Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce998433-c753-3907-8419-990ae2629ced.roa
File:                     ce998433-c753-3907-8419-990ae2629ced.roa (raw, json)
Hash identifier:          AyM2y8N/t9ei4k1cHIp8Uds1MR0I2nGILLfhIqIE3Is=
Subject key identifier:   1A:F4:BD:5E:35:CB:D4:1D:7F:97:EB:1E:65:41:D1:DD:42:E8:33:3B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420BDA2AA4E4951298A2A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce998433-c753-3907-8419-990ae2629ced.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     0
IP address blocks:        208.236.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bd:a2:aa:4e:49:51:29:8a:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=57fa974a-03dc-4e5c-8f50-b93720d93569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:d9:69:38:68:5e:9b:b2:08:07:1d:d4:f9:
                    97:6b:c2:b8:4c:88:32:bd:25:ba:93:3d:f1:be:8c:
                    95:a5:34:6d:d9:17:ce:8f:6e:5e:e1:3c:e6:ee:c9:
                    08:85:9b:a3:ff:2b:67:85:7a:8b:0e:53:e7:e9:cf:
                    b6:06:ea:65:8c:ee:66:9b:dc:7e:d1:43:01:3f:46:
                    d0:e7:4c:2d:1d:6b:4f:14:8b:f6:9e:79:bb:20:21:
                    b5:82:23:01:2e:83:56:7a:ca:f8:06:08:0f:a3:97:
                    be:37:6d:3f:1a:f1:c3:e8:7a:23:08:f3:d6:93:8c:
                    1b:a9:53:4b:99:17:1a:26:65:90:6c:13:97:23:c1:
                    1e:36:92:a1:d1:37:7b:64:22:3c:53:c1:6c:24:d3:
                    d6:95:99:73:d1:41:af:60:07:20:13:a3:b6:cc:59:
                    bc:98:5d:df:bd:c4:c7:76:4f:c6:41:88:12:d7:4c:
                    4f:d3:00:cc:2f:e1:85:15:db:ed:5f:b8:08:4d:21:
                    4e:0e:db:7d:11:d6:14:bc:b4:09:65:39:a8:b8:eb:
                    4b:7f:e4:f8:63:52:81:c5:1a:41:3f:e5:8c:73:8e:
                    da:47:a8:93:8b:e2:79:ce:4c:6f:e7:72:45:8c:35:
                    5b:24:37:c5:05:64:16:96:58:c1:b3:e7:18:16:1c:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:BD:5E:35:CB:D4:1D:7F:97:EB:1E:65:41:D1:DD:42:E8:33:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ce998433-c753-3907-8419-990ae2629ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.236.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:2f:70:80:66:68:e4:73:f7:e7:df:ab:7c:07:14:b0:87:
         e9:a7:6d:d0:49:b8:63:a1:63:0b:fe:cd:3a:2a:a7:a3:c3:e9:
         94:64:31:6a:f8:bb:2b:31:f8:12:6c:05:2a:d6:e7:bf:1f:fd:
         6e:f3:d4:f5:9a:f8:db:f4:1a:9d:05:d8:68:45:1f:85:ec:86:
         cd:86:41:a2:c9:d4:c6:82:32:72:a3:21:98:d1:83:a6:3f:b4:
         49:fa:07:ad:17:5b:c8:9e:13:61:3c:75:96:67:ab:41:bf:4a:
         1e:9a:df:8d:e2:54:f1:dd:e3:0f:8a:6d:d7:2c:eb:55:cc:fe:
         84:68:82:17:b2:aa:67:d5:75:57:c2:6e:a8:2c:8a:24:ce:c8:
         9d:30:26:2b:27:74:4f:cf:9a:c9:4c:a0:6c:62:cb:04:db:49:
         a0:c7:4c:af:d3:98:4f:fe:5b:84:a2:2c:7e:5c:c7:f9:05:ba:
         2a:69:7f:64:a2:4a:65:b7:a0:8c:6e:1a:15:be:ab:eb:6c:b8:
         c0:27:c7:0b:66:10:fa:75:31:ea:20:c1:0a:b8:a7:54:89:58:
         28:56:98:db:27:9f:75:c5:53:fa:82:f9:54:6f:fc:fc:31:59:
         82:60:8f:df:13:2e:83:72:b3:65:b6:47:ed:39:9f:1f:a4:52:
         cd:d0:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:50 2024 by rpki-client on console-ams.rpki-client.org