Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
File:                     f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json)
Hash identifier:          xPiUdP4coAG+kePTgXZO9/1VUNcZVp+w6G8sKBhKMqU=
Subject key identifier:   4B:DB:CE:01:ED:C5:48:C2:62:66:61:55:52:82:0A:EA:9B:2F:D5:84
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858478CB685FB2838A69127FAE280
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     22267
IP address blocks:        208.118.228.128/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:85:fb:28:38:a6:91:27:fa:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=b3b26bff-d2e0-49b9-bea2-e56fc4cb72ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:f9:e3:b7:5f:bd:cf:c1:03:e9:7d:56:b9:
                    f9:74:30:f2:18:b0:a5:df:f5:61:f0:62:4b:7f:02:
                    aa:f6:d8:3a:bc:5b:01:51:2a:20:35:66:b6:1f:66:
                    25:e1:d3:ce:4a:6a:84:90:86:5b:20:a1:80:c9:7c:
                    9f:1d:d8:0a:78:0c:ec:32:e9:8f:8c:6e:37:45:d5:
                    f8:a5:c8:51:3b:3a:75:e2:65:31:b1:86:b5:5e:5e:
                    df:c1:72:e8:66:ad:4d:30:32:cf:54:78:82:49:18:
                    f2:61:af:82:35:2e:6a:c8:32:d6:03:6e:ea:c3:cb:
                    fa:14:be:a2:7e:1a:56:28:c3:16:ae:2b:e3:91:0c:
                    b1:09:3a:44:49:fd:79:1a:f1:63:bc:eb:e8:41:e2:
                    e1:5a:ed:9a:b9:e3:8e:b0:ae:80:e5:98:44:e3:4b:
                    4a:a2:4c:19:db:5e:a6:60:73:8c:5c:29:da:67:37:
                    ad:ad:2a:4b:0f:53:76:a5:08:b0:9f:60:dc:56:4b:
                    fc:d3:e8:a8:dd:67:79:3b:2e:9b:7b:ba:f0:0b:bb:
                    0f:85:05:2a:a4:b8:bc:09:60:d6:29:a4:d9:d9:eb:
                    18:b9:15:34:e1:60:f1:f3:33:ae:c1:6a:27:67:83:
                    6a:a2:25:97:96:08:f3:2c:c8:fe:42:19:eb:71:03:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:CE:01:ED:C5:48:C2:62:66:61:55:52:82:0A:EA:9B:2F:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.118.228.128/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:37:cf:1e:21:ba:27:11:21:eb:78:5c:2b:74:31:3e:21:28:
         e0:89:2f:59:98:88:c8:fb:f9:94:52:a5:28:0e:c4:a8:85:04:
         c5:b5:49:e4:08:bc:af:4b:0c:6a:90:02:cb:f7:73:a6:c2:c5:
         8d:69:d1:fe:af:5c:d7:fb:0d:b1:2e:de:85:d1:c0:23:ab:7c:
         93:b0:e0:9d:95:30:94:7d:2a:61:22:7d:d4:f5:11:13:e1:5c:
         fd:1e:7a:9d:e6:5d:28:df:7c:a1:09:a9:50:ca:c9:ed:ef:c0:
         57:28:24:71:1f:52:84:53:73:35:36:a1:05:d9:37:9e:74:28:
         e5:01:ac:a4:3c:fd:93:ea:18:2e:00:3c:1f:a3:3b:b5:f9:5e:
         e6:5e:8c:aa:4c:c5:d3:ca:fd:62:17:6c:12:dd:d8:96:f6:f5:
         47:e5:fa:a5:f6:49:aa:ed:0b:57:68:56:84:bf:02:0b:19:f2:
         20:a4:63:33:8c:1b:a7:5b:f3:5d:a7:11:d8:21:74:80:c8:a0:
         ef:fe:e7:12:53:24:39:b0:a0:f1:f9:44:f8:54:29:cb:88:08:
         c5:60:03:6b:af:69:47:84:8a:fe:2d:69:37:88:75:da:0f:81:
         29:41:3e:0b:94:59:eb:34:dc:bd:8d:1f:85:f9:93:95:ba:46:
         2d:b5:74:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:51 2024 by rpki-client on console-fra.rpki-client.org