Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf597883-1ced-3965-b999-ef76f3227d0c.roa
File:                     cf597883-1ced-3965-b999-ef76f3227d0c.roa (raw, json)
Hash identifier:          zqJVBBpO3snmVCR7qfuETV6iwxK+keKNbwST1fDdWto=
Subject key identifier:   82:BE:05:E3:EB:4E:80:D9:F7:E4:30:1C:81:6D:B5:E8:FA:F1:78:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858477EC889F5F536991E3CE61580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf597883-1ced-3965-b999-ef76f3227d0c.roa
Signing time:             Thu 10 Oct 2024 13:15:52 +0000
ROA not before:           Thu 10 Oct 2024 13:15:52 +0000
ROA not after:            Wed 08 Jan 2025 14:15:52 +0000
asID:                     2914
IP address blocks:        172.121.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c8:89:f5:f5:36:99:1e:3c:e6:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 13:15:52 2024 GMT
            Not After : Jan  8 14:15:52 2025 GMT
        Subject: CN=1f62e41f-0fc4-4d46-b4ef-4d4621a585c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:50:35:54:f5:a9:b6:e0:70:06:d1:48:65:
                    71:bc:81:d6:9b:f5:56:1b:e0:e3:69:c9:60:45:68:
                    26:76:e1:c5:58:10:b0:de:0d:a5:6a:e4:9d:e8:1f:
                    c4:70:06:91:7a:f3:ec:64:4c:0b:15:94:f2:ec:5f:
                    04:22:1d:57:c2:40:4b:21:78:75:21:b2:c2:ae:b3:
                    6c:a1:54:72:e6:c7:8a:15:1b:05:34:41:b6:f5:fb:
                    4a:60:ed:4c:0c:c8:84:d0:07:9a:f4:fa:20:99:3f:
                    72:b9:38:e4:3d:22:f1:9c:82:c2:28:b2:d1:56:b4:
                    91:b1:8c:6e:3e:ea:c7:bf:f9:49:90:0c:8b:4e:83:
                    f4:3e:4e:08:a6:1c:c8:92:03:67:bb:c2:af:40:92:
                    e1:0b:9d:ba:ae:ac:72:62:4e:67:58:92:50:8b:52:
                    04:a0:3e:78:eb:69:a4:ba:3d:f0:05:7e:9d:c4:c5:
                    a3:7a:89:6c:72:81:fd:71:29:06:0d:1e:5b:09:42:
                    8e:a2:0c:9b:04:9e:74:e5:a3:85:5c:d0:1b:d4:9f:
                    fb:0b:01:03:65:50:bd:20:83:eb:ce:6e:be:d4:86:
                    53:3c:f9:35:72:20:d3:dc:8d:12:97:93:34:d0:46:
                    5a:31:5c:24:c3:e3:3e:3c:46:ca:f7:7c:8d:40:28:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:05:E3:EB:4E:80:D9:F7:E4:30:1C:81:6D:B5:E8:FA:F1:78:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cf597883-1ced-3965-b999-ef76f3227d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:4d:79:94:7b:83:5f:e1:ea:87:05:e1:38:19:44:e1:11:
         5b:74:13:f8:37:39:de:34:5e:db:36:fa:45:dd:4e:a3:11:75:
         79:7b:ca:f6:91:71:68:4c:15:0e:ee:31:dd:03:2d:92:ad:74:
         12:c5:00:d1:5f:e2:96:72:cf:d9:1e:de:d8:bb:96:da:a8:35:
         37:94:61:72:27:a9:e7:b8:9b:0d:47:bc:d8:17:81:fd:77:04:
         f1:46:ac:1b:e4:c6:46:d8:ee:b0:a0:48:e0:c1:50:31:87:ae:
         a3:96:d2:3d:c7:e0:53:07:e1:2b:75:e6:8a:ed:b4:6d:7f:e9:
         2a:c0:5b:51:9f:47:e8:9b:f3:ad:fa:67:8f:bc:fe:a7:ab:d7:
         77:94:32:c1:bc:d8:ce:55:ac:4e:e9:c6:a6:dc:4e:29:02:2e:
         d4:65:7b:38:6b:ec:79:86:50:f4:31:a3:84:80:d9:8f:e6:88:
         b1:00:7d:da:19:c6:40:39:22:03:7a:bd:60:6f:67:48:4a:fd:
         b6:fd:51:6d:28:e0:83:1c:eb:7b:d6:66:ef:18:8d:b8:b1:77:
         b4:b7:b6:58:45:01:d2:e7:fc:1e:b6:c7:e2:e7:f9:ab:9b:51:
         a7:10:4f:1d:f0:3b:c7:62:79:84:0c:c9:f8:77:29:92:83:f5:
         a7:c6:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:38 2024 by rpki-client on console-ams.rpki-client.org