Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
File:                     108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa (raw, json)
Hash identifier:          uucu8ZIlG5Vo0WA2MDseqkpMYR0luct+HtFG5PCMwdw=
Subject key identifier:   69:D5:5B:51:11:88:30:B1:BE:7C:DF:4A:39:FA:5B:39:62:AC:F7:2B
Certificate issuer:       /CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
Certificate serial:       010D0C9F43285847ACD13DA8C03EC063C14F0C00
Authority key identifier: 1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     17278
IP address blocks:        192.231.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3d:a8:c0:3e:c0:63:c1:4f:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8cb8abc-eb90-4175-a744-ecca7be34b7d
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=5cb2f8a6-31f3-4c94-a888-747f0e59c23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:b9:fe:b4:3e:44:95:fa:80:9b:e7:e9:fe:
                    b4:a2:ef:96:b1:b5:05:05:d3:81:5b:68:ab:fd:5e:
                    f3:f4:ee:62:49:bb:a7:08:a4:a0:aa:f4:c1:75:1d:
                    6d:00:e3:dc:ef:9d:b0:30:6e:37:43:fc:1c:f7:a1:
                    f5:3a:24:74:6e:6a:d0:c7:ae:9e:e1:3e:27:04:c7:
                    1e:6a:9b:e6:34:b6:7a:52:50:10:35:82:9d:a9:46:
                    cd:6b:7a:b1:79:0e:f5:40:45:0b:ae:f9:f1:40:00:
                    94:4c:ec:1a:65:80:ea:cb:0c:1b:1b:31:ac:50:3c:
                    07:ff:db:7b:a3:de:9a:2a:dd:3d:f4:2a:04:1d:9e:
                    4e:0e:ac:b5:b9:05:48:a4:3e:8d:89:6a:0d:04:f4:
                    e9:56:c4:06:6d:5e:13:d2:42:5d:57:e8:8b:b0:db:
                    31:3b:f2:e4:6b:86:36:cf:c8:ae:7b:ca:02:61:12:
                    db:8b:f0:13:01:6a:23:0c:e1:3b:09:f6:e1:de:88:
                    0e:f3:54:da:0b:5f:63:d5:42:94:33:de:71:17:b4:
                    74:2a:62:2a:c6:52:a9:a9:4a:3e:fa:52:0a:ac:08:
                    be:11:17:80:29:a4:aa:4c:d3:eb:b0:0d:72:87:82:
                    15:d5:5c:94:04:c2:b1:33:7b:e8:17:93:48:b5:dc:
                    c5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:5B:51:11:88:30:B1:BE:7C:DF:4A:39:FA:5B:39:62:AC:F7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/108e4e2c-4dbf-325e-8ff7-74c2d6e1e6f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d/f8cb8abc-eb90-4175-a744-ecca7be34b7d.crl

            X509v3 Authority Key Identifier:
                keyid:1F:85:60:57:29:28:E3:90:5E:97:AE:31:40:29:ED:3B:76:3B:79:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8cb8abc-eb90-4175-a744-ecca7be34b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:51:dc:81:94:76:e4:e9:ee:56:7d:cd:04:31:de:07:eb:5a:
         c7:87:d5:ee:88:ad:3e:9f:ca:2c:c2:86:74:78:7e:df:73:2b:
         b4:d5:25:1d:a9:2e:a3:5f:99:84:c9:f3:52:0b:a6:3f:29:fb:
         70:0a:75:c6:d2:62:03:df:53:3c:ce:36:bc:31:df:a7:38:9b:
         7a:7f:22:65:02:7b:90:96:9f:c0:43:e2:db:ae:0b:54:7c:8d:
         c0:5f:09:01:8b:6d:03:e5:45:cc:5f:7e:e3:33:ae:f1:6e:de:
         fc:44:a9:93:a6:dc:12:4c:90:76:3e:05:1b:1d:10:96:ae:cf:
         19:10:b9:b0:5c:94:4e:af:89:66:ab:a4:df:72:57:9d:1c:e4:
         12:d9:49:1c:39:ae:91:d8:c7:88:fb:12:2d:3d:1f:e1:5d:6e:
         63:05:e4:d2:fc:6f:07:da:db:e7:77:9c:0d:f9:54:95:f3:c4:
         fa:a4:72:15:9a:cb:c2:12:5b:67:d4:5a:91:57:1b:f9:c3:87:
         77:37:26:0b:1c:0f:89:ae:bd:2c:96:b6:47:98:9b:f7:b4:a3:
         a1:88:0e:33:d0:18:c2:de:78:35:ac:90:c8:e1:8b:58:f8:8b:
         bb:71:97:84:85:46:c6:51:8b:1c:5c:48:cf:04:5b:96:73:7d:
         2c:ab:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org