Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa
File:                     3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa (raw, json)
Hash identifier:          9HTkYqE3OOVkClos/VmjZ8errjE8PfQhCIfPYOvrdzw=
Subject key identifier:   DD:74:70:64:72:AB:2B:B2:F9:99:14:FA:7E:62:25:CB:AD:9B:DE:C6
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F43285847872129090E61175F0D561220
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:29:09:0e:61:17:5f:0d:56:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=00499607-753b-4673-b0a3-c812173945ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f6:9c:78:a7:b8:88:dc:af:04:cf:dd:df:08:
                    a2:b3:b1:d4:c4:7d:db:8b:3f:e9:7d:9a:5c:46:57:
                    61:7d:4d:12:e3:40:65:fd:aa:2a:d5:34:23:80:56:
                    48:f7:0d:b1:e2:0c:4a:87:79:5c:f1:e9:c6:74:9d:
                    15:3f:81:75:5b:a0:89:65:92:bf:02:4d:5f:05:30:
                    5a:58:c8:df:05:e7:2b:28:55:76:64:42:58:a3:72:
                    af:eb:85:5d:00:fa:f2:5c:15:53:44:57:c3:60:44:
                    0d:51:2b:ce:19:a2:9c:86:e5:88:bc:e2:71:b7:dc:
                    e6:82:ef:e3:72:54:e3:ca:a5:7f:f1:32:76:58:f5:
                    5d:be:ca:6f:ba:68:91:79:e0:92:28:7f:52:d2:55:
                    33:fe:c7:09:b4:57:7c:c2:01:58:49:37:b4:b4:6e:
                    a9:2e:cd:cf:9d:01:33:d6:c6:be:15:2b:51:a1:10:
                    3c:25:33:2d:82:76:47:99:86:79:8b:64:be:bd:05:
                    a1:2e:e8:28:f7:76:99:2e:f0:f8:ea:aa:f5:40:29:
                    19:40:27:ed:1e:8b:59:38:56:60:6c:1d:26:44:be:
                    97:d7:8a:d9:7b:ec:f7:00:0c:36:f0:e1:af:02:ea:
                    ff:50:a8:23:15:2e:64:a8:9c:31:fa:ec:9f:7a:c2:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:74:70:64:72:AB:2B:B2:F9:99:14:FA:7E:62:25:CB:AD:9B:DE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/3b0e4eb7-02b1-3861-8e88-4e8547277b53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:f9:1f:4f:7e:8f:9c:bc:12:23:63:8b:f3:c8:4a:5c:72:
         e9:48:4a:ac:ad:0c:48:1e:01:21:f7:5d:df:49:1f:40:d7:d6:
         42:1f:c9:6a:8f:e1:cc:14:e8:87:33:36:ad:5e:be:8d:c3:f2:
         74:56:d0:67:c0:7f:ee:66:37:51:ce:36:a7:29:d4:94:6e:7a:
         ab:73:16:47:eb:b7:be:54:55:70:50:e4:ac:51:6f:7b:ed:53:
         e4:fc:de:08:7f:f2:92:72:0e:ac:b4:02:c9:43:6e:7e:eb:64:
         c2:42:12:78:14:57:23:3d:b9:62:55:6b:36:33:f1:92:2f:36:
         c5:04:f6:47:cf:93:e0:17:0d:05:bd:61:55:f5:71:c2:82:b5:
         45:e2:4b:08:17:cd:09:a4:c2:d6:14:dd:43:a8:34:c1:75:41:
         56:b1:81:79:b3:37:f3:63:b8:e5:62:8b:82:fe:ee:9c:10:0d:
         c0:92:f0:b3:f9:a8:f6:27:2c:3a:0d:19:04:b5:b7:bc:36:57:
         3e:01:80:9e:6f:82:d6:1b:2a:39:6d:17:bb:61:f6:c2:e2:b9:
         10:7c:5d:b1:28:50:e5:32:20:d5:1c:14:2d:2e:87:a2:e9:ca:
         89:f6:55:bf:0d:ee:fd:d3:bf:f8:a0:22:a0:61:e3:cf:b2:0f:
         04:55:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org