Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa
File:                     2d977415-5656-35f1-b74c-31a6dcf65e33.roa (raw, json)
Hash identifier:          KbtUAzlPBnGwWRYnw5jFjLL3YxXz0LrCoMemzXaquu4=
Subject key identifier:   AC:07:86:BE:86:F2:6E:A7:A2:9A:F9:8E:CD:6C:A9:44:69:1C:F6:9B
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584726D087F698397A36BF9EE0A0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     55178
IP address blocks:        192.230.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:87:f6:98:39:7a:36:bf:9e:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=2dd173d9-cdcf-4856-b2d2-77eab2243298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:93:db:fa:d6:98:cd:a3:47:1a:c6:fb:10:91:
                    d9:ed:02:dd:88:e4:e1:7b:11:9a:1a:54:39:a1:97:
                    cb:30:d9:32:77:a6:41:1d:04:34:70:22:c7:4d:70:
                    50:c6:a2:a4:bc:50:bc:59:70:8f:22:d3:65:5f:62:
                    21:18:00:41:37:f8:77:17:4c:16:2c:b3:ba:72:94:
                    ed:78:44:5d:5d:ab:c0:08:fa:e6:2b:7a:a1:ba:92:
                    18:93:51:cd:6f:49:23:f2:e1:5f:1d:1f:96:85:9d:
                    3f:92:01:6e:e9:81:1a:53:1c:bc:04:93:db:13:9d:
                    16:b2:d1:65:03:0b:b1:bb:65:ca:bb:74:ab:4b:05:
                    93:af:c6:5e:fc:40:71:2a:18:87:1b:f7:0a:48:28:
                    58:31:6a:28:f1:25:27:33:2f:24:4f:7c:f1:10:2f:
                    c4:94:f0:60:98:16:4d:da:b7:9d:1f:2f:1b:f7:e2:
                    b2:45:10:2c:86:0b:30:2b:52:43:d2:96:e7:ba:16:
                    ce:58:9d:83:0e:33:5b:e8:05:7a:b3:74:91:08:be:
                    dc:3b:d0:80:da:e4:4f:ab:72:0c:97:73:66:78:99:
                    75:05:41:a0:ab:3a:32:c0:d2:b4:a8:b4:ca:7f:60:
                    37:f4:0f:12:be:da:b1:be:25:5e:5f:a1:0e:b8:34:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:07:86:BE:86:F2:6E:A7:A2:9A:F9:8E:CD:6C:A9:44:69:1C:F6:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/2d977415-5656-35f1-b74c-31a6dcf65e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:4f:d4:2c:55:df:ee:a9:dd:26:b4:82:cc:9d:30:ff:9f:
         48:2f:b2:24:98:51:ed:8d:96:d6:0a:13:72:39:b7:51:79:08:
         21:00:eb:dc:cf:35:5b:9b:47:17:11:c4:12:ae:6b:89:01:40:
         02:c4:d9:ae:7d:53:43:93:36:41:d3:a3:27:5b:65:51:02:56:
         c3:6c:b6:51:a6:04:28:9e:20:17:ea:25:95:6d:06:fe:f1:54:
         8d:4c:70:0f:a6:c1:e5:2e:af:35:e9:b4:c0:1c:15:ba:38:95:
         1a:0f:e1:21:b8:6c:d9:f1:b8:0c:a5:43:f5:35:9b:43:30:44:
         8f:fb:56:98:c2:02:5d:7f:6b:4e:89:67:0d:e6:1b:74:da:a7:
         34:d3:28:d9:48:7a:e5:f1:c0:d8:6c:77:be:fc:c7:29:a7:ea:
         88:10:2e:01:2e:8d:0f:6e:f5:0f:78:0d:f9:16:92:6f:1a:b7:
         26:35:31:3f:54:92:32:d0:ad:7e:37:c5:b8:1e:14:00:de:7e:
         13:64:d1:cb:a3:f9:8e:a4:a6:29:f1:96:d9:a4:bd:7f:52:40:
         54:46:16:59:df:8e:f5:96:f1:2a:ae:03:f2:ba:39:0e:76:ac:
         d7:55:68:43:03:a1:e8:1d:59:73:fe:6c:1e:98:f5:9e:9e:55:
         b7:c4:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:42 2024 by rpki-client on console-fra.rpki-client.org