Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa
File:                     12a8c028-198a-3a51-beee-1da8945080cb.roa (raw, json)
Hash identifier:          6Dh9iuwlwVRSLdgYJgwJ67fKnX6U76hT5UQy3m5J2NA=
Subject key identifier:   1E:B9:51:40:13:3F:73:CE:03:25:68:58:05:39:58:92:9D:AE:95:5E
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285847B96177B0B328E6FECBC2AF00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        192.161.158.0/24 maxlen: 24
                          192.161.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:77:b0:b3:28:e6:fe:cb:c2:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=aaf53790-625d-4db2-bb6d-dc31a96b0bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:7b:9d:8e:b4:bd:66:c6:4e:59:d7:be:9d:
                    ed:72:53:19:7d:a1:84:d3:0d:b1:06:60:7f:d5:7f:
                    95:50:56:0f:49:f5:8e:fa:d4:f1:82:5c:8f:db:e8:
                    a2:c9:3a:2a:52:bd:c5:79:e9:da:60:21:52:62:2c:
                    3f:93:85:83:f7:58:4f:53:0b:72:cd:aa:54:45:a1:
                    fe:18:15:ea:c8:db:a8:0b:90:ab:a3:14:f0:76:35:
                    b5:8f:6a:c1:75:43:2e:9a:84:93:72:76:4d:cf:cb:
                    72:52:02:2e:72:87:c8:99:4d:b1:38:85:57:3f:85:
                    77:c9:e1:87:db:2c:ed:d2:df:18:53:27:7d:76:4f:
                    d9:43:9e:95:c7:25:28:c3:06:2e:84:ed:63:cf:79:
                    c5:a4:1a:77:56:ab:b2:c7:67:75:62:6e:2b:f3:39:
                    d3:98:01:6d:76:ad:c0:7d:a6:d1:f0:d6:a5:fd:92:
                    de:db:40:39:61:5c:9b:6b:58:a0:7a:d7:52:95:35:
                    af:e0:95:e1:62:6e:e8:bf:8b:d5:58:78:0d:af:ce:
                    f2:2b:91:d6:ee:d8:4d:16:0f:6e:b9:69:f4:79:85:
                    fc:f6:b3:7b:7a:7e:a7:e4:a7:79:9e:48:b0:1d:b8:
                    93:27:22:4e:86:8f:ee:00:fe:43:bf:58:b7:cc:4f:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:51:40:13:3F:73:CE:03:25:68:58:05:39:58:92:9D:AE:95:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:03:c5:e5:8e:66:92:05:ed:4f:d9:cd:86:e1:6b:6c:84:dc:
         a0:f0:c5:0b:2b:cd:d7:13:43:30:2b:eb:10:a5:42:76:3e:5e:
         5c:3b:dc:8f:98:c8:71:d7:60:78:24:91:f5:14:f8:73:83:df:
         86:a9:45:9d:c3:44:0e:c3:03:d7:50:25:c9:e7:0d:14:d3:df:
         05:c1:5a:a0:a3:87:59:d7:75:e9:77:54:bc:3e:f4:21:44:79:
         74:6c:3c:b8:29:2c:e7:18:14:bc:02:be:00:c9:17:d0:91:20:
         fb:dd:02:89:56:3e:c2:90:75:55:7b:ae:05:a2:71:4a:52:ae:
         b6:0c:37:bf:1b:62:ce:e8:34:c8:88:1f:12:4a:18:45:30:94:
         00:f4:bc:2c:57:a6:0b:ba:41:b7:75:e3:28:27:4f:46:1a:ac:
         81:63:2e:ea:1b:32:5e:3d:84:39:92:15:70:7a:0d:30:54:22:
         5a:f5:12:3c:bc:f7:c9:ae:72:4b:c5:90:08:32:ee:5b:66:fe:
         7c:2c:1a:ef:44:fc:f3:0a:8d:01:24:cd:9a:02:31:19:65:80:
         26:59:2c:a6:6a:42:84:10:ce:99:55:2e:10:f9:48:21:48:b4:
         a4:b6:5a:b9:f7:6c:9b:03:cc:5f:78:db:cf:ab:10:04:4d:a9:
         2f:e8:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:04:25 2024 by rpki-client on console-ams.rpki-client.org