Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
File:                     897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa (raw, json)
Hash identifier:          NPu/fZuq9DgJqRfmNuXV61wgTv4VIvZm1ex2pv9OWNc=
Subject key identifier:   47:2F:92:03:F6:19:61:DE:06:56:85:F2:42:86:39:CB:B5:58:D0:CB
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F432858474F4B76470A500165585A07C0
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     11924
IP address blocks:        208.75.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:76:47:0a:50:01:65:58:5a:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=e17e2f60-14f6-4b02-b33f-06b884ed8433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:8c:52:e3:43:75:c0:21:21:3c:a9:c0:6c:
                    17:16:ef:44:81:e3:70:ce:2d:2a:64:cd:58:66:27:
                    62:4e:16:1e:05:c5:ed:52:87:23:da:ca:34:5f:67:
                    fa:b9:f8:d1:b4:01:45:e5:96:79:3f:38:11:fd:8c:
                    55:e4:00:83:b5:c5:48:0c:e8:ff:f4:9f:21:78:8c:
                    78:45:93:2b:79:f9:cf:f9:f0:b1:a9:f8:2f:80:95:
                    ab:4f:ba:45:63:7e:a3:33:69:94:ec:3b:7a:e6:5e:
                    ac:89:0f:bc:c0:49:d2:68:ea:be:82:9b:39:76:97:
                    8a:e3:90:20:ec:66:6b:64:9f:a8:19:6a:ed:38:1d:
                    b9:f3:01:6e:94:f7:c0:79:69:2c:4b:88:ba:ef:bc:
                    d2:d7:0d:94:16:dc:1c:7d:06:5e:06:f0:06:69:be:
                    40:4d:80:6e:56:7d:d1:4d:35:20:6b:2f:62:0d:4f:
                    c5:f3:0d:ac:e4:8e:c6:79:01:6c:47:3c:6c:08:db:
                    5d:c5:4b:07:6d:14:92:e8:6c:27:3a:94:8e:db:53:
                    80:9f:a2:07:8d:84:37:6e:6e:84:5f:ad:ca:e3:a8:
                    e4:f7:a0:ac:67:18:8f:c6:05:00:90:53:0a:15:2f:
                    65:29:30:15:47:1b:7e:89:b6:c8:0f:e9:b3:96:0e:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2F:92:03:F6:19:61:DE:06:56:85:F2:42:86:39:CB:B5:58:D0:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:2a:14:b2:1b:3f:e8:16:5e:72:84:de:76:4b:e2:38:60:
         24:43:92:dc:d8:30:4f:62:fd:d9:f5:2e:83:4d:a5:32:c7:bb:
         66:6e:cb:2f:3e:d8:e5:81:35:5f:28:0a:73:4d:96:b3:85:01:
         90:72:69:53:2d:85:ea:4b:9c:db:bb:48:56:08:46:b5:a2:4b:
         6f:97:2c:a9:5d:cd:0b:59:82:1c:a5:ee:66:1e:bb:33:b6:67:
         4d:03:6c:50:a7:49:7e:4d:60:24:fc:02:44:3b:4d:16:43:83:
         f2:48:ca:d6:0f:e8:b3:c8:21:a4:d5:ae:26:ce:f5:ec:c3:d5:
         24:da:2d:c8:08:70:9c:d3:d7:4b:6b:2c:65:ba:a8:70:39:75:
         42:c0:8f:dc:a7:4e:bb:22:18:75:d7:17:04:8a:a9:47:85:ab:
         c7:37:ee:2a:63:21:4d:0d:16:fe:b2:0b:2a:bb:41:0c:9c:bf:
         5e:ab:d7:f3:28:b5:59:c4:cc:72:10:a9:a1:68:ca:44:23:97:
         1e:99:26:d7:3a:0f:fa:b9:a6:eb:12:93:d4:56:da:3b:d9:98:
         73:31:d9:4f:53:5d:6c:ff:4f:7e:50:4d:32:40:05:7d:1d:37:
         82:b1:49:27:ed:fd:8e:35:5e:25:7d:d4:2b:7b:d7:1d:4f:89:
         69:4e:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:48 2024 by rpki-client on console-ams.rpki-client.org