Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a6ccba5b-c374-3faa-add4-805aa3a3df38.roa
File:                     a6ccba5b-c374-3faa-add4-805aa3a3df38.roa (raw, json)
Hash identifier:          D1VOc1EWGkHl9D7to//UikXYA1C6AXVWnQMNsfy0KtA=
Subject key identifier:   E0:B8:51:C4:34:E5:38:8C:33:36:CC:44:33:89:5F:9D:4E:0E:B6:E9
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584726D0887ADC535BF3D1CF99B0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a6ccba5b-c374-3faa-add4-805aa3a3df38.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     55178
IP address blocks:        192.230.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:88:7a:dc:53:5b:f3:d1:cf:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=d42738c4-eaf2-41cb-8a75-89b3418469fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:78:fb:81:44:36:43:6d:15:c2:65:8e:b1:
                    3f:96:07:79:f2:ba:28:cb:ac:0f:68:c8:9d:0f:dc:
                    19:24:9f:ca:dd:4e:d5:1c:8d:ea:4a:90:ff:21:7e:
                    09:3f:34:42:bd:5a:28:80:b7:40:13:a1:3b:f3:27:
                    b2:e8:d7:a7:b8:c9:54:be:f1:a0:14:7c:74:4b:17:
                    e7:cd:bb:e0:88:27:22:5a:49:d3:4c:b4:20:a0:45:
                    7a:b3:38:c3:44:14:28:1e:02:4b:92:6c:5c:62:62:
                    43:e8:74:c1:7b:28:a9:14:c5:f4:5a:e9:31:70:3f:
                    a6:04:e6:c0:92:14:8c:f8:cb:86:6a:19:d2:84:19:
                    8d:4d:89:00:89:7c:3c:a0:b4:58:e1:16:05:90:f2:
                    49:ae:02:c6:65:46:3c:8a:f6:a6:68:04:46:bc:58:
                    27:fa:51:fe:f8:e4:b6:a2:07:ac:bb:2e:b8:97:d0:
                    e8:3a:09:ba:2b:ab:00:c4:46:fb:86:d3:6e:42:88:
                    ce:9b:28:3d:75:d8:15:90:02:2e:32:45:7c:63:89:
                    f3:fa:bc:34:1f:47:57:f3:72:4f:78:53:2e:27:1d:
                    5e:38:02:78:83:57:f5:f0:b2:04:a7:f3:e8:72:44:
                    ff:97:f2:ad:0e:f6:a8:fd:95:85:b7:25:84:63:2a:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:51:C4:34:E5:38:8C:33:36:CC:44:33:89:5F:9D:4E:0E:B6:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a6ccba5b-c374-3faa-add4-805aa3a3df38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:f1:59:57:ef:a2:9f:3f:ad:38:54:51:33:3f:ed:70:fe:
         12:f5:d9:cf:c8:ef:4f:ff:c0:14:91:c6:bb:95:53:9c:3f:30:
         90:f9:c3:49:e4:2f:a9:94:74:fa:76:c4:26:e0:8e:ef:a1:25:
         31:9b:48:f3:c5:0c:27:ec:ab:dc:de:46:c1:d5:44:e1:d5:b7:
         25:79:3c:e2:18:14:dd:7b:de:9d:5f:32:3b:08:63:d6:78:fd:
         bd:cc:6b:4e:07:eb:44:a2:7f:d2:e3:17:6a:c2:1d:89:1e:e7:
         36:08:d1:74:d0:81:b4:e6:11:a5:65:2f:b1:13:66:df:79:6e:
         e1:bd:44:8e:e5:51:8f:65:94:61:fa:95:fb:3f:55:04:b3:7c:
         3e:98:0a:74:d3:db:2e:13:46:b6:3c:90:e7:70:3b:f7:81:cb:
         af:8a:7a:e8:6d:37:8a:88:32:dd:11:f6:47:95:23:86:95:d4:
         70:4f:db:b1:35:80:e3:7d:42:7a:97:e9:c9:1d:6b:c8:58:bb:
         28:89:b5:53:fc:ec:65:bb:88:6a:ce:2f:d9:80:c4:46:be:8e:
         be:80:ed:56:34:4b:c0:ef:70:c7:5d:ce:28:ba:ed:7b:79:c1:
         3a:32:6b:78:b4:88:d1:94:0c:ec:07:a0:e7:a2:13:94:7f:89:
         24:85:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:42 2024 by rpki-client on console-fra.rpki-client.org