Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8d0a4945-6aad-3c0a-9d3b-4ddd392d6eaf.roa
File:                     8d0a4945-6aad-3c0a-9d3b-4ddd392d6eaf.roa (raw, json)
Hash identifier:          tGP2ZEWZ+ZAIrXn9i+QXsCRPur4gnVslj1/XXHTsGHo=
Subject key identifier:   7A:5A:4F:57:7B:16:4A:69:5D:05:0F:E6:8C:43:3B:01:0F:88:A8:71
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E60DACB728D7D4B95AB9140
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8d0a4945-6aad-3c0a-9d3b-4ddd392d6eaf.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     29016
IP address blocks:        159.182.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:da:cb:72:8d:7d:4b:95:ab:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=57982b08-be98-4e15-9683-cf0dd644085e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:7e:8f:d7:97:e4:80:f5:4e:a7:70:50:e2:
                    1c:26:c6:9d:a8:50:f8:2d:30:ea:03:f0:41:7e:3b:
                    04:e0:e6:96:21:96:cf:e7:8c:1a:6d:99:ec:cf:c4:
                    e0:8f:4e:56:b0:bf:04:e4:89:f8:9a:23:3c:ce:48:
                    10:ce:29:11:14:d6:d6:1e:03:4b:26:75:31:12:0f:
                    f7:05:6a:e3:fa:86:71:b8:03:e7:ca:4a:5b:1e:37:
                    e1:05:70:c6:cf:a2:f8:5f:25:a0:4e:08:df:45:b8:
                    bd:1d:28:9d:ed:3e:f9:db:ba:d2:bd:84:3f:8c:33:
                    88:26:52:ba:14:86:b5:08:6c:7a:29:59:90:9a:98:
                    86:d0:f8:97:e3:d5:f9:97:de:77:74:bc:a8:b3:9a:
                    bd:48:a3:06:fa:cf:96:60:17:9b:39:a1:31:af:82:
                    d2:46:b6:a9:c8:be:c2:18:ef:3d:93:ed:9a:32:9f:
                    ce:4e:ea:4a:21:42:05:e8:b3:f0:26:d4:5f:48:d7:
                    64:cb:30:e5:d3:d0:73:c9:40:2d:3c:bd:a1:d9:c1:
                    9f:85:04:36:d0:73:5a:be:0c:7e:b6:3c:9c:68:54:
                    0c:7a:20:5d:1d:71:db:af:78:aa:33:28:77:4f:05:
                    45:5b:82:e0:fe:15:4f:3a:54:41:50:d1:1a:52:4d:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5A:4F:57:7B:16:4A:69:5D:05:0F:E6:8C:43:3B:01:0F:88:A8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/8d0a4945-6aad-3c0a-9d3b-4ddd392d6eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:b5:a7:8e:3d:1a:50:32:13:21:9a:76:f8:c6:83:18:8c:
         66:08:2c:9b:05:8b:0f:d8:b1:ec:bb:49:84:cc:c5:39:fc:aa:
         ab:a4:c8:99:ef:fd:1f:7c:c8:f3:9d:3c:fb:e9:b2:1d:d3:97:
         25:57:b5:03:4b:50:4c:f4:ec:fa:c7:62:99:89:f4:73:ac:10:
         3f:5e:30:ab:c8:98:57:7c:f3:91:29:f5:b8:08:9a:29:4e:8f:
         22:d7:50:4f:e7:3d:28:ed:5d:83:42:e9:95:c0:f4:c6:ed:89:
         a9:27:6c:ed:0d:9f:57:79:11:57:82:44:25:c4:32:f3:e6:4d:
         1a:02:36:78:ee:6b:33:5e:31:bd:9b:b9:dc:76:be:f9:55:98:
         d6:ab:3b:f8:16:cb:a1:81:84:51:2c:70:4f:e7:17:dc:bc:c4:
         fd:76:cf:32:39:b2:9f:4d:6a:af:7a:64:9d:8f:cb:5a:b2:d4:
         ca:79:2e:dd:bb:81:54:b7:d7:71:c9:d1:ef:e0:90:6d:fe:58:
         29:f4:39:87:0b:66:9c:35:01:bf:b1:3f:46:2f:06:84:3e:0a:
         7b:c9:46:e5:46:cf:49:d7:7a:f9:f4:99:fd:ed:ee:37:57:3d:
         22:26:71:f9:d1:03:e9:e3:81:11:81:81:33:6f:0f:67:d2:04:
         fd:a6:a9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:28 2024 by rpki-client on console-ams.rpki-client.org