Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa
File:                     70cda7da-90d2-3883-af4c-05ac4b18d523.roa (raw, json)
Hash identifier:          SmNYatCU2i/wHgdWvcBQfPhKWnllkvPcaXkmiVKf4c4=
Subject key identifier:   6E:A2:E7:E9:D7:93:F8:14:BF:91:82:E8:25:CE:08:B1:5B:CB:1F:8F
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F432858474585FB723676D42231CB1480
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     27316
IP address blocks:        205.221.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fb:72:36:76:d4:22:31:cb:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=4a42118e-1bb5-49c0-89df-c5ee0db0e1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:a3:03:97:46:12:b4:9d:21:43:9e:32:57:
                    40:57:bd:df:e5:b6:02:6e:c3:bd:4c:58:96:31:47:
                    3b:f3:6f:2d:6d:20:5a:35:c9:5f:93:86:17:30:f8:
                    28:0e:77:38:07:44:d9:bd:4d:8d:83:96:65:86:f0:
                    a6:3a:b2:0f:78:71:4a:73:14:b9:36:34:70:ff:27:
                    d5:94:4a:c0:f2:4c:10:14:34:ec:a1:c8:07:dd:a0:
                    76:9b:7d:e9:6e:3b:24:5c:4b:d8:43:c7:fa:f4:ab:
                    6e:47:6b:75:b0:62:7c:ef:60:ae:b3:ca:2f:3c:4e:
                    f5:57:b0:09:aa:5b:4b:dc:ff:3d:b9:76:84:71:38:
                    e0:a0:2e:ea:fd:05:ca:62:49:b7:e2:95:a5:82:b9:
                    62:f7:72:0a:c0:73:25:5a:e9:d0:42:f2:3a:4a:ef:
                    d2:ed:ba:2e:9b:de:a1:b3:32:b2:db:0b:a9:c6:ee:
                    b9:46:75:45:b7:f6:c5:40:be:8f:1f:2a:3e:10:2c:
                    1d:5d:c3:07:7e:a9:28:26:ee:b4:61:17:df:dc:e3:
                    e3:85:18:06:9a:a8:f8:24:10:ab:c1:e4:f2:e2:62:
                    7c:b9:74:82:14:fa:20:59:17:f6:bd:bf:57:96:79:
                    83:81:fd:56:ef:d0:e4:5a:cb:15:d9:4f:e8:8f:e9:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A2:E7:E9:D7:93:F8:14:BF:91:82:E8:25:CE:08:B1:5B:CB:1F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/70cda7da-90d2-3883-af4c-05ac4b18d523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.221.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:af:1c:47:17:65:cc:98:c4:0a:0a:ad:6b:70:2f:25:06:d5:
         d6:92:94:ec:9d:c5:11:02:13:d6:5b:f3:52:5d:4b:bb:ba:96:
         f2:fa:69:9f:91:ba:0e:4b:27:05:78:56:01:1d:87:ca:60:a7:
         d0:6f:0b:bd:b7:18:52:bd:ff:e6:58:b0:de:af:ef:2d:2e:66:
         03:16:37:6d:53:df:df:b4:f6:47:65:b8:40:fc:32:34:ea:56:
         ef:06:9b:ea:f3:95:18:50:5d:52:d4:d1:86:07:94:19:60:83:
         f3:f9:1f:36:ed:8d:22:87:aa:0d:59:53:a6:89:b2:bb:20:fa:
         dd:6f:bc:89:cf:5f:1e:86:d8:5c:0e:12:f4:a5:1a:5b:bb:77:
         78:a2:07:33:92:9b:ca:ab:74:9e:d3:44:d5:f7:f1:58:09:07:
         92:bb:44:a8:de:87:89:b8:1b:42:f7:28:a7:c1:ec:58:9f:f3:
         0a:64:c8:4a:31:63:df:b5:e1:dc:8a:ad:6a:89:91:dc:2d:c5:
         c1:5a:ec:bf:6a:56:8d:46:59:ee:f2:2f:9e:fd:93:83:0b:b2:
         e0:69:67:fe:32:f0:79:2e:45:2b:8b:d6:59:fd:e7:eb:3c:08:
         dd:72:db:a2:46:73:71:9a:4d:80:71:17:e8:ac:3c:f9:cb:82:
         d4:c4:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:17 2024 by rpki-client on console-ams.rpki-client.org