Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa
File:                     10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa (raw, json)
Hash identifier:          HV8TnYcpxuwHE9eZCmqL0c2kJhEY9KgpYQrYbepTuhU=
Subject key identifier:   EC:97:74:45:47:97:FD:84:49:8A:4C:57:6D:91:1E:19:44:C2:9F:70
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285847CD6B53F0B0AB1A95F49D7700
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa
Signing time:             Thu 07 Nov 2024 17:16:55 +0000
ROA not before:           Thu 07 Nov 2024 17:16:55 +0000
ROA not after:            Wed 05 Feb 2025 17:16:55 +0000
asID:                     13768
IP address blocks:        192.154.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:6b:53:f0:b0:ab:1a:95:f4:9d:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Nov  7 17:16:55 2024 GMT
            Not After : Feb  5 17:16:55 2025 GMT
        Subject: CN=e7d4b40e-37a8-40d1-9a06-0654b6537a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:3b:8c:59:c9:df:b3:09:1a:27:cf:c7:b0:
                    a2:22:12:48:83:00:92:2c:3b:a4:95:12:ed:7c:64:
                    34:ce:a0:30:0d:2a:54:5b:5a:a3:35:1b:0d:7e:9d:
                    19:34:4f:21:b3:7e:8f:14:7e:ab:76:b6:90:c9:9a:
                    26:e6:2a:79:95:fc:9e:6a:63:42:7f:1c:c9:59:ee:
                    d4:5a:8c:06:47:01:29:75:7f:c3:40:86:97:1e:82:
                    ad:e0:98:5a:ae:8b:9a:45:d4:75:c6:63:79:1b:35:
                    09:14:2c:c3:06:41:12:80:58:1b:4b:a9:4a:81:67:
                    71:ae:97:55:56:0d:8d:65:b4:0f:49:6b:79:60:51:
                    dc:2f:3d:44:6c:ea:fa:f9:35:6b:d8:bd:31:a7:48:
                    28:0f:a3:f3:a3:74:bb:17:10:c6:0c:af:2c:4b:bc:
                    d8:d7:7c:f2:f6:b9:c7:c5:0d:92:83:6f:9a:0d:a6:
                    2c:7a:35:c2:24:97:bb:30:12:a3:40:55:7c:3e:a0:
                    7a:d6:da:da:4d:56:be:f8:b7:87:50:a5:1a:3b:5a:
                    86:cd:9c:4c:a5:e9:1a:ff:33:84:11:03:a6:a5:39:
                    51:02:09:56:05:30:36:7c:76:f1:8d:a8:4d:4b:36:
                    f2:58:ce:83:31:52:28:b6:d1:32:b8:53:ba:5e:b2:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:97:74:45:47:97:FD:84:49:8A:4C:57:6D:91:1E:19:44:C2:9F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/10133c7e-00c4-388b-b0f5-61b7c67ebe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:3e:ef:45:e6:43:a2:16:90:b3:28:bf:cd:f2:4f:16:d2:
         61:f6:75:35:00:e3:b6:53:25:14:65:e4:cb:af:03:47:bb:de:
         48:df:8e:dd:af:bf:d1:38:26:56:b6:28:a8:01:d4:f4:7d:14:
         1b:95:70:bb:63:79:c4:46:71:ce:b1:b2:03:3f:02:6f:a4:9a:
         3d:59:4a:9d:11:fc:9d:3e:b8:4f:bd:8a:3f:81:4f:c5:02:cd:
         af:b5:67:11:2a:22:a3:78:fe:9e:6e:b2:ba:85:ce:ee:cf:2b:
         67:5d:90:30:86:56:e8:25:d6:32:1a:cf:18:9d:cb:7e:0b:5c:
         20:3a:24:9a:da:4b:de:49:53:cd:fe:94:92:82:21:3e:8a:e3:
         20:6e:e7:6f:62:ee:54:d8:09:ef:a0:ce:58:04:39:98:b5:14:
         b9:0b:33:48:dc:05:70:56:99:b9:0a:72:bf:6a:1e:c8:10:9d:
         05:35:b6:da:bf:41:03:b7:cb:3a:d8:c4:d1:af:9c:f9:c1:ab:
         97:41:ee:55:e6:03:ef:0d:eb:4e:26:65:23:05:73:2e:77:39:
         46:8e:fe:d7:bc:ea:23:47:ce:5f:17:56:73:07:5d:51:df:fe:
         87:e3:48:64:dc:17:89:25:2b:70:cd:d1:23:77:a0:f6:20:cc:
         b3:c2:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:10 2024 by rpki-client on console-fra.rpki-client.org