Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/77ddbc3f-53b5-3c2a-aed5-e40e12e78c7d.roa
File:                     77ddbc3f-53b5-3c2a-aed5-e40e12e78c7d.roa (raw, json)
Hash identifier:          Yidl8wOvp1bwW4sd0MKT0s9eXIEC6YPxJn0sZ90xopk=
Subject key identifier:   E5:D7:C8:31:8D:4A:BA:2F:D1:C1:98:31:E2:96:61:8E:8D:15:58:1E
Certificate issuer:       /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial:       010D0C9F432858472405CE04FC9FAF673D309500
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/77ddbc3f-53b5-3c2a-aed5-e40e12e78c7d.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        208.79.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:ce:04:fc:9f:af:67:3d:30:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=6cf6ae1f-58f1-42c7-b428-64d0c2a230dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:4d:c8:74:cb:01:9c:70:95:67:f8:71:6e:
                    c9:e2:91:fa:77:cb:6c:b0:0a:d2:78:3f:45:42:bb:
                    19:68:8b:26:8b:e1:56:55:1f:2e:64:77:b0:c4:ea:
                    b9:d8:9a:7b:40:60:db:e2:3f:2f:d0:da:ae:e0:20:
                    9b:a2:3a:bc:a9:f8:f2:23:a5:0e:80:7e:75:c5:9a:
                    96:e9:e3:d5:d5:20:b9:1b:a0:78:08:4c:51:23:66:
                    6d:af:21:34:6a:c4:d3:08:c3:2c:4f:3e:fc:a9:d2:
                    1c:ea:48:cc:15:c6:87:3a:33:69:fa:3c:c8:ab:0c:
                    f6:9c:0d:ea:db:50:f3:fb:e7:4d:20:ac:e8:1c:02:
                    42:c3:ef:20:a0:ed:a8:ac:04:68:f8:20:61:f0:8f:
                    28:75:16:3f:c3:a0:4d:bb:7e:c5:97:f3:ac:b4:c6:
                    00:95:93:ef:3c:66:9d:d5:3f:46:0b:cb:51:a4:b8:
                    da:01:17:41:e8:d1:38:74:20:4a:54:21:69:13:6c:
                    66:e1:3c:4f:b0:72:27:39:f3:06:90:9a:1a:7b:2c:
                    37:0c:27:05:27:a1:4f:f0:a7:b6:97:64:7b:9b:7a:
                    0d:6d:c8:d8:ce:5e:bb:2b:b5:c9:ed:04:df:58:b0:
                    86:f4:19:52:ba:90:3a:d6:ff:ed:8f:82:20:32:f7:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D7:C8:31:8D:4A:BA:2F:D1:C1:98:31:E2:96:61:8E:8D:15:58:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/77ddbc3f-53b5-3c2a-aed5-e40e12e78c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl

            X509v3 Authority Key Identifier:
                keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:80:a5:ba:78:5d:9d:e2:a9:73:33:a9:f1:e7:c4:40:c6:7e:
         85:eb:db:50:95:3e:4a:44:a0:ff:85:c1:6b:55:a9:b8:00:36:
         2b:47:4f:59:ee:d8:c4:06:f3:58:0a:9c:f1:a3:e2:60:ae:e6:
         2f:e3:62:8a:63:ea:cf:26:00:94:f3:40:2e:04:93:a8:ef:0a:
         91:e0:60:92:bb:94:c4:13:f3:ec:a7:d4:bf:f8:62:61:72:dc:
         17:8c:67:5c:af:ac:f7:77:5a:c0:f4:a5:1e:6e:a2:cf:cc:1a:
         2b:99:ae:ee:49:5b:c6:fb:62:d5:cb:75:cc:2a:ca:7a:a1:3b:
         2f:29:3a:18:bb:4d:4c:03:88:2e:aa:2f:52:9a:eb:2d:fb:44:
         15:64:b6:53:34:1b:ed:96:62:e6:0b:6a:a2:bc:d7:b6:23:86:
         49:10:16:fc:3c:9d:8b:0e:58:3f:68:3d:c8:0e:a9:0b:69:15:
         bb:21:bc:00:f6:39:46:e9:35:cb:a0:af:f6:00:08:ea:08:81:
         93:66:57:3f:3b:9f:0e:94:9c:c2:75:bd:f5:ec:db:33:f4:dc:
         77:46:b0:a4:5c:bb:b3:ea:03:18:89:2c:f4:48:b8:f0:ed:8c:
         e0:f0:0b:58:eb:58:e7:81:88:be:7a:ad:9c:50:1b:78:62:cf:
         b2:51:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:49 2024 by rpki-client on console-ams.rpki-client.org