Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa
File:                     4fb9524c-0027-3b38-a16e-a042538273be.roa (raw, json)
Hash identifier:          uh6UE5QOhtdFWRXd0kvn2pZHBZ2QMom9MLNMukdhmiA=
Subject key identifier:   BC:9D:EE:FC:24:3F:75:B5:09:98:60:03:78:A1:B1:3F:BF:87:5E:B3
Certificate issuer:       /CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7
Certificate serial:       010D0C9F4328584815C78354C6EB35AC57C9D200
Authority key identifier: 32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa
Signing time:             Tue 03 Dec 2024 15:20:51 +0000
ROA not before:           Tue 03 Dec 2024 15:20:51 +0000
ROA not after:            Mon 03 Mar 2025 15:20:51 +0000
asID:                     399036
IP address blocks:        208.52.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:c7:83:54:c6:eb:35:ac:57:c9:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63efa95-ea3a-452d-a757-7aad9b62d5b7
        Validity
            Not Before: Dec  3 15:20:51 2024 GMT
            Not After : Mar  3 15:20:51 2025 GMT
        Subject: CN=a502a524-37d8-4b90-9230-50c5a82618e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:df:72:12:9d:b1:bd:4a:18:b7:54:51:b3:
                    c0:94:6f:49:c2:be:3e:43:a6:83:ae:4a:b8:12:f9:
                    dd:51:1c:3d:7a:1b:26:74:54:cb:b9:cb:41:3b:66:
                    a6:ed:25:98:07:ea:09:01:82:d1:d7:80:08:1a:ee:
                    0f:e5:b0:51:73:d8:ae:8d:46:a6:55:dd:0a:87:48:
                    c7:eb:c6:30:82:ae:38:5f:57:c7:e7:e4:43:fa:52:
                    f7:29:fb:5b:2f:93:ba:fc:75:f6:89:f5:b8:3a:47:
                    60:9e:7d:33:bf:a6:0f:43:0d:d1:99:89:4b:6f:f4:
                    fb:e4:a2:cd:cd:ca:94:36:39:7a:21:98:5a:88:20:
                    d0:48:06:e1:5d:68:13:11:0a:41:f5:37:49:a4:c7:
                    74:4d:f9:f4:ea:dc:00:be:05:29:ae:64:62:30:ba:
                    c6:7f:a7:eb:1f:bb:6f:2b:97:74:37:ce:c3:a0:42:
                    37:29:d4:1b:b3:be:93:b2:61:29:3c:f8:89:ab:c0:
                    0e:80:fc:f4:61:51:df:28:87:92:0c:4c:f6:97:c4:
                    86:3c:a4:b1:e1:26:46:8f:51:a1:7b:06:64:e8:dd:
                    25:1a:0f:11:66:7f:24:55:e3:d9:bb:ee:ce:60:ab:
                    74:74:24:ef:bf:93:41:55:52:48:b8:6b:45:c3:bd:
                    bc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9D:EE:FC:24:3F:75:B5:09:98:60:03:78:A1:B1:3F:BF:87:5E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/4fb9524c-0027-3b38-a16e-a042538273be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7/e63efa95-ea3a-452d-a757-7aad9b62d5b7.crl

            X509v3 Authority Key Identifier:
                keyid:32:46:51:DF:98:86:45:92:0C:90:D0:95:02:4D:56:73:B5:D8:4A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e63efa95-ea3a-452d-a757-7aad9b62d5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:04:48:af:8f:58:d8:6e:31:20:20:50:de:0a:8e:bb:26:d9:
         22:5f:d6:d6:ca:3f:61:2a:a2:34:9c:2e:44:ff:3e:40:07:53:
         41:66:28:2d:f8:90:1c:71:b4:6c:34:7c:2a:7e:b4:a0:27:93:
         18:b2:bd:58:68:e5:41:3f:58:90:70:a0:2e:6f:ba:c1:2a:a6:
         7c:e5:38:6c:a5:63:c7:8a:a3:70:9f:66:08:d4:9d:de:ca:e4:
         02:42:b6:98:8a:46:5e:ad:a5:4f:0c:70:61:2a:90:25:26:01:
         56:19:36:cc:37:94:47:3c:ed:5c:09:b4:de:7c:54:a4:82:c8:
         99:29:c9:ef:04:24:f7:0c:22:c3:a6:a5:b9:00:32:f4:af:32:
         93:2c:6b:05:ec:4a:b9:29:7f:ed:63:a5:99:c3:e3:45:6b:bb:
         31:af:69:23:5d:a1:ed:dd:ba:bb:0a:5d:6f:58:8f:e2:de:d6:
         22:33:56:40:e0:de:32:84:fd:35:45:e3:72:85:26:a1:db:ef:
         8d:64:38:4f:ad:ac:e4:ae:35:6a:b9:a7:ce:7f:2c:37:30:12:
         17:66:8b:43:fc:7a:9a:f8:b9:e5:98:2e:75:54:f5:f8:2c:c0:
         32:83:fa:e9:9e:f3:6f:d8:4f:3f:86:8e:0a:04:4f:17:80:9e:
         42:51:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org