Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa
File:                     92b92da0-8eaf-3821-81eb-7969dd0e6741.roa (raw, json)
Hash identifier:          IOt8KsvJV2KHnEveZ5nuYrONo/GD/h30OGj16ErjLOQ=
Subject key identifier:   5D:86:0C:79:BB:25:8A:82:5E:DE:B7:A9:D6:7C:46:85:FC:B1:D5:3D
Certificate issuer:       /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Certificate serial:       010D0C9F43285847D999EC49D876373C02F54080
Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     16509
IP address blocks:        168.86.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:ec:49:d8:76:37:3c:02:f5:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=a6936b66-ac86-42d2-b309-dd7cbaffd669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:21:a6:dd:24:2f:fe:87:fa:12:c0:0b:5c:
                    b0:9a:16:28:ff:d3:2b:dc:d0:bf:3c:44:16:bb:69:
                    f9:b3:8d:72:da:a5:59:b0:c9:a0:6f:3f:3a:43:19:
                    d7:df:7f:06:28:a5:ec:58:e9:f2:9a:6e:76:92:ff:
                    4b:a8:11:35:e2:69:29:57:9c:3f:b1:4f:e8:6c:f5:
                    84:b3:98:59:e2:b1:99:19:e8:55:10:99:62:3b:a9:
                    6c:a3:54:f3:52:60:66:e5:f9:a6:ed:de:7a:4e:cc:
                    73:16:68:23:9b:f3:4c:99:3b:ec:c8:86:62:4c:d7:
                    6c:de:53:2c:fe:09:f9:f9:84:d0:36:e8:e2:95:e0:
                    af:a5:67:32:58:dd:fd:63:a1:a1:ec:fd:00:28:0e:
                    04:fd:16:f9:d7:51:d5:81:a0:a7:c3:43:65:d6:46:
                    de:9a:ca:04:12:cf:ff:80:c8:8a:bd:18:74:70:e0:
                    1c:ac:57:98:60:4f:90:4b:a1:a5:70:2b:56:4a:d2:
                    3a:59:89:79:b4:0f:4d:a1:2e:a8:7c:4a:12:d9:1e:
                    f7:77:ee:e1:17:21:af:08:a2:35:dd:35:19:11:04:
                    f8:78:d0:43:b6:ac:e9:8a:ca:50:59:ed:10:b1:a2:
                    89:b0:c8:1a:0c:a3:7f:4e:59:5f:3b:cd:e1:20:81:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:0C:79:BB:25:8A:82:5E:DE:B7:A9:D6:7C:46:85:FC:B1:D5:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.86.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:1f:ab:d1:55:84:4e:72:af:3c:75:24:6b:1d:6c:9a:5a:
         14:d5:4c:3f:8b:28:50:08:b1:75:bb:5d:a6:4b:2e:f3:2b:85:
         ff:10:a2:12:23:ca:99:70:6e:62:1b:0c:e9:08:da:bb:c1:47:
         cc:fa:4a:82:6f:47:64:b7:0f:ce:c2:91:ce:d5:dc:c1:a6:dc:
         f3:06:30:81:c8:a7:cd:62:d8:3b:44:d0:8f:3e:9c:87:29:2c:
         f1:c4:8a:ef:26:9d:59:00:56:85:9f:d4:1b:f5:ba:74:9e:61:
         66:98:e3:e3:7c:3f:93:1b:19:41:c6:cf:a3:0e:e7:fe:ea:c1:
         3c:cd:4e:bf:59:4d:ed:39:c4:9d:2e:83:f6:da:40:92:5c:3c:
         29:52:53:49:d1:7d:f9:91:22:34:82:75:92:d3:21:7e:54:6e:
         6a:08:44:86:52:42:83:60:c0:9c:c4:b1:69:76:14:c7:f0:ab:
         ba:7e:9e:42:d3:c1:2b:0a:8a:93:41:b6:65:08:1e:c2:75:72:
         99:b8:68:32:67:eb:f4:1d:42:80:eb:d8:46:e5:a8:3f:2c:57:
         71:41:a1:9c:92:08:ad:8b:be:cf:f4:26:b1:96:cc:f7:a3:dc:
         72:a7:47:72:c7:7e:36:a5:2e:d4:5a:e5:12:2e:e8:d2:9f:7a:
         fd:c0:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:20 2024 by rpki-client on console-fra.rpki-client.org