Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa
File:                     8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa (raw, json)
Hash identifier:          ZIx6jLUfiGwlJJb4sfFqS7ceNVwRkIobYTjonOjuxwM=
Subject key identifier:   16:88:61:B9:C4:CB:7D:91:0A:DA:2A:DE:D0:B0:EF:0D:49:52:36:2B
Certificate issuer:       /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
Certificate serial:       010D0C9F4328584787212971B06294FFFF4E2AC0
Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     23154
IP address blocks:        148.164.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:29:71:b0:62:94:ff:ff:4e:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=e99cfd38-75c9-4c65-97a7-61b84b56fc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:ad:31:4c:29:58:ef:2b:13:69:f2:4e:c4:
                    f9:c9:09:cd:f9:bc:47:5f:0b:a5:31:52:ef:90:37:
                    fe:08:12:14:06:6e:cf:86:27:6b:0d:2c:e4:db:11:
                    64:08:9f:f8:92:3d:67:68:6f:82:cc:8e:2b:7f:fc:
                    20:35:5d:e6:9a:9f:d2:00:45:a1:a2:ef:4d:5e:3a:
                    00:42:36:96:89:56:f5:66:ec:56:3a:fe:20:4e:aa:
                    b5:09:be:a7:88:5d:5d:f1:dc:6f:3d:be:bf:12:25:
                    9d:40:6c:53:fa:f3:83:b5:b7:0d:af:56:58:ab:05:
                    6d:17:ff:e8:af:7d:b1:38:de:95:a4:e5:b5:5a:26:
                    61:85:7d:78:c9:56:f6:4b:a5:c8:9f:6b:57:31:01:
                    f1:fc:73:77:42:ed:0f:4f:ff:ed:33:af:48:a2:4a:
                    ae:99:31:d9:49:a7:f2:1e:6c:f6:6e:8c:4d:47:ac:
                    0c:cd:79:6c:0b:e2:d9:da:77:d9:dd:22:81:c4:5e:
                    94:82:27:cd:26:ab:f4:70:ab:46:a3:d9:c7:d2:a6:
                    d1:69:26:60:1f:cf:04:00:36:01:79:56:3e:2b:36:
                    07:b9:20:eb:c5:b4:b0:ec:4b:c2:b4:65:9a:30:88:
                    f5:f3:24:8b:91:9a:33:a4:3c:ab:a1:f4:75:28:ca:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:61:B9:C4:CB:7D:91:0A:DA:2A:DE:D0:B0:EF:0D:49:52:36:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/8c91d621-a279-3ec0-8c4c-1b26490dcd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl

            X509v3 Authority Key Identifier:
                keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.164.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:62:d5:05:7e:27:41:46:04:a1:0b:7f:a6:5d:04:73:a4:13:
         d0:c6:4a:64:5e:b1:52:e4:33:94:9d:27:50:36:07:a6:90:f3:
         78:74:4c:c4:b1:b8:e1:be:87:ad:d9:d1:4f:a3:4f:2d:b3:6d:
         9a:2c:9f:16:7d:82:12:c6:fc:84:2d:93:76:f2:b8:1c:29:ad:
         58:d5:14:85:b2:11:6a:a8:32:b3:cb:9b:cf:51:db:14:bf:46:
         eb:ea:c2:0e:77:ba:0e:37:38:fc:02:65:f7:f7:ea:bd:ff:26:
         d0:45:62:de:9e:33:de:50:9b:be:36:3d:19:c8:a3:54:f2:3a:
         be:42:7d:93:34:90:f0:55:aa:b1:21:5a:a0:ab:96:12:68:35:
         65:ec:08:b9:bf:e3:a1:a7:8b:0a:72:a5:3d:10:1a:d3:78:4b:
         b5:2b:0f:dd:bf:f5:42:ae:4f:d1:55:c2:e0:38:b3:b4:c9:c9:
         44:08:d5:83:30:6f:c2:21:93:09:cb:f6:d6:09:da:06:12:e5:
         0b:c5:3c:5c:3c:ba:8c:3e:16:1f:ea:5a:d9:53:cc:09:95:be:
         d5:f0:10:f9:da:8a:8b:7f:d9:66:f1:f5:59:0e:26:ff:ea:cd:
         0b:4f:f9:d2:be:18:80:b6:49:b0:41:86:59:f5:f7:1b:ef:1c:
         56:ef:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org