Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
File:                     dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json)
Hash identifier:          on7LOVmOqR83FqousmEOl04fRR8cLkh/USNVs+ZoVlA=
Subject key identifier:   4F:C8:6E:D5:14:14:82:67:2D:5C:B0:2B:48:83:30:95:D6:6A:1F:72
Certificate issuer:       /CN=e0222b33-d953-40bd-9e16-838d515a3e80
Certificate serial:       010D0C9F4328584726D0811B495566CEE1142480
Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     30708
IP address blocks:        208.86.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:81:1b:49:55:66:ce:e1:14:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=382b1fb5-608a-4e9c-9f68-911bd5e985ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:f7:78:f9:c4:63:9d:8c:50:90:b6:cf:b2:
                    0a:7a:cb:d6:87:b9:3c:9a:cb:71:0a:5a:72:9e:02:
                    46:e6:d1:3b:94:99:60:a1:8a:ce:ea:72:c8:af:28:
                    cf:f3:d3:86:90:ce:9c:a4:bb:e9:fc:3e:67:d9:2f:
                    27:99:bf:5d:56:56:e3:d3:71:6e:a8:7a:fc:89:50:
                    35:3e:18:44:e3:c5:19:02:ff:16:35:a9:21:f4:2c:
                    83:3c:47:de:f4:3e:12:4e:fb:df:aa:4c:dc:54:00:
                    62:e9:70:bf:54:9f:43:20:2c:98:f0:92:7a:a6:cb:
                    7a:2d:dc:85:38:db:6c:9b:c0:84:4e:57:d3:c4:d2:
                    84:87:c9:13:5d:7b:f8:46:4e:57:a9:1d:d8:90:b4:
                    57:9a:48:fb:71:3d:42:00:c6:71:a8:e7:3b:5b:ad:
                    53:6f:c8:de:16:3a:67:78:a8:1c:76:3b:88:64:26:
                    6e:98:c1:be:e3:3c:a0:07:91:3e:51:7f:da:22:55:
                    aa:1a:a0:5e:2b:57:67:39:71:00:f0:2f:28:5c:cd:
                    a1:87:37:08:0b:f7:82:14:b0:3f:05:d8:ea:7a:b0:
                    ce:b4:ad:9c:89:29:40:c6:c4:71:98:1f:18:e6:c2:
                    41:27:41:ef:8e:a7:9e:af:13:49:28:55:aa:26:db:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:6E:D5:14:14:82:67:2D:5C:B0:2B:48:83:30:95:D6:6A:1F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl

            X509v3 Authority Key Identifier:
                keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:66:cd:87:d9:e1:da:74:d6:ec:21:df:47:d4:8f:a0:52:ff:
         a9:c4:78:bc:a4:d5:05:1f:f3:7d:b4:85:95:b2:d1:5a:85:59:
         ff:74:63:14:40:4d:13:be:d4:c3:09:ea:d8:3b:2b:21:b3:a3:
         e1:8d:c6:d7:16:d6:63:d7:1e:98:22:66:6b:dc:7f:de:2c:e1:
         aa:f2:9d:40:03:13:64:c4:89:1c:20:d4:18:25:2b:ba:1c:d2:
         e8:58:d3:44:5d:8b:1a:87:b8:1a:b2:63:af:79:f7:67:24:71:
         ef:d4:4e:9e:c0:c9:9a:8b:40:83:dd:e8:1a:86:b9:89:98:b0:
         fc:de:d2:c1:f3:bf:a9:44:bd:18:08:32:cc:65:83:09:e7:57:
         c8:73:ef:51:20:ef:d2:9c:e1:ed:c4:ee:96:b0:fe:82:55:62:
         cf:30:4a:b8:2b:ae:2f:12:9b:5c:f5:c6:74:bb:86:bc:6b:26:
         cd:4a:7a:c9:13:39:19:be:de:8b:a2:a3:ab:b0:a2:59:61:34:
         e2:9d:b7:4b:77:19:ed:98:e3:35:46:56:cd:77:77:f8:e0:de:
         c1:0c:38:dd:dc:f5:be:6e:e1:60:3f:5b:a1:d1:eb:02:b5:68:
         3b:a7:33:bc:56:d5:62:f3:8a:74:e6:cc:b3:81:80:c0:45:2e:
         2a:ba:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:24 2024 by rpki-client on console-ams.rpki-client.org