Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa
File:                     8527687a-07fc-3f1c-a99c-a60850d64434.roa (raw, json)
Hash identifier:          yd1jTXdb8HCCKN/ktf69c5FdHlOZLuzkUdfTTxL2YP8=
Subject key identifier:   6E:02:55:A9:E5:E3:2D:69:92:80:76:23:67:CC:97:1A:03:EE:9F:2B
Certificate issuer:       /CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
Certificate serial:       010D0C9F43285847256B2742E1B5A62F6453A580
Authority key identifier: 07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     18451
IP address blocks:        174.34.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:27:42:e1:b5:a6:2f:64:53:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b43dc21-e1b3-47bb-bf42-44fe55e527f1
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=64d6f61e-7cd2-465e-9839-146a7c02bff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:a6:a8:04:37:c0:b5:00:80:3a:2d:9d:55:
                    a2:08:e8:c7:13:13:56:c7:1c:20:e9:85:ce:98:00:
                    e5:6e:c4:f3:f3:eb:bb:5c:a3:81:f3:35:11:22:60:
                    18:c8:3c:e8:25:c5:64:ea:c3:bf:66:7c:37:ce:87:
                    f6:82:4d:c1:cd:58:0a:b3:42:ff:75:86:6d:01:64:
                    f0:86:3d:12:b6:dc:7a:cb:5b:a1:3d:08:60:72:ff:
                    d7:c8:2a:eb:4a:53:55:07:6b:08:37:fe:ba:4c:78:
                    4d:b4:30:64:f0:6c:56:a7:c1:2e:fe:5b:8d:31:e2:
                    05:da:43:b7:52:d4:f3:56:e9:b5:97:1e:f5:ef:08:
                    ef:30:1f:5c:7b:0d:06:b8:b3:b8:48:d9:32:5f:b5:
                    4f:02:8b:6f:82:a2:24:bd:89:1d:16:73:b6:41:8e:
                    cd:0a:59:f0:c9:12:3b:0a:12:8a:22:0f:52:b7:45:
                    3b:a8:70:58:ac:fe:aa:a2:7f:40:c6:55:98:a0:47:
                    4e:1c:49:95:7d:1b:a8:38:5e:0d:b4:bf:be:ab:fc:
                    e6:96:e8:8d:18:ad:6c:a6:91:6e:f6:33:9c:95:90:
                    1a:42:f2:ce:54:5c:ec:bd:c3:5b:64:a5:41:e4:68:
                    dd:79:e9:ae:10:f0:3f:5a:82:ec:fb:e4:a7:cb:1b:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:02:55:A9:E5:E3:2D:69:92:80:76:23:67:CC:97:1A:03:EE:9F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/8527687a-07fc-3f1c-a99c-a60850d64434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.crl

            X509v3 Authority Key Identifier:
                keyid:07:AE:18:AD:F2:6B:C8:FA:E6:5B:32:CD:84:7C:B1:6F:07:A7:C9:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6b43dc21-e1b3-47bb-bf42-44fe55e527f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:59:e7:b9:5e:6e:c7:b5:dd:04:bb:c9:8b:96:6c:82:ad:2a:
         96:89:fa:de:24:49:db:d1:59:48:fb:76:a9:02:9d:bf:cd:59:
         72:c3:33:17:09:09:cc:db:65:6f:45:45:f8:5d:b2:db:6b:3b:
         74:66:76:07:c5:41:d1:91:2b:05:da:30:a0:2c:32:c8:3f:2a:
         6e:69:44:df:ff:46:b8:d5:16:af:54:c2:82:f8:26:02:d1:7a:
         78:db:1f:c8:ee:cc:da:fc:4f:d5:7b:69:88:c6:a6:5b:73:73:
         94:c4:29:5d:6e:74:ec:57:03:36:af:45:5a:d5:0e:58:72:c6:
         74:69:e7:fd:3c:90:52:c0:a1:ea:c7:37:02:a0:1b:7e:ca:3e:
         31:13:2a:a1:4d:69:a6:80:c6:2e:b4:b6:fc:88:c5:2e:9b:84:
         93:53:1e:b4:ff:9d:e1:2a:02:c8:d9:bb:73:6d:92:de:48:3b:
         a7:d9:44:38:86:24:5e:06:b5:9c:90:fc:2d:22:dd:d3:45:0a:
         49:2c:8e:d8:fd:73:3f:83:ba:75:40:dc:f0:77:13:11:d3:2f:
         e3:cd:1e:31:1e:54:46:b3:21:8a:c8:07:5d:85:7c:a8:a3:48:
         e4:8d:36:32:8a:75:38:dc:72:c5:9c:f4:62:93:b4:ee:1d:5e:
         58:80:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:15 2024 by rpki-client on console-ams.rpki-client.org