Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8287692b-6dec-393a-8527-11a93fd113d1.roa
File:                     8287692b-6dec-393a-8527-11a93fd113d1.roa (raw, json)
Hash identifier:          Xtm521GWm9vy+LyrQvcP1rr1W0tb9LNX2Rzf1KJR4+0=
Subject key identifier:   C2:9C:B7:1C:44:DD:A8:52:4F:1A:F4:D5:67:B9:AA:99:F2:25:99:DE
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F43285848035C5AB3FE5F64AC20D29680
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8287692b-6dec-393a-8527-11a93fd113d1.roa
Signing time:             Wed 27 Nov 2024 01:00:24 +0000
ROA not before:           Wed 27 Nov 2024 01:00:24 +0000
ROA not after:            Tue 25 Feb 2025 01:00:24 +0000
asID:                     22418
IP address blocks:        192.157.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:5c:5a:b3:fe:5f:64:ac:20:d2:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Nov 27 01:00:24 2024 GMT
            Not After : Feb 25 01:00:24 2025 GMT
        Subject: CN=3cf1fdba-8cbc-4e44-96d9-d18ede7da638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4f:37:1c:b0:aa:bb:03:20:fe:dc:4f:9f:12:
                    ac:e8:15:59:82:91:ec:d6:0e:16:d2:e2:d3:06:0e:
                    e8:58:fd:c1:53:99:1c:04:b5:21:69:75:d5:ab:77:
                    4d:a1:83:2d:05:d2:6f:6b:04:0d:d8:7c:03:e2:ab:
                    95:38:c0:3b:56:b7:9c:cd:a6:84:39:f7:42:95:f0:
                    17:a3:7f:e7:ce:51:4a:99:50:fc:52:24:72:ce:5b:
                    e4:3f:e4:5f:44:bf:e7:1b:eb:09:0f:84:aa:ce:e8:
                    2f:54:71:0b:4e:ac:ef:4d:4c:f0:f9:32:82:9a:6f:
                    eb:d9:4b:64:63:bc:42:ae:04:a4:47:49:ce:0e:c3:
                    2b:c9:1d:74:f5:2b:3d:21:05:b8:e5:7f:27:be:06:
                    7b:b3:3a:09:7d:79:84:ce:00:d0:02:b3:1b:db:35:
                    07:8f:35:14:88:c6:73:74:47:a0:ff:32:50:91:0b:
                    f0:b3:bf:5d:03:7f:f3:df:7e:e8:28:a2:8e:2d:34:
                    e5:3a:ab:cc:31:9f:5b:88:5c:f7:fb:d2:9a:99:c1:
                    9e:ad:9a:79:07:e1:22:ec:27:01:30:f4:cc:12:e1:
                    20:00:c5:15:14:2a:80:b9:55:3a:61:6d:b1:d6:f6:
                    54:fb:8c:3c:ec:49:b7:5b:94:f8:57:4c:f0:c7:b1:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:B7:1C:44:DD:A8:52:4F:1A:F4:D5:67:B9:AA:99:F2:25:99:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/8287692b-6dec-393a-8527-11a93fd113d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:01:81:8d:a1:b7:6e:67:27:fe:9b:64:4e:c6:0c:aa:28:bf:
         41:33:9d:0d:4a:fe:36:29:3c:3c:e4:7e:fe:fc:7a:9d:a7:17:
         49:46:7f:a9:4c:dc:47:5d:f4:ba:d7:e0:78:34:b7:16:18:67:
         08:19:29:a6:f3:d6:0b:c4:e3:6a:d5:55:15:50:61:64:24:c6:
         d2:9a:32:b9:8b:e5:c6:ca:22:f7:37:20:78:0f:8b:9c:fc:bd:
         e9:62:de:55:5f:9d:2e:d8:e8:9c:b1:bd:54:49:8f:04:79:02:
         fb:4f:ff:a9:6a:ae:89:ec:57:dc:6a:4f:cf:70:47:58:7a:08:
         e5:db:00:93:e7:62:a9:3e:01:ae:6f:23:b8:9f:08:d3:6e:8c:
         41:6d:fa:cf:58:e4:41:1b:ad:dc:ca:e7:0d:25:d4:88:5a:fa:
         56:8d:e6:61:32:90:46:0c:54:4c:d6:6f:72:23:63:f4:db:9f:
         ea:99:55:06:7b:26:c1:c0:7d:52:55:17:0b:d0:01:52:5b:0d:
         6a:8d:79:9f:21:a7:9b:1a:fc:22:33:81:84:e6:cc:3b:71:19:
         84:e7:0e:0b:90:7b:04:73:c4:fd:00:6a:1b:b4:47:8e:57:37:
         56:56:e4:3c:be:4e:d4:4c:f0:02:ce:94:ca:b7:e4:04:5e:36:
         b7:92:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 28 02:49:17 2024 by rpki-client on console-ams.rpki-client.org