Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
File:                     6cae7079-d82b-3522-9dcc-9c972fbd2758.roa (raw, json)
Hash identifier:          zok68E1/Vu9vnOVQ+e2PAzEQBlXBsJ+uRGLCnCVwNvI=
Subject key identifier:   4C:7C:4E:C1:4A:0E:65:D9:98:7C:45:1F:00:EA:C4:94:A3:97:89:62
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F432858473FF0961CD5D066DA33C64480
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     16509
IP address blocks:        192.161.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:96:1c:d5:d0:66:da:33:c6:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=c0fe64af-f7ba-44c1-b46c-5ecb2fd8f92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:43:ac:1b:57:19:28:ec:36:97:52:32:55:
                    6e:c9:4a:31:5e:62:f3:2f:6c:84:0e:34:4d:75:b2:
                    7c:83:79:bd:6f:88:6e:99:09:1c:62:56:e5:90:cd:
                    23:49:c7:2b:f6:37:41:1d:81:92:8b:c8:4e:b0:cc:
                    2f:54:4f:a5:11:fe:45:62:7e:a8:59:c8:6a:ea:38:
                    27:a2:ae:1f:82:1f:e6:79:ec:14:d7:56:9e:61:3d:
                    ec:ea:ab:bf:bf:c4:f9:8e:5d:ca:9e:4d:8a:cd:5d:
                    7d:28:f1:91:dd:c3:39:2c:fc:7b:db:1e:f8:49:f4:
                    c2:31:f9:0b:5d:56:02:bc:54:09:4a:f6:af:02:5e:
                    f1:1f:5f:95:34:37:2b:97:f4:3a:0d:e3:f4:87:a9:
                    10:4b:4b:2e:fe:1d:45:f6:6f:22:f5:d8:d4:65:a9:
                    2d:c6:b0:04:64:dc:db:89:06:4e:32:44:2b:a6:01:
                    7e:02:d4:a2:4d:d3:80:a2:b3:1e:ff:ba:68:4a:bc:
                    05:13:0f:05:c0:fd:2b:9f:47:d0:51:c7:a0:51:77:
                    2a:9b:c8:55:37:b8:35:02:65:7b:70:4c:b3:dd:8e:
                    5b:29:44:94:08:df:81:a5:b5:0e:02:ce:71:82:30:
                    f6:59:c0:f6:a8:82:6f:18:8e:ea:c2:77:88:f5:df:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7C:4E:C1:4A:0E:65:D9:98:7C:45:1F:00:EA:C4:94:A3:97:89:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:08:d8:f0:63:5d:c8:f1:e3:f6:69:c4:bc:30:1f:7c:9a:
         a1:b8:d1:5d:38:8d:ff:44:15:f6:3a:19:ba:15:4e:8f:f8:24:
         fc:b0:ac:89:5a:fd:bf:3f:f7:90:32:f8:f0:8c:19:bd:f4:95:
         80:12:25:2a:62:09:bb:05:93:9d:4d:80:f1:cd:92:65:b6:7e:
         61:08:f4:70:73:10:bf:1e:52:84:70:18:c0:f4:c9:ab:dc:e6:
         a1:f5:ba:df:0c:fa:7c:c9:8e:78:36:4f:33:4f:fa:38:cf:9a:
         c1:b0:8d:f3:2f:76:39:cb:14:04:bc:fd:0d:f7:17:73:28:84:
         c0:bf:57:41:bc:ca:12:7d:fd:64:ba:91:b5:25:c9:b6:00:d2:
         bb:ef:27:05:2c:d0:f2:4a:de:e1:cc:85:04:70:cf:b9:98:44:
         d7:7c:f9:0b:c9:2a:78:6b:49:e7:bd:bd:21:77:8e:90:7b:ff:
         50:13:2c:b5:df:0c:81:a0:e7:00:d1:1c:b2:db:e0:5f:4a:d9:
         cf:ff:e9:68:98:4d:51:c5:e0:4f:8f:90:da:37:53:50:ba:fb:
         af:aa:ef:bd:c9:9f:6d:fc:72:b9:fb:7c:9b:81:43:98:31:a6:
         f3:99:05:86:06:be:ea:3f:1c:82:a4:27:33:fb:23:2d:7f:da:
         4a:11:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:49 2024 by rpki-client on console-fra.rpki-client.org