Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
File:                     6f794266-0944-306d-ad4a-c02c519c347a.roa (raw, json)
Hash identifier:          ygGVZZvY6q/U1FiMGaiLUabUwjgBZnL39+fw6Y1dnA4=
Subject key identifier:   39:51:B3:D7:D2:7B:CC:BB:0E:DF:E2:EA:75:BA:CC:F1:D2:02:CE:4A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E094ED56BD1A095C94295F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        108.170.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ed:56:bd:1a:09:5c:94:29:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=7619785f-e6dd-4caa-a65a-57bb2068b03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d1:28:a3:69:78:68:bd:fb:ae:01:c9:46:f3:
                    3d:7f:3e:75:d8:69:95:60:c8:60:20:15:41:ce:be:
                    52:bb:c4:72:ac:04:ca:3e:7a:90:25:41:6e:af:1b:
                    b8:28:27:1c:25:1f:ef:1d:56:3a:5c:bc:10:77:83:
                    4b:79:50:58:8e:df:04:c2:60:a9:28:d5:d0:80:67:
                    a3:fb:46:4c:a1:8d:c3:b7:3e:18:3f:56:dc:65:28:
                    e7:e0:52:b9:98:0a:ca:90:81:1d:eb:db:78:06:54:
                    3c:2e:d6:6b:11:09:68:bc:d7:2e:c7:a8:6d:ef:a5:
                    9b:0d:26:84:7e:78:6c:e0:23:dd:89:12:ab:ba:8c:
                    d2:6c:50:c6:f1:cc:93:5f:18:6c:cc:a7:4e:59:ea:
                    ad:3e:45:7e:1b:e3:a8:6d:42:4d:1e:22:5a:93:b4:
                    3e:39:a1:b8:dd:42:5f:8b:eb:44:4e:02:68:b3:79:
                    1e:1f:a2:70:5c:8c:1f:5c:10:b4:76:b3:4c:05:9b:
                    82:33:a4:22:f3:38:29:f6:27:a6:6c:56:7f:9e:ef:
                    94:00:3f:93:b5:ec:cd:eb:6f:5d:07:1a:c5:5e:39:
                    ac:e3:02:02:81:c1:af:f0:0a:02:89:68:f7:23:1b:
                    37:b7:03:fe:da:49:03:6a:37:71:56:c3:39:6e:98:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:B3:D7:D2:7B:CC:BB:0E:DF:E2:EA:75:BA:CC:F1:D2:02:CE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6f794266-0944-306d-ad4a-c02c519c347a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:5c:b7:b4:e7:4a:da:e4:27:1d:03:45:f5:31:77:97:c5:
         28:f4:82:61:03:58:98:bb:5b:46:1c:df:6f:ab:ff:02:fb:3e:
         5b:8a:1a:b6:04:d9:99:d4:0b:45:23:d5:bf:95:03:12:d7:54:
         b2:a2:31:04:7f:e4:3f:13:da:e4:c3:55:6e:15:af:57:82:1e:
         55:a9:9e:9f:74:bf:59:b3:e7:7d:62:53:fa:d2:c6:4c:03:01:
         8a:ed:e6:57:bf:95:9b:19:7b:19:cb:af:1e:d6:bc:01:15:a6:
         6b:5c:af:f1:73:d1:db:88:bb:ea:b3:54:6c:43:d6:27:a6:7c:
         df:81:d7:88:fe:c1:77:39:73:65:cf:cc:24:b4:f7:1f:57:02:
         86:a8:e7:1a:4f:0f:42:c6:02:6e:cc:84:36:20:d6:30:a8:e4:
         35:cb:e1:4a:75:f0:9f:d0:af:08:ee:c5:1c:3d:6d:68:38:03:
         43:27:90:d7:60:cf:51:98:69:e7:c7:51:2c:2d:7e:fa:b0:8e:
         f4:b2:66:31:b0:12:85:19:db:84:8f:95:6e:fb:22:f0:48:3b:
         f6:de:fa:46:8d:3c:c7:78:d1:9c:72:8d:83:a8:8c:1f:0e:0f:
         4f:ec:2f:fe:f1:ae:dc:e9:20:3c:2a:9a:d9:a8:f9:d0:d4:72:
         fe:49:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org