Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa
File:                     8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa (raw, json)
Hash identifier:          E2EEYe0ZxuDw0GHhANUBUGvHwdY7Z2aV/9OrqnWAMeM=
Subject key identifier:   E0:22:9E:9F:F2:14:E4:62:48:56:15:C1:E3:73:10:54:AF:7A:E4:35
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285847924BDD7D2EE884133C488380
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     14691
IP address blocks:        172.93.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dd:7d:2e:e8:84:13:3c:48:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=0cf06ae9-c8bf-40ec-9c00-047c4f7c0322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:55:6a:f9:22:33:70:7a:da:d2:9b:bd:a7:
                    2f:77:01:61:04:e5:e8:76:ef:af:54:91:fd:88:e8:
                    70:f2:ed:a9:b7:e3:1a:e9:cf:63:42:9a:95:56:18:
                    7f:ea:53:09:82:9f:30:fa:23:63:bd:e8:c4:38:50:
                    fa:4d:93:3b:c9:51:43:83:ef:70:66:80:0d:ec:b2:
                    13:ae:2e:34:78:03:4d:64:d0:ce:18:0e:6d:18:7d:
                    64:7c:13:3f:aa:6e:0e:c8:17:90:d1:e9:db:a4:77:
                    d6:7c:64:90:7b:03:49:0e:83:91:d6:88:36:31:5c:
                    af:77:da:d9:e4:95:fd:89:91:5b:db:d3:0e:99:b8:
                    d5:cf:3e:48:ea:68:ab:70:ae:6f:f9:0e:31:e5:92:
                    7e:83:60:52:d3:da:58:d9:92:54:37:0b:eb:81:71:
                    db:f3:f6:9b:b4:7e:dc:d9:ea:a3:94:59:93:70:ab:
                    9d:0c:a3:ed:ae:55:e3:cd:5e:95:8c:3a:44:d8:08:
                    90:b6:7a:80:ca:d3:d2:48:41:48:4b:de:be:15:cb:
                    4a:72:73:46:78:fe:1d:cf:d6:92:e6:64:b7:f1:b0:
                    70:8e:12:92:65:fa:c5:80:a4:51:8a:15:8e:f6:8f:
                    3a:e1:4d:d9:fe:0d:46:9c:d6:e9:40:7c:5c:79:fa:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:22:9E:9F:F2:14:E4:62:48:56:15:C1:E3:73:10:54:AF:7A:E4:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e679ab3-44ca-3f56-b10e-6899e67fe2fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:98:e9:15:7a:ca:b0:1f:f3:89:80:b0:64:6b:b5:c7:5b:72:
         2e:7f:ec:4c:53:52:3f:f3:a6:ac:13:12:b1:a6:00:39:3a:ca:
         a4:77:49:a6:3d:48:1e:1f:05:27:b0:0f:9b:11:dd:32:71:96:
         fc:c2:3b:5a:23:a6:c2:09:2d:a4:cb:56:7e:f2:8d:05:58:05:
         7d:f8:87:a7:c4:24:4d:fa:ad:f3:a2:23:d0:18:5b:ee:a8:b8:
         9f:e5:ae:be:d9:38:a4:cb:c2:29:cc:56:dc:87:bf:80:92:f5:
         b0:95:7c:86:87:cd:63:38:8e:40:ed:8e:05:e9:a6:85:fd:15:
         ce:81:bc:66:70:77:98:fb:a5:2b:f3:40:ea:5c:8b:c3:b7:87:
         49:56:4b:5b:32:39:86:90:98:71:48:fd:36:0e:fe:ca:83:2a:
         60:2b:72:3e:5d:77:d3:48:41:cd:3a:5e:cf:0e:e6:b4:1f:0f:
         dd:54:8b:c0:cd:07:68:c3:ac:65:ea:48:58:4c:e1:c7:98:42:
         cd:05:a3:ce:99:cc:dd:8f:46:e4:6d:01:e3:fb:be:cb:0b:23:
         dd:a2:a7:81:bd:dc:fe:0b:3d:52:46:1d:4d:c3:1f:ce:fd:af:
         cf:dc:a8:a7:8a:63:fe:6b:7e:46:da:32:11:67:f0:ff:43:71:
         74:d2:86:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:43 2024 by rpki-client on console-ams.rpki-client.org