Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
File:                     0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa (raw, json)
Hash identifier:          X69PopyzucjNjZs+OXgrBuS9DVlU/coeVyoOSTu8A4s=
Subject key identifier:   F9:0E:47:C2:CC:AB:D8:89:5A:53:49:83:81:27:47:8E:BE:B1:CB:EF
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844F9FAB5E9790845B34B670C00
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa
Signing time:             Thu 22 Feb 2024 14:00:30 +0000
ROA not before:           Thu 22 Feb 2024 14:00:30 +0000
ROA not after:            Wed 22 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        208.85.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:fa:b5:e9:79:08:45:b3:4b:67:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 22 14:00:30 2024 GMT
            Not After : May 22 13:00:30 2024 GMT
        Subject: CN=9e0717b5-3582-4c1b-aefa-7e3c69ee26d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cc:0c:72:fa:78:c0:ae:2d:be:7c:42:93:6f:
                    e2:0b:d8:3e:8b:d3:72:bb:b0:f9:a3:96:3a:89:79:
                    96:81:f9:ad:19:74:d8:64:21:ea:cf:f2:a8:86:4c:
                    50:51:82:25:a7:59:92:24:32:d3:cc:e6:c7:37:b4:
                    d0:39:3d:01:e4:7d:cd:92:2b:ae:87:fc:78:6e:08:
                    06:23:73:37:85:6f:17:37:76:b1:20:36:40:0f:5e:
                    0a:c1:d5:58:b0:d6:ae:9b:5d:41:4f:2f:51:d6:17:
                    ec:4b:f1:10:18:a8:74:87:28:6b:5a:64:f1:1c:b8:
                    21:56:a6:4d:31:e0:83:73:47:1f:5b:28:97:4f:f8:
                    72:c5:20:f3:76:dc:59:43:78:f3:51:ad:e1:51:44:
                    87:6f:39:9a:f0:89:a0:64:49:27:00:88:77:e8:26:
                    a6:b8:40:00:4f:3c:51:a0:13:42:45:bb:6c:7a:e9:
                    da:8d:2b:c8:28:3f:e6:77:b7:70:34:32:95:21:be:
                    c1:32:8d:c7:cc:0c:37:7e:93:b6:89:c6:a7:a0:27:
                    f9:21:e9:5b:1e:c2:6f:7b:42:7b:95:17:39:03:fb:
                    53:11:cd:c1:12:d3:77:8f:c8:ac:92:43:bc:f5:47:
                    f4:d8:d0:a0:2a:82:73:8d:c2:2a:4e:14:92:59:dc:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:47:C2:CC:AB:D8:89:5A:53:49:83:81:27:47:8E:BE:B1:CB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:57:59:10:57:21:e0:af:1c:07:38:26:30:85:85:99:ee:66:
         0f:2d:cf:90:cb:9f:60:c1:f6:2c:6b:b8:f4:2e:5c:b0:52:b5:
         b2:6c:5a:72:5c:e0:47:7c:9f:fe:22:3d:79:68:97:32:cf:08:
         c2:32:bc:90:c3:d4:e9:5c:c8:5f:fb:0e:c5:7b:15:fe:e0:20:
         fa:c8:91:b1:21:89:5c:fa:99:df:55:f6:94:57:f5:d5:02:b1:
         92:70:3a:f3:7f:41:da:89:32:21:90:5f:f3:8b:88:0b:b5:a5:
         e1:33:14:3a:da:30:ef:aa:3f:d0:b3:a6:02:6f:8c:13:29:99:
         b8:e2:1c:65:84:ae:e0:53:f8:13:d3:02:a5:39:cc:f0:9a:d3:
         d9:de:36:ea:a7:34:a6:5d:3b:39:b7:15:01:21:fe:98:37:38:
         48:7d:63:1e:83:36:16:d6:19:cf:f0:1b:2f:d8:54:98:9b:14:
         89:1d:18:a9:c9:49:f7:45:23:9f:4a:ff:49:2b:10:4f:1b:32:
         36:6e:53:c9:e0:74:e0:b2:dd:b5:9b:c8:2a:45:48:6e:9a:d7:
         eb:fc:22:f7:60:d4:73:8d:30:c9:41:88:94:a5:f6:53:d2:fd:
         8c:ad:46:37:89:f7:cd:97:f6:95:42:3b:eb:81:1c:1d:ce:a8:
         93:ef:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:03 2024 by rpki-client on console-ams.rpki-client.org