Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa
File:                     d24168f5-a980-3a14-a89b-7351a9920158.roa (raw, json)
Hash identifier:          5Y5Lfbks4P1Gp0S6WivpReAG+8rzhJBOW1y1J7C/P4Y=
Subject key identifier:   4C:27:3F:BF:75:4F:A8:DB:C8:EE:2D:F7:F6:2D:28:D6:90:88:12:E4
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858456C531A5EA563B03A7EC17F00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     22147
IP address blocks:        208.118.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:1a:5e:a5:63:b0:3a:7e:c1:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=5ee9435f-c8f7-40d2-8708-5f33ad905ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:c5:8b:ce:0c:82:e4:ac:9a:33:10:74:90:
                    49:16:a7:f6:f2:34:6a:62:0c:4d:1e:7e:b8:6d:31:
                    b5:2d:b2:ca:77:b3:85:c2:81:10:e8:87:c0:7e:d9:
                    83:5e:e4:f4:e5:8d:03:10:30:dd:7c:7c:ae:d0:c0:
                    d4:b2:17:21:75:d8:b1:86:c1:b2:3e:a4:e8:07:53:
                    25:24:9c:10:42:84:3b:31:8f:50:fa:86:56:c0:64:
                    dc:47:5d:f4:06:b4:ad:58:f5:9d:d3:9f:8f:c1:a4:
                    c6:78:9d:ea:39:3b:55:68:b1:2f:b0:e2:bf:be:d2:
                    8c:d1:44:b0:aa:85:bc:0a:92:92:fb:a6:48:d8:e4:
                    00:00:b8:ba:ba:ca:bf:1a:67:68:c3:d3:57:73:56:
                    33:e1:d8:0b:12:c7:a4:9c:33:27:d5:b2:c8:f5:5f:
                    5c:ef:f4:dd:d0:7d:28:9b:d1:65:a7:8c:01:53:6a:
                    a2:77:bf:fa:e5:13:71:d2:1a:8f:05:80:9d:e8:06:
                    92:8a:e3:b5:70:6c:de:9c:75:45:24:4a:9d:ff:0c:
                    c5:69:12:a5:a1:f5:de:34:e0:71:2b:29:80:3d:ac:
                    bf:80:ad:75:d4:34:6d:3b:de:d4:77:d8:c3:17:c7:
                    08:70:58:52:a9:29:aa:33:6d:e1:74:cb:23:b7:7e:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:3F:BF:75:4F:A8:DB:C8:EE:2D:F7:F6:2D:28:D6:90:88:12:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:c8:a4:5c:d2:92:c0:c4:8d:17:5d:5f:ae:18:32:fd:d1:
         80:25:91:ec:bb:64:5c:80:43:28:19:db:6a:5f:5a:5b:98:49:
         3e:9a:3c:68:03:53:13:69:fd:90:29:50:41:c2:af:9e:de:80:
         24:61:6b:f9:82:8b:4a:6a:f7:5c:65:b3:ba:eb:f0:df:3a:e2:
         2e:b7:0b:91:e8:d1:34:9f:96:81:e8:a3:0e:0e:c0:55:ff:c5:
         ea:e7:2c:7e:d7:62:20:bd:8b:be:3f:01:4f:15:20:db:e5:de:
         6b:43:ad:86:7e:0c:33:ca:7f:08:24:a3:7f:51:e5:5a:b2:4c:
         fb:b1:9d:66:02:4a:d3:c9:fa:e9:24:18:42:af:0e:8f:1d:cb:
         ad:c3:58:ca:36:64:60:a3:c1:f9:c1:5e:ef:ae:42:74:58:20:
         0a:c6:55:f5:8a:bb:f3:4d:ba:05:c1:80:78:84:c5:53:73:34:
         87:5d:85:36:93:a9:c7:19:6d:06:22:bf:9d:1e:6c:8d:98:6c:
         b6:f6:be:0d:f8:22:a6:9f:89:27:56:96:98:4d:1f:25:82:68:
         07:ed:9b:6c:6d:58:91:5d:5c:c7:e2:76:ce:09:68:4c:bc:d9:
         2e:1e:23:75:4b:64:f3:73:4a:1a:e5:31:95:ab:b1:2b:db:5e:
         05:38:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:16:46 2024 by rpki-client on console-ams.rpki-client.org