Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
File:                     7e20aedc-cecf-313d-b417-d44a44035c5e.roa (raw, json)
Hash identifier:          PDltr6CzDza7f+DRWWx3UvBdX7yQwNRdTVPruz7W36E=
Subject key identifier:   00:11:3A:57:75:FE:85:9E:55:5F:93:05:61:38:66:C6:9F:6D:66:65
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858473A5B906468B249EE664F85C0
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     394089
IP address blocks:        165.85.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:90:64:68:b2:49:ee:66:4f:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=57f94926-8ef2-40ce-aa65-63541ae379e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:aa:bb:db:81:b7:f7:b0:df:ed:1b:e6:fd:
                    45:16:cb:8f:98:5c:b3:32:58:ef:77:d7:29:6a:97:
                    ae:80:a6:d1:14:bf:8e:9b:aa:ce:ca:de:26:02:2a:
                    2d:61:90:c3:71:8d:8f:e8:ba:07:4e:2a:6a:73:52:
                    5b:ff:56:bc:26:11:2d:cd:2e:49:c9:4d:09:bf:9d:
                    01:62:4c:7d:af:07:be:b8:02:9e:36:09:d6:d7:d3:
                    1a:e7:51:78:af:ad:50:74:49:60:f9:8d:bd:4a:5f:
                    1e:a6:3c:63:77:f0:91:10:0e:ae:d3:41:49:c7:f7:
                    52:f5:b4:1c:53:ab:07:a9:bc:e6:d4:94:a7:98:54:
                    c8:42:c3:10:12:71:67:90:0f:16:40:88:d2:cd:86:
                    00:62:9f:75:14:cf:ba:d9:27:b4:ce:75:fb:44:f4:
                    8c:e6:23:04:8b:33:ae:72:75:1e:20:3f:59:de:4d:
                    b0:07:02:fb:e8:c1:5e:70:26:4f:bd:7e:d6:68:e7:
                    c9:38:98:c9:7a:92:fb:29:02:a1:62:a5:1f:0a:e9:
                    bd:9b:84:36:d6:45:2e:d2:b1:33:4b:e2:8b:82:71:
                    c2:93:58:42:bb:99:6c:45:ff:5d:39:3e:56:13:39:
                    e2:1e:4c:b1:ed:71:ef:77:27:81:9a:ba:05:9d:e8:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:11:3A:57:75:FE:85:9E:55:5F:93:05:61:38:66:C6:9F:6D:66:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/7e20aedc-cecf-313d-b417-d44a44035c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:7a:49:03:76:dc:90:e6:f3:f0:f6:f8:08:27:f8:ff:d6:
         40:9b:b6:63:da:49:d4:75:83:c5:9b:d4:dd:33:a4:a3:83:ae:
         64:7e:cf:1a:8f:3b:7c:db:ce:54:b6:c4:6a:e4:80:8f:20:7a:
         80:dd:09:8c:e0:87:37:fa:14:09:27:9e:7f:b0:4f:c1:c2:88:
         21:0f:5f:8e:94:b7:a1:d4:78:60:26:5f:ce:4a:f4:12:ac:1a:
         96:e3:83:c3:35:1f:12:a5:3b:91:c5:4d:f6:80:91:bb:d3:09:
         ea:b2:aa:be:a8:b1:ed:e7:55:45:57:2c:1d:71:70:9a:ed:1f:
         fe:64:3a:a8:8a:ed:0d:d5:53:80:54:95:6f:d7:e4:b5:b0:d2:
         ab:ab:c7:12:d9:cc:88:dd:2f:04:49:c1:e8:23:9b:bb:3a:93:
         c0:4e:26:8b:37:52:63:a4:b3:f7:5e:5f:84:e3:c2:a5:2b:d0:
         b0:10:a6:d3:1e:aa:0f:60:e6:25:bf:6e:e7:19:41:37:4b:1e:
         29:62:59:e4:eb:b1:87:26:1a:41:b5:44:ef:13:fe:aa:49:c9:
         4a:7c:c3:85:f8:94:95:d3:d2:01:3e:6b:01:39:e9:2b:c5:cf:
         86:15:e0:fe:ff:ea:0d:8d:38:10:72:88:a1:75:dd:bc:3d:0b:
         4f:9e:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org