Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
File:                     fc284e26-d2d1-3655-a308-af31001c9c53.roa (raw, json)
Hash identifier:          4jCl4UeT4z/XvhbV3oAqoxRSyjn4TWCs6RqEOkn9M1k=
Subject key identifier:   08:38:87:D5:9F:2F:AE:38:25:E5:FD:5E:AF:1A:14:CA:CF:D8:24:FE
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285847AB6C10700B9D595CAF409C80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     5769
IP address blocks:        173.176.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:10:70:0b:9d:59:5c:af:40:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=0030a5b8-1d4e-458b-a658-41e5985307da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:b9:ca:f5:12:8c:28:de:2e:b6:da:3f:85:
                    c7:06:d8:9b:18:a5:1a:7e:ad:22:b7:bc:11:6d:72:
                    06:0b:a5:bb:62:e2:b4:1e:39:df:5f:52:3a:f5:57:
                    ab:96:13:55:4e:ee:20:90:8c:70:9a:cf:63:a4:5c:
                    d4:83:cc:cd:a3:6a:85:da:58:fe:e8:55:00:8e:f4:
                    6a:42:a7:05:d9:8d:71:b3:cc:b0:4b:11:fd:d2:2c:
                    e9:00:6b:03:3a:38:01:47:e1:89:4b:68:d5:c0:0c:
                    86:5b:d9:fc:df:91:03:47:2b:3e:d5:7a:02:18:45:
                    bd:78:47:d9:bc:12:76:8f:b4:4c:24:2b:de:74:7d:
                    32:a8:4a:90:7b:53:91:52:5f:61:48:b9:03:d6:cf:
                    ac:4b:8c:7b:4b:19:fe:58:b6:21:0e:8a:65:2c:7e:
                    d3:1d:3a:dd:fd:20:38:32:6e:20:56:4f:60:2d:17:
                    e5:ba:8f:34:7e:e5:91:b3:f4:f7:86:03:5c:21:dd:
                    e9:76:74:15:e6:ef:9e:89:fa:ca:35:06:ff:ed:d7:
                    9d:73:b5:ef:7e:ae:19:ab:4b:2a:80:65:a5:53:fc:
                    da:a1:9a:ec:c1:44:f7:91:e9:49:55:cf:c3:8c:aa:
                    8c:ea:ef:fa:93:6e:5c:d2:bd:3b:4f:47:bb:af:e5:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:87:D5:9F:2F:AE:38:25:E5:FD:5E:AF:1A:14:CA:CF:D8:24:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/fc284e26-d2d1-3655-a308-af31001c9c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.176.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:83:c3:44:a2:bc:f7:6b:74:a6:12:dd:cc:16:4f:bd:3f:
         ec:f2:4a:50:a4:5c:c7:12:7e:1d:8b:af:df:db:44:dc:a6:1e:
         68:9b:14:3e:9c:83:b9:89:19:29:15:e3:39:f6:2a:87:31:1a:
         dd:84:c5:8c:a1:76:18:14:94:5d:b6:5b:60:73:12:90:b3:6c:
         0e:b8:82:4c:7a:b4:58:92:1b:2a:0d:60:3f:e4:e6:5f:23:f2:
         db:cd:ef:23:cb:78:7e:e3:18:09:a3:e7:73:62:08:6e:a1:22:
         f9:f8:38:44:71:3a:98:bf:3c:07:fc:60:b5:4b:35:35:93:72:
         e2:df:61:5f:13:fd:67:6b:c9:31:96:31:1f:d4:12:0c:e0:3b:
         5f:08:69:6b:47:df:9c:72:fa:76:51:a9:53:99:c0:0d:80:38:
         a6:35:30:d3:dd:ef:21:91:3e:e4:be:36:34:4c:85:11:3a:1c:
         0f:f0:2f:d8:90:8a:c1:ce:a2:aa:c7:1d:99:7a:7b:00:9d:30:
         54:71:56:60:b8:53:6b:2f:15:0e:96:68:03:82:34:2e:52:3c:
         e5:c7:57:15:10:19:5b:7d:5c:c4:35:e8:58:00:84:fa:4f:0f:
         8c:df:9d:96:69:a7:13:49:d2:f7:4b:27:a9:cb:b6:8a:da:aa:
         a0:7d:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:10 2024 by rpki-client on console-ams.rpki-client.org