Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa
File:                     1c7fd5e1-f386-333a-b550-2f8973624be2.roa (raw, json)
Hash identifier:          wuxJ1o0X3dCK9yXd1CYrbrjAF51C1gf6yqkHmhYtarg=
Subject key identifier:   70:85:4C:8E:F1:A8:DC:CE:15:EC:E1:A9:A2:48:45:2C:0A:22:49:3C
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F43285847792BACB567963DD654BB1600
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     55562
IP address blocks:        153.46.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ac:b5:67:96:3d:d6:54:bb:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=37b92781-2158-4cdd-82f7-810c8f822e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:9c:18:19:0b:13:ee:2b:cd:da:e0:97:63:
                    72:46:04:a1:cd:0c:dd:37:d0:a1:96:a9:28:ef:b0:
                    a9:85:4b:7b:d6:85:9d:34:f1:98:24:fd:8f:0b:22:
                    65:b2:a9:1a:a3:9e:f1:7c:55:d4:4d:8b:81:12:c4:
                    c1:2c:fa:dc:7d:2b:ec:ab:7a:73:b7:87:76:6f:af:
                    2c:92:16:46:c8:0a:4d:6b:b0:f0:a1:7d:c2:74:6e:
                    6e:74:11:d3:4e:17:18:a1:b9:73:80:14:28:f9:4d:
                    0e:5c:08:fd:84:0e:b0:cc:9d:cd:c2:ca:0e:1d:9f:
                    0f:8d:c1:0c:68:80:66:12:b4:52:1c:05:63:a9:99:
                    04:22:7e:1e:fb:04:c8:b6:0a:2a:1e:e7:17:7c:9d:
                    a0:e7:9d:53:56:34:c2:d3:be:6c:07:cb:11:7a:85:
                    46:9b:09:4d:7f:57:90:f4:9c:51:1b:c4:35:99:f0:
                    b6:34:63:f8:a0:cc:c7:1d:1b:4e:7e:41:c9:69:2f:
                    71:93:2a:cd:a1:fc:19:b6:d0:9b:ea:c3:a0:76:9b:
                    78:58:13:30:73:5a:09:ad:6c:21:85:6f:91:05:77:
                    92:32:90:62:dd:ec:a5:e3:cf:90:5e:8b:45:c2:26:
                    88:08:92:ba:47:99:c8:b5:bc:87:33:7a:f0:c6:85:
                    c6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:4C:8E:F1:A8:DC:CE:15:EC:E1:A9:A2:48:45:2C:0A:22:49:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/1c7fd5e1-f386-333a-b550-2f8973624be2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a5:2e:6d:19:64:51:cb:22:e0:b5:47:52:18:83:5a:b1:6c:
         95:83:68:52:2c:b9:77:ea:84:3d:c6:b0:6a:09:6a:e4:96:5e:
         d5:89:52:82:7d:fe:8a:59:64:f6:6a:04:41:f2:02:4f:b5:17:
         9c:69:63:03:2c:c5:a8:72:94:db:b7:5a:9b:d5:68:b0:56:3c:
         f1:5b:f6:bf:9c:0a:8b:b7:4a:94:b8:54:9e:94:d5:20:5c:7b:
         f1:82:21:51:5f:7d:c0:5e:6c:d5:79:9f:a7:eb:87:18:fb:2f:
         92:f4:4c:93:9f:4c:ee:ab:be:93:65:57:15:0c:4b:28:06:74:
         8c:2b:b0:9f:c3:6e:12:3b:c3:88:51:6a:60:60:54:2d:96:0c:
         4e:72:7c:8d:df:c9:59:36:69:73:95:29:87:3c:9e:b9:0c:c8:
         b3:e2:35:a2:79:aa:d3:81:cb:e2:1f:92:5e:c1:a4:9a:03:5e:
         39:92:10:68:32:a3:3f:d2:5e:c5:53:0d:ab:2b:18:26:be:f6:
         f6:60:17:2a:99:e0:b1:14:20:2d:9b:10:f6:09:c2:17:b5:3c:
         4f:d9:b0:89:df:80:be:0e:cf:d1:4c:37:cf:cd:7e:c5:fd:23:
         c4:bb:ba:cf:ec:af:b1:51:43:cb:8f:21:c6:b6:ad:38:bb:f5:
         b2:3e:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org