Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
File:                     3405a899-675d-3694-b986-0720ff81db0e.roa (raw, json)
Hash identifier:          moJ0uM5vzL1vFCweMe7VHVLgorqu7Nm5PhRrk+qbCb4=
Subject key identifier:   23:46:5B:0F:E4:6D:66:61:8A:0E:47:0D:27:9B:02:C0:31:9D:53:56
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C1753A4371D1B2F32D60
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11537
IP address blocks:        163.253.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c1:75:3a:43:71:d1:b2:f3:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=a7f59ea5-5e98-4035-b100-db98d36e77ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:e8:79:10:68:17:f6:03:f5:23:87:7d:9b:
                    46:bc:7b:e3:c7:7d:14:cc:9f:31:4a:47:ee:ed:5a:
                    ec:03:2c:ee:a3:89:2b:6f:d7:33:64:86:c8:9b:66:
                    e4:a2:f2:20:ac:87:2c:8e:e8:c0:66:f5:0d:8d:02:
                    a4:41:eb:12:d0:15:7b:de:a5:12:ee:34:8b:82:3c:
                    d9:49:15:30:79:18:99:6e:e5:13:e1:4b:64:63:f1:
                    07:60:96:f6:42:27:a2:4e:82:5d:cd:ba:c5:18:5a:
                    47:2f:80:90:e6:89:7f:83:3f:40:49:b9:cf:bc:80:
                    e1:24:93:fd:d5:eb:15:c6:80:5a:f6:1e:7c:77:40:
                    9a:13:11:ee:0d:2c:14:43:01:0d:73:81:b1:b4:3b:
                    18:a6:87:45:0d:63:06:c3:58:56:fa:82:f8:c1:68:
                    a1:cc:b7:00:d5:d4:da:2a:66:5b:76:6a:3b:e5:45:
                    24:e7:2e:78:6f:81:85:66:01:15:7f:08:19:7d:08:
                    58:12:fb:f5:5c:5e:6d:7d:3d:9e:d1:bf:f0:c5:41:
                    c0:c6:70:3b:0f:ae:0b:2a:9f:3a:95:1f:a9:34:76:
                    49:50:3c:aa:c1:c5:90:a9:bb:0a:ea:28:48:9e:b0:
                    ef:44:e3:c2:0c:d0:33:e8:66:4d:df:52:1c:8e:69:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:5B:0F:E4:6D:66:61:8A:0E:47:0D:27:9B:02:C0:31:9D:53:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:23:67:d7:a3:96:d7:c6:ef:73:9b:70:b2:d4:5a:d3:aa:e6:
         21:f9:ea:2d:5e:45:4f:c9:6a:61:ee:91:86:15:6a:70:09:79:
         7a:ad:61:e7:97:de:2c:ab:f5:62:a6:9f:66:76:25:79:93:8b:
         ca:f8:1f:48:8f:27:46:f5:e7:fc:06:ed:db:3c:32:d0:22:22:
         9e:83:83:e0:48:d2:e6:a9:61:22:3f:3d:9d:fe:49:ba:b3:fe:
         8c:66:49:c3:9d:ba:a9:bf:b1:0b:57:f5:af:d3:c2:5b:34:82:
         1b:3c:37:1d:83:98:23:dc:a9:97:cf:19:93:9e:ed:1d:15:30:
         c7:65:76:29:01:7a:c1:dc:d2:e0:bb:a0:49:80:54:50:45:a3:
         0e:9f:3a:f2:0a:f6:a2:df:5a:b2:07:98:ab:22:e1:5f:e8:1f:
         6c:20:3d:4d:00:af:dc:25:ef:ed:f4:5b:17:45:1f:d2:f6:5b:
         9e:36:2b:77:6d:9a:9c:19:18:c6:d9:fb:6f:d4:98:0b:d8:27:
         6f:d3:e6:19:96:f7:ac:2c:0d:0e:d6:c3:54:1c:ae:85:1e:5c:
         82:b8:58:db:c2:a6:19:d0:b1:e6:18:af:2b:fa:f2:26:83:81:
         42:0a:2e:c8:2c:cd:8c:1d:14:6a:16:1e:85:71:1f:b4:ac:3d:
         88:0b:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:45 2024 by rpki-client on console-fra.rpki-client.org