Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa
File:                     eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa (raw, json)
Hash identifier:          LWBxjW8MeHMNp8/ahucuspY3cwcRSvhQAkADjv6zyfI=
Subject key identifier:   D3:67:9C:6A:C9:26:CD:F8:A6:4D:B6:58:95:3F:9C:C9:72:20:2B:C0
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584569885EEB0DA5BA496762B280
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     2906
IP address blocks:        108.175.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:5e:eb:0d:a5:ba:49:67:62:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=d5d3c30b-0291-4b60-94f8-74f0deb4798e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:05:b1:8f:80:15:2b:41:0e:f8:83:9b:fe:
                    52:0a:40:9a:db:94:04:89:5b:1c:48:c8:bd:77:e1:
                    b7:06:2b:9c:d0:41:8b:d6:3d:ae:12:78:e6:4f:e9:
                    87:be:12:21:57:a7:33:67:d7:b6:13:b4:a0:77:f7:
                    7e:30:ee:ac:53:d8:71:63:c6:32:33:a9:f9:58:8a:
                    30:04:39:8a:ae:33:a0:e6:b0:69:75:7f:a2:05:5b:
                    2b:1b:37:87:aa:f7:50:6e:dd:e1:e9:77:5a:ea:ee:
                    56:53:77:84:0a:3c:28:d8:c3:d2:ad:45:40:3d:a5:
                    a7:67:39:29:9e:4e:12:1a:3d:10:35:a9:f6:f4:50:
                    46:ec:fe:6b:24:a1:c3:4a:4d:1a:59:f4:71:8b:f3:
                    ec:cd:ae:30:d4:6c:84:58:0b:a1:2e:98:f0:42:06:
                    48:b1:98:08:66:1e:9d:db:53:05:27:06:13:ad:d0:
                    06:64:69:51:6f:e8:0d:60:3b:ba:f7:d4:fb:6b:55:
                    36:bd:7f:27:a6:c0:41:ec:bb:b5:ac:80:40:8f:a7:
                    f2:aa:68:18:9a:88:3a:3e:dd:47:54:dc:29:11:53:
                    71:bd:12:96:30:ad:c6:6e:39:31:ca:dd:a2:73:ab:
                    40:8e:e2:12:65:55:79:bb:7a:21:96:3b:99:3b:58:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:9C:6A:C9:26:CD:F8:A6:4D:B6:58:95:3F:9C:C9:72:20:2B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/eb0e1499-7a04-3c62-bf9d-0a8f57552058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.175.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:cd:a8:e1:68:7d:01:7b:03:a7:e2:3c:db:39:0b:c0:2b:
         1f:64:f4:08:ae:1b:55:a5:92:ca:74:09:eb:4f:98:7b:6f:e8:
         f9:82:20:81:d0:9c:65:d0:13:3e:d0:ce:63:8c:fc:5f:cf:81:
         a3:88:ab:85:a4:af:53:d0:dd:2d:d5:a2:74:58:a7:d4:be:d8:
         15:74:87:85:48:e0:3d:2d:5f:93:f3:dc:a0:1b:17:19:64:a9:
         84:e4:9c:01:16:2f:60:75:c7:61:cb:d1:e9:af:2e:b9:4f:c5:
         4b:db:53:29:36:6e:ce:39:41:26:af:bd:52:c3:48:94:82:28:
         84:f8:92:d0:64:94:c8:51:9e:7b:16:ae:6d:8a:58:61:c3:bb:
         92:5e:98:5d:95:9a:b3:fb:f4:92:25:d6:f0:c9:a1:47:35:57:
         2e:4f:a7:b1:94:ea:8a:ed:4e:d5:f5:3c:ef:e3:78:63:83:34:
         36:b0:b2:72:ab:b6:ad:c8:db:8b:27:ce:c1:65:ab:7e:b0:90:
         db:f2:56:93:f6:58:be:a8:d2:fc:30:76:61:a9:a9:48:f2:06:
         2a:6d:e5:f9:94:b1:25:e3:f9:f6:2d:d8:c0:dc:e8:67:36:db:
         f3:cd:2f:5f:be:7a:d4:4b:98:aa:e1:6f:e0:86:bb:d7:3b:a7:
         e2:a4:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 02:54:02 2024 by rpki-client on console-ams.rpki-client.org