Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa
File:                     0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa (raw, json)
Hash identifier:          24VVcw+Q26KudwDlg6pH5P5kbJnrftFabeksz868soc=
Subject key identifier:   73:1D:29:86:F8:D6:EB:A3:1F:6A:1B:F8:9D:55:EB:0C:64:68:C1:31
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844FB6002E863EF3979B1385780
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        208.85.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:02:e8:63:ef:39:79:b1:38:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=f1ac07de-63da-46e5-94ae-b0033ccafd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:db:b2:75:a9:fd:6c:a8:bf:db:ac:af:c3:
                    ca:41:78:38:70:2a:6b:0e:8b:e6:b9:81:f5:e8:9e:
                    ff:63:b7:26:f6:c1:14:7c:78:a7:30:1f:a0:81:08:
                    78:7e:a4:0d:f7:c7:d7:a3:15:b7:65:a5:5e:27:64:
                    5f:01:8c:f7:99:37:24:60:c8:b9:f6:f9:4c:38:d6:
                    65:c5:09:73:45:0e:34:db:f5:67:19:f9:38:3b:de:
                    cc:fb:70:56:af:b7:0d:21:6e:43:05:94:7f:90:10:
                    f8:82:d0:a8:02:31:63:e5:c0:fb:0a:0d:ea:b2:dd:
                    d7:25:78:d2:c6:3d:f2:51:36:96:5c:43:44:00:fa:
                    03:27:fb:ca:f5:1d:b0:3a:a0:a2:62:47:5b:9b:71:
                    0e:d9:1d:52:a5:e5:ea:82:4f:9f:cf:90:6b:d6:dc:
                    33:0a:57:15:ff:10:71:7b:3f:d4:c0:52:bb:ce:e4:
                    6c:be:a9:ca:96:5e:f3:9e:a4:9f:7e:90:17:85:a7:
                    4b:bb:1b:35:43:38:14:c7:4d:fb:e2:41:7d:ba:c9:
                    aa:39:07:12:34:83:09:00:89:e7:d9:48:cd:f3:99:
                    c3:0b:09:72:ee:4e:ad:0d:ba:05:4f:a1:8b:88:0c:
                    ab:14:6d:86:a9:75:2d:32:b5:c6:58:73:c1:54:18:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:29:86:F8:D6:EB:A3:1F:6A:1B:F8:9D:55:EB:0C:64:68:C1:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0e8d9e3a-4eb9-37d3-8b00-b5072bfed469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:8a:12:d7:9a:ed:48:ad:d2:07:f3:1f:47:d9:60:09:83:
         05:b9:e1:aa:62:dd:11:05:70:98:0e:36:42:6c:33:9b:63:9b:
         8e:a2:07:d6:1d:a0:d2:ec:97:f3:29:23:bb:d9:02:04:70:33:
         6d:88:df:34:0a:d7:4d:32:92:0c:ac:d4:90:e8:30:92:ca:f0:
         85:8f:4e:a6:09:f6:7c:a5:21:67:80:1e:7f:da:34:26:c0:3b:
         28:cb:8d:e9:fc:5e:5e:20:fa:dd:1d:5e:55:dd:b2:d5:b4:e6:
         f6:b0:7c:7b:99:d6:1d:67:17:06:4e:0a:4e:fc:a4:6f:77:e9:
         28:50:1f:41:28:ad:58:9f:95:59:1a:fb:b2:97:08:f9:bb:a2:
         cf:2e:c9:8a:04:10:e5:cb:e8:b8:74:4e:ec:c8:79:8f:70:95:
         da:e0:21:86:3c:96:d8:e1:56:14:91:96:1b:57:ce:cf:72:62:
         47:42:5a:29:57:8b:27:74:f2:73:06:ff:08:4d:e6:ba:36:62:
         7d:06:15:64:bc:be:5e:33:28:c6:92:b0:4b:fb:d9:36:66:82:
         ad:93:6b:24:5d:33:ca:11:46:4d:d1:e2:6a:c6:b2:ce:9e:d0:
         6c:4b:c0:3c:43:50:e4:b0:b3:b5:e9:8a:f6:c5:47:15:6a:28:
         a2:4b:81:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:03 2024 by rpki-client on console-ams.rpki-client.org