3e:9a:37:71:aa:ad:c5:93:ce:73:82:f6:fa:
                    bb:31:fd:0b:16:48:93:28:b2:c1:58:83:cb:7c:33:
                    85:82:b7:69:33:5e:4a:ab:01:78:97:c2:0d:84:90:
                    f0:be:eb:8b:60:ce:bd:30:97:39:23:43:a6:e8:bc:
                    95:a7:c0:32:00:4b:ab:82:6f:52:94:05:ed:7e:31:
                    17:bf:0d:07:f1:ff:37:5e:3c:5b:63:d7:8e:2e:a8:
                    e4:07:64:46:b2:80:7c:1b:fd:9a:47:e6:3e:ef:38:
                    48:8f:bb:28:3f:34:a9:3a:d4:f9:fd:a3:23:52:68:
                    73:8d:98:13:a8:ff:66:5c:b1:89:dc:a9:0d:d2:49:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:E1:47:30:E3:DD:49:3A:69:65:30:32:84:38:1D:27:CF:C8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:c0:dd:e2:3e:e0:d1:8d:ab:42:88:55:f3:44:e5:4f:f8:
         08:6f:52:ce:ec:14:3e:41:1c:a4:56:ed:7b:47:4f:f8:55:0c:
         21:6a:c6:49:2b:6c:c4:6b:14:30:2b:b9:8c:50:4e:07:d0:c2:
         01:37:a7:9e:9e:a6:ba:7d:e6:a3:a3:6d:c8:a7:fa:5a:5d:bf:
         c3:c8:54:b4:83:64:58:d0:c6:53:8c:5f:17:6c:81:e4:c0:6a:
         39:cc:dd:2d:ef:ae:06:f1:9f:67:77:c2:c5:14:c4:72:52:25:
         42:3a:7c:ba:4a:f7:69:b2:92:dc:36:6e:cc:c9:f2:90:91:2c:
         e8:f8:e2:e8:ba:c0:fa:bd:6f:4b:5a:52:38:94:e1:a0:7d:a1:
         07:a8:c3:ba:3f:83:5b:74:02:1d:be:e1:22:f5:3c:fd:01:56:
         74:20:6c:31:90:12:3d:a9:0a:95:64:7f:a1:49:7d:56:c6:7f:
         7c:9d:68:e5:e3:a4:a6:7b:f4:f3:1f:c0:36:8e:b3:01:44:65:
         15:47:2e:00:f6:c3:8b:20:6d:4d:fe:7d:b0:d7:40:b7:b2:85:
         f4:58:2b:cd:7f:bf:e8:64:5b:74:b3:46:9d:fa:63:6f:7b:26:
         3f:fa:10:50:c1:88:fd:9c:18:22:b6:3a:42:19:f9:5e:cd:d9:
         bc:fd:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:40 2024 by rpki-client on console-fra.rpki-client.org