Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa
File:                     29531714-5912-32a0-9672-e352aeb3fbd8.roa (raw, json)
Hash identifier:          k4o981Ooym9T0bIy91DlDI6ei99G3kUnRn9wtYufZvE=
Subject key identifier:   7F:54:3C:87:70:76:E5:A1:E0:CE:AB:81:B3:2C:94:6B:22:D4:B2:4E
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844FB60071C6BA1AFD8E53BF710
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        208.85.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:07:1c:6b:a1:af:d8:e5:3b:f7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=8d17b4d8-2644-46c2-ac49-4616ea72adb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:a3:27:af:e8:fb:ad:45:a1:9e:48:9d:41:
                    41:e0:e3:8c:52:f3:2f:98:f5:28:63:7f:59:6b:28:
                    bd:5b:00:b8:45:64:d4:a3:cf:14:b3:91:36:9f:35:
                    b6:ca:39:c6:12:35:c0:2e:90:9d:e2:08:1e:d5:bd:
                    ce:77:52:86:63:c8:03:e5:2f:75:83:9e:5e:2b:e0:
                    7d:4d:2a:78:ac:a6:ee:33:a8:bd:1c:df:a1:f0:ae:
                    b2:2f:e4:62:e5:73:1b:fb:02:d7:3f:c0:ec:6a:52:
                    7b:d8:89:14:f1:e1:8d:47:94:e0:d8:09:ce:7d:9a:
                    2f:04:51:4f:eb:1a:28:00:d1:0d:8a:e8:64:20:63:
                    38:31:ba:a1:d1:8b:d6:00:b3:3b:bc:80:05:67:a0:
                    99:42:c3:45:6e:ed:ac:7a:4d:76:90:1b:76:e7:ca:
                    7a:dc:f7:ec:7e:84:cc:d8:fa:0e:1a:80:5d:51:45:
                    39:1f:ba:4f:5d:ad:4b:30:87:39:09:8a:2b:7f:04:
                    c2:81:26:66:f4:74:7c:44:3b:55:27:c8:56:77:60:
                    4c:3e:cf:af:de:32:67:25:52:45:c4:05:7a:47:93:
                    bc:ff:ad:b8:d0:a1:38:a2:f3:6b:0a:97:2c:49:c6:
                    dd:e8:47:a6:e3:6c:f1:be:03:32:c1:dc:86:bb:3c:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:54:3C:87:70:76:E5:A1:E0:CE:AB:81:B3:2C:94:6B:22:D4:B2:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fd:0b:96:e1:78:de:bb:da:1b:8a:4a:b7:a2:19:fb:de:12:
         e9:53:94:6f:6b:63:73:44:8f:4d:56:b9:c5:e8:8b:04:e0:cb:
         80:13:89:70:17:cd:fb:10:0b:dd:a1:9d:e8:38:ee:d1:86:4d:
         7c:f9:72:6c:65:21:0f:eb:2c:bc:59:e7:1c:ba:f3:db:b5:db:
         30:b4:2c:fd:f5:cf:33:d5:e1:10:73:e9:e0:1e:81:a2:e7:9b:
         af:16:87:52:25:41:fc:02:14:fa:9f:1b:03:3c:c1:6b:d9:ec:
         51:c8:db:bc:df:d2:ca:c2:35:92:81:29:68:0e:ff:2e:ec:c1:
         cf:47:90:a8:d8:b0:89:14:d4:c1:9a:9a:6f:b1:e2:48:21:7c:
         a2:ed:09:1d:18:3f:2b:3b:4d:19:55:4d:d2:91:c2:ee:39:02:
         84:34:07:b2:9e:5b:b0:8d:5a:a5:fb:e7:4c:00:31:f1:70:a3:
         62:fc:63:f1:54:83:c7:3a:96:05:b3:e3:86:1f:fb:c3:5c:7c:
         23:35:b7:e6:e8:c7:4d:ef:99:45:21:a6:1d:b6:67:79:5a:34:
         84:22:2e:3d:b8:44:fe:b7:76:65:1d:bc:04:3d:9a:c8:e0:f6:
         a9:63:bc:39:e1:a7:de:1f:c8:d6:19:90:21:90:d7:09:fe:47:
         c8:c6:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:10 2024 by rpki-client on console-ams.rpki-client.org