Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa
File:                     ecf93550-f07a-3473-911d-90e1b9fad9c1.roa (raw, json)
Hash identifier:          0C80PTh1IS6kdd4RqHBCJcEcUthSZCfxMfgkIVQ+fMA=
Subject key identifier:   48:3B:20:97:A9:9B:E7:54:50:86:E3:59:8A:B2:77:7C:A8:2A:C6:FF
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F43285844FB600795DF5CF49A52540BC0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa
Signing time:             Fri 23 Feb 2024 02:00:26 +0000
ROA not before:           Fri 23 Feb 2024 02:00:26 +0000
ROA not after:            Thu 23 May 2024 01:00:26 +0000
asID:                     14618
IP address blocks:        208.95.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:60:07:95:df:5c:f4:9a:52:54:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Feb 23 02:00:26 2024 GMT
            Not After : May 23 01:00:26 2024 GMT
        Subject: CN=24beb06d-a191-4b59-8d85-6d54efcdce95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:bd:cc:e2:19:34:28:8b:45:1c:db:3a:31:
                    78:38:ce:30:51:12:16:91:a2:2f:8e:06:b0:ea:11:
                    bc:bb:06:16:96:13:05:fc:c9:c2:9e:fa:75:db:aa:
                    38:9a:49:3c:26:9a:8a:0d:43:a4:b7:3b:7b:2b:3b:
                    45:8a:5d:64:e1:f0:17:31:53:b2:08:17:a1:26:1f:
                    cd:21:28:37:3f:40:f2:f2:c0:2d:3a:4a:89:b9:6e:
                    37:7b:93:4a:4d:3b:da:4b:b7:3b:68:92:2d:a8:5c:
                    0d:ad:ba:99:0e:a9:83:87:98:53:91:4e:9b:c7:d1:
                    47:fc:83:3f:55:1e:18:3a:43:21:53:5f:69:c8:bd:
                    e0:c7:aa:f8:47:d5:03:96:04:9e:67:18:79:2b:d2:
                    85:ff:1e:16:c5:78:bd:3c:11:59:c2:4f:72:c6:86:
                    2e:c4:47:f7:cc:bd:02:79:5d:ed:ff:12:ef:6b:95:
                    21:0c:04:de:91:d1:ed:f9:c0:83:cc:ab:16:32:3e:
                    33:d8:0d:fb:2a:fe:90:c8:56:85:71:06:01:bc:84:
                    f3:0a:5a:24:8e:32:4f:b8:2a:91:b6:26:eb:52:c8:
                    d8:31:62:a1:63:93:33:5a:3f:98:53:34:15:26:b9:
                    d0:05:ae:4c:f7:4a:ad:37:e3:a7:b5:1e:b6:46:16:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:20:97:A9:9B:E7:54:50:86:E3:59:8A:B2:77:7C:A8:2A:C6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ecf93550-f07a-3473-911d-90e1b9fad9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:66:03:f2:1f:fd:01:86:24:6f:64:1c:d6:a3:e9:df:7c:
         e3:0f:9e:2b:bc:19:f7:46:88:d4:cb:a7:62:8d:ac:00:13:1a:
         79:2d:74:12:c5:9f:f7:12:87:47:fd:77:f1:54:c3:15:39:33:
         b3:28:57:3c:48:a2:b1:4d:3c:e0:73:92:f1:46:c3:b9:dd:7f:
         11:c7:16:a5:ff:91:10:39:d0:63:83:37:40:30:6a:b2:46:41:
         e9:87:9f:ed:e4:ec:d9:d9:89:87:96:7d:b1:6c:4a:e7:53:52:
         de:c2:55:f1:db:8b:f3:4d:c5:d1:10:c5:e7:96:36:a5:39:74:
         24:ed:12:1f:33:cd:bc:25:5e:4c:49:fb:a0:53:7c:9b:e2:70:
         8f:f8:78:39:56:4c:1f:bb:ae:2a:3b:d8:60:a1:9b:d2:24:e1:
         49:52:f0:3f:02:a6:22:71:34:b3:8f:17:88:be:74:5e:15:eb:
         62:18:6a:20:3b:ba:f4:8f:6a:54:73:22:36:73:cb:14:31:18:
         ae:0b:f2:25:ee:0b:9c:a7:af:2c:61:fd:ee:d1:c6:33:a3:e7:
         cd:c8:57:e8:6e:33:0a:26:95:fc:61:6d:b3:1c:8b:48:6a:2d:
         7d:95:0b:f0:b4:38:df:70:01:af:98:8b:a6:7b:df:cf:50:48:
         11:32:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:06:03 2024 by rpki-client on console-ams.rpki-client.org