Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa
File:                     c0423400-0048-3038-acb3-c7d67eb17923.roa (raw, json)
Hash identifier:          5YFFtljvAjwA9fedARn/U8kJNQ+m2ycMAdFfRz1Z7hA=
Subject key identifier:   0A:A4:8C:14:1B:30:2F:1F:1D:81:71:8D:F2:3D:AD:B4:15:56:6E:38
Certificate issuer:       /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Certificate serial:       010D0C9F4328584765A0E09C1195BAD9E74AAC80
Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        208.71.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e0:9c:11:95:ba:d9:e7:4a:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=5515097d-08aa-4be6-8700-05786c6858d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:0e:89:30:57:83:90:bd:af:3a:1c:a1:10:
                    3d:64:9c:1e:89:39:1f:24:12:76:89:0e:18:1b:34:
                    de:7a:99:a6:5f:06:11:04:44:46:8f:9e:aa:ed:c7:
                    7a:1d:e6:ef:ef:a1:b6:86:28:d9:13:44:a2:f1:c9:
                    0e:8a:be:3e:5d:e7:6d:08:08:7e:38:7c:c6:4e:22:
                    79:2d:c4:52:08:3d:eb:bc:f5:4f:9e:ae:0e:a6:0a:
                    41:1c:41:ca:6a:48:a1:ce:85:b9:ea:df:11:4a:d3:
                    47:2f:43:8a:b3:96:e7:13:06:b2:5b:47:70:a6:49:
                    2b:23:c7:ba:f8:80:c7:37:6f:46:72:fc:f2:02:18:
                    fc:8f:9e:a4:a7:cd:f2:78:e7:ec:3b:86:37:da:5d:
                    60:61:6d:c2:09:4e:fe:8e:b4:c4:37:7e:e0:30:7b:
                    2e:26:2c:a1:73:bd:af:3f:4b:b2:0b:87:c5:60:1e:
                    00:07:ef:4d:73:4d:e9:01:15:3f:95:d7:31:d5:7e:
                    41:25:02:a7:12:53:4f:89:ee:f3:98:da:d0:4e:fe:
                    6e:16:d2:d9:65:48:60:0b:af:2d:1d:86:aa:f6:af:
                    28:58:52:e0:b0:f9:36:ff:49:99:a2:ca:f2:7b:b2:
                    57:b2:b6:79:a5:f3:b1:87:54:07:b2:9f:20:27:39:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A4:8C:14:1B:30:2F:1F:1D:81:71:8D:F2:3D:AD:B4:15:56:6E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl

            X509v3 Authority Key Identifier:
                keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:7d:0a:7e:a7:f8:6f:ff:9c:59:04:44:74:da:d5:0a:d3:
         72:a5:ee:c6:9f:42:a9:cc:05:f3:9c:31:01:23:8e:fd:3f:a3:
         e5:5d:3d:2a:f1:a9:b6:ad:5f:01:f6:97:77:d9:20:26:9d:4f:
         c0:52:2f:77:d7:de:f7:0e:db:3e:46:e8:4c:da:9f:5b:a0:bf:
         3f:74:43:b4:f8:36:e7:e0:9e:c2:27:72:9a:dd:9b:45:6a:ce:
         77:16:c3:40:7a:9a:d9:fe:b7:b7:4c:3b:9a:e4:76:d7:08:1d:
         76:aa:23:68:6e:0d:10:56:4d:b6:b3:65:72:76:03:41:d5:55:
         61:6c:9f:62:c7:9a:88:9f:4e:e0:68:ba:f5:9f:0a:9e:dc:47:
         e7:cf:ac:58:11:af:5c:3b:13:8d:d8:6d:29:84:23:c2:01:1a:
         2c:5c:11:e0:e5:2a:e4:48:03:d5:90:f7:0c:23:0c:29:ef:5e:
         f3:97:bf:0a:a1:e2:55:1d:75:86:56:81:5f:2e:a5:cb:03:aa:
         64:96:dc:1e:93:4a:08:48:c1:99:cc:44:88:4b:38:15:29:17:
         71:61:d4:65:02:d4:38:6f:08:c7:27:1d:82:86:44:70:4a:d7:
         fb:bc:f7:ff:ff:d8:b9:e0:81:b9:52:61:63:b9:ba:6f:e3:e6:
         c5:7f:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:23 2024 by rpki-client on console-ams.rpki-client.org