Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/9f1c5a4e-576e-3a5e-aedc-d1c7f54c2fcf.roa
File:                     9f1c5a4e-576e-3a5e-aedc-d1c7f54c2fcf.roa (raw, json)
Hash identifier:          myYo8OAab4kVF8gwXcSvlq86XOHQ9pY+R555lHRM/2Q=
Subject key identifier:   AB:93:66:28:D4:23:3B:56:EB:59:5A:22:2B:3A:C9:91:47:C9:1E:69
Certificate issuer:       /CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
Certificate serial:       010D0C9F432858479C11264238419AFBF06D6580
Authority key identifier: 8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/9f1c5a4e-576e-3a5e-aedc-d1c7f54c2fcf.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     8075
IP address blocks:        108.161.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:26:42:38:41:9a:fb:f0:6d:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=6e07cefc-82a2-4efd-9105-af414f5d610a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:35:6c:d6:ab:cc:54:8f:ea:1f:5a:a9:94:
                    91:40:53:b5:2a:e9:74:0c:13:73:6d:67:33:d2:f2:
                    5e:84:5b:67:b9:1e:fc:82:8a:04:6f:9c:2f:bc:5d:
                    1b:9b:99:43:6d:1c:bc:dc:11:4b:2b:c7:76:a0:b7:
                    e0:dc:f7:fc:2f:f8:6a:1d:b1:f7:79:41:65:e1:60:
                    b3:87:c8:57:22:d4:42:8f:d0:ec:03:32:7b:b1:d0:
                    1d:58:6d:99:41:9d:ed:1f:e6:de:52:9d:a4:f2:02:
                    1f:66:f2:e6:f3:3c:1a:ff:eb:6d:e9:ee:d2:67:ad:
                    69:d0:0c:96:c7:3d:c5:1b:a1:ca:db:c1:2b:93:f6:
                    4d:3f:cd:bd:a1:b6:68:17:b4:79:0c:40:70:9b:4c:
                    8a:2f:19:34:a6:66:8b:43:ac:ad:1d:e4:63:c8:f6:
                    7b:c6:ba:5d:29:04:17:f2:fc:81:6b:8f:6b:49:89:
                    fd:43:9c:90:2e:a4:0f:1b:b6:50:20:1c:57:23:8d:
                    48:49:05:58:44:c1:de:e6:2b:33:0a:cd:db:ad:6e:
                    18:b1:11:5d:0d:02:0a:03:7f:78:af:d4:6d:71:30:
                    8b:02:a6:99:79:74:0b:cd:c9:b7:7a:be:0a:e9:7a:
                    ac:69:8a:28:c8:b2:6c:97:ab:28:26:68:ea:26:22:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:93:66:28:D4:23:3B:56:EB:59:5A:22:2B:3A:C9:91:47:C9:1E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/9f1c5a4e-576e-3a5e-aedc-d1c7f54c2fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:e9:11:66:74:81:d1:75:8e:d3:9e:95:00:e2:0a:50:d6:
         7a:95:28:d9:d8:ac:4c:1c:e6:56:8e:7d:2b:78:64:37:4a:02:
         1c:a0:65:42:71:36:54:3d:e2:77:75:7f:0a:e9:53:46:06:06:
         08:d5:bc:db:d4:43:7e:05:79:54:5b:92:b3:a6:38:5e:96:a6:
         37:8e:2d:db:35:11:7f:78:5a:17:ac:cc:11:16:4a:a4:ee:a9:
         00:2f:99:13:55:bc:74:02:36:4f:d6:67:d8:7d:ea:82:ee:4b:
         7e:3c:cf:9c:c4:fe:00:16:8e:99:60:23:1b:1c:93:2d:1d:39:
         83:4c:be:80:e2:2f:a4:3c:0f:d8:a4:d0:52:d3:e7:80:28:b2:
         3d:7e:13:7c:77:e5:c7:a5:79:08:5a:2c:c7:6b:d5:81:a8:93:
         a0:fb:a6:15:a4:18:c4:ed:94:21:23:95:96:ae:a5:73:30:4e:
         67:01:8c:f7:0b:9c:f0:82:91:72:86:9e:f4:76:24:b4:a7:8f:
         6c:de:cd:68:e6:5e:72:a2:2e:6d:08:80:5e:a2:c9:c5:a9:a6:
         d5:92:12:dd:b1:e8:6a:ca:ec:ce:2b:2a:3f:5d:c5:90:3b:71:
         8a:da:17:92:71:fb:6f:20:7e:12:b2:7f:be:1c:68:98:80:50:
         5d:3b:b9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:10 2024 by rpki-client on console-ams.rpki-client.org