Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa
File:                     c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa (raw, json)
Hash identifier:          PJIB3Aaq26q3pXaDRNA1za8EiQh25xA4GCCwoN3Vvfk=
Subject key identifier:   AA:1B:4B:76:C2:10:79:EB:5C:4F:A0:69:3A:D3:0A:76:5E:BE:01:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C5D1A7B7BD0227E8CAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        208.36.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c5:d1:a7:b7:bd:02:27:e8:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0120124a-bb14-445a-a5ba-c7afa9be8075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:ec:b0:3e:61:a1:b8:07:55:8a:0d:49:5f:
                    e1:f2:f8:a5:0e:ba:3e:d1:bc:37:fa:7c:ce:16:88:
                    e9:fb:ba:24:5f:ed:ef:8e:d9:26:96:04:9c:97:67:
                    19:94:fa:f2:f2:c8:d6:40:64:ff:fc:2e:16:c9:33:
                    d3:c4:d4:df:f4:44:f9:6f:6f:f8:bb:35:64:a5:d8:
                    f9:a5:ea:57:89:41:c5:6f:9e:c7:48:4d:b7:33:61:
                    37:cf:ba:b5:bf:2a:ca:27:56:52:d6:1a:53:a9:35:
                    e0:b6:b1:c8:fc:8a:8d:5d:92:14:8c:10:ff:62:6b:
                    e7:83:b1:78:54:1e:c0:19:bf:cf:a8:14:e4:ea:73:
                    80:c4:9c:fd:56:44:22:29:bc:1c:48:0e:e0:4d:a8:
                    d4:f1:a1:2f:4e:48:78:8a:17:c2:ab:d9:c9:fc:38:
                    e0:7d:e0:31:5f:60:92:bd:9b:b7:1c:76:35:24:5b:
                    e4:26:6e:f0:94:96:8e:6b:01:84:ae:b5:48:cb:05:
                    e2:95:75:ef:7b:fb:f2:2d:86:d6:d0:ea:17:04:24:
                    68:47:56:0a:29:56:70:e3:ee:35:66:b7:87:fe:6c:
                    40:81:c4:84:0f:62:53:a2:f2:45:0f:ed:9f:fd:3e:
                    b8:7c:9b:3a:45:54:60:42:b8:4c:ce:32:1a:96:4c:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1B:4B:76:C2:10:79:EB:5C:4F:A0:69:3A:D3:0A:76:5E:BE:01:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c03ff9b6-4e19-32ff-b3eb-7bff4de90176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.36.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:71:4c:c8:d1:70:b0:3e:e7:92:9a:e6:1b:95:8c:c3:14:fa:
         b2:41:4a:ef:70:38:bc:7b:fb:dc:d9:3b:12:5f:0c:ec:9b:59:
         a8:ab:fb:4b:62:3e:44:b1:7a:79:09:34:0a:c0:b4:ff:92:df:
         61:6a:bb:95:53:3c:24:f2:4b:f0:f7:58:66:fd:74:5b:47:76:
         fb:9f:9a:e5:e5:2b:96:6b:9a:80:14:bd:d1:b5:12:c7:31:6b:
         e4:ff:36:d8:c1:23:13:b2:9e:73:dd:20:44:fe:95:5c:8d:1f:
         d7:f9:fe:b2:59:a8:a5:79:c7:12:9f:e1:7a:79:5f:74:1d:04:
         55:7e:74:6d:5f:87:14:6a:e7:64:11:f9:23:34:90:81:80:bf:
         69:40:a8:f1:25:fd:4a:37:9b:6c:df:67:2d:2e:14:c5:da:a0:
         67:60:8e:29:ce:38:1b:84:e2:c0:4d:5c:8a:be:e5:2d:5a:ad:
         86:5b:32:8f:8b:9e:b0:a1:71:ef:cd:ae:cc:3e:73:a6:61:ae:
         29:77:b0:f2:09:ef:f3:5a:b4:18:86:e7:ab:8c:3f:4b:51:48:
         39:fe:d5:3f:f3:ea:f3:1c:e8:cd:b3:0f:a2:43:0d:b7:4c:ee:
         92:2b:23:22:dd:95:80:d2:bc:ed:88:62:eb:98:04:a4:d3:3c:
         36:19:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:51 2024 by rpki-client on console-fra.rpki-client.org