Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
File:                     2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa (raw, json)
Hash identifier:          GpvljS9NV8yUxtVpKVU65UvrzvkJqB+jxwPZ/WXf8c8=
Subject key identifier:   90:FD:39:FA:82:FB:7B:5E:D1:F3:16:70:D1:45:8B:D0:7B:06:08:19
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858476706215C93C8AB7B0AD99C40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     399439
IP address blocks:        208.53.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:21:5c:93:c8:ab:7b:0a:d9:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=f8fbf16e-6efe-49ed-bb58-65b1d47fccb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:94:c6:15:1f:52:9e:27:15:9d:11:bc:7d:
                    6f:cc:a4:a4:2c:af:2a:28:8d:a7:60:80:04:b9:8b:
                    4d:3e:7a:01:15:ec:75:17:26:5f:47:3f:4f:28:63:
                    f0:2c:f7:84:6e:a8:02:77:10:ec:87:13:13:6c:3f:
                    71:77:e2:b3:e5:32:b7:3c:a4:c5:1d:8b:4e:b8:44:
                    d7:8f:49:9e:ca:5a:cc:f3:7d:ec:3d:9d:b3:6e:32:
                    fa:ca:85:06:8a:dc:71:03:46:16:47:0a:51:78:82:
                    19:b1:ef:6c:bc:83:71:5d:27:11:a3:fd:21:f6:eb:
                    36:23:50:e6:84:ec:d5:53:b0:0e:ef:5c:2c:8b:2c:
                    9d:0f:2b:f6:70:47:e7:23:81:fb:bf:ce:48:de:86:
                    7a:af:69:5f:71:3e:ac:78:12:38:70:66:4b:1f:a9:
                    91:a0:6c:76:aa:e9:58:89:8a:89:43:cc:9a:eb:d1:
                    18:d2:c0:dd:c0:01:79:81:60:e0:43:85:a6:5d:77:
                    96:5c:a1:d9:6f:cf:49:5e:c6:c9:fd:e9:23:0f:0e:
                    9c:fc:53:9e:2c:a5:18:2b:2a:5e:a0:0d:a2:e8:c3:
                    b6:e7:be:f2:6c:b2:3f:a0:db:80:3c:78:7a:0a:59:
                    a1:d8:3e:73:d3:bf:18:e7:71:1a:36:77:96:6d:c6:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FD:39:FA:82:FB:7B:5E:D1:F3:16:70:D1:45:8B:D0:7B:06:08:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2473fa09-d6b4-3605-aa2e-ea544fe12cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:61:0f:c4:29:db:a0:8d:5e:1c:99:d9:d2:bb:d1:53:82:
         ec:3a:ad:79:b2:3a:e8:6f:01:70:25:82:0b:fe:a1:40:bb:df:
         57:e3:4e:7c:91:c4:12:06:81:1a:b3:b9:5b:d6:0e:5a:1c:0c:
         f8:ed:7a:d7:51:16:1d:70:c7:3e:89:ab:50:48:7b:51:39:c3:
         1c:e6:f0:46:a8:c4:71:be:ab:42:fb:84:95:a5:0b:78:18:c2:
         11:25:a2:74:9a:4a:53:90:2d:d2:c5:86:18:a8:67:1d:a4:fa:
         43:25:db:6c:8e:56:37:08:67:9b:d7:22:13:68:cc:bc:d1:cf:
         e6:73:b6:ef:2d:e6:be:96:f1:1b:2e:a3:33:9c:2a:26:ee:7a:
         8e:94:a3:45:41:3a:76:f8:55:f3:c9:f0:22:c0:0a:15:d1:e1:
         d9:ec:3e:26:87:f1:f1:eb:35:b4:c8:e4:13:d7:ad:30:f1:fa:
         63:b0:cb:66:df:e4:5f:0b:42:a5:bb:51:66:b2:c6:81:ca:c0:
         89:06:84:e3:f6:bd:40:a9:1e:39:6c:79:d6:bc:7f:02:00:fb:
         1a:ca:bc:f6:b1:d6:e1:1e:a8:83:be:a2:fe:cf:4f:7f:10:5e:
         d1:8d:da:68:f4:6b:0f:94:85:c3:23:c5:90:29:c6:ee:a7:55:
         73:6f:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:34 2024 by rpki-client on console-ams.rpki-client.org