Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b61ee014-42e9-3495-bd06-05b3f8246931.roa
File:                     b61ee014-42e9-3495-bd06-05b3f8246931.roa (raw, json)
Hash identifier:          bNPTwzvq24Gy8UgBZzTNoMU2GkLEu9VajGOx+TLB0Tk=
Subject key identifier:   C9:2A:54:16:F2:59:0D:45:9B:64:7B:F3:26:42:03:21:69:89:78:50
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858472405C9D8865F3FBCC78E0200
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b61ee014-42e9-3495-bd06-05b3f8246931.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     11164
IP address blocks:        163.253.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c9:d8:86:5f:3f:bc:c7:8e:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=59c316c2-5443-4ef5-895f-9a07ebd3b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:68:52:24:f9:70:a3:e9:6e:36:90:91:b8:
                    8c:94:ab:b0:32:c0:42:01:10:09:3a:18:d8:b8:ea:
                    76:0a:68:7b:89:0f:77:7f:d8:c9:d5:fe:d6:9a:ab:
                    c6:e3:83:5a:97:4a:5c:f0:be:3a:28:74:cb:5b:a0:
                    c3:b8:6e:14:4d:cb:bd:88:85:27:61:a3:24:8d:ad:
                    8d:15:97:1d:15:e4:ca:d4:a2:87:7e:a1:5e:b6:6a:
                    f5:50:14:fe:58:05:73:67:76:1a:85:ca:f8:e0:70:
                    89:a8:c3:4f:b3:68:32:21:10:db:97:24:93:6d:2c:
                    80:c5:c4:7d:45:d5:99:05:6f:dd:12:df:6c:2b:e7:
                    94:0b:3b:f7:03:a4:a9:4e:12:44:2e:c9:70:94:b0:
                    d0:a4:35:77:34:6f:5b:07:5c:58:31:e0:aa:d8:5b:
                    3d:27:91:7d:53:9c:fa:f6:48:99:44:56:95:fe:3e:
                    64:6e:79:73:95:9b:34:a7:de:2f:d9:3e:61:d7:bc:
                    65:3c:1e:9a:b0:fa:a6:ee:16:6a:b1:f4:f1:fb:a7:
                    eb:52:98:9f:bf:e8:da:89:c1:c1:72:a7:50:ce:92:
                    48:68:de:63:f9:16:d0:95:75:08:27:0b:09:4b:b0:
                    da:e6:f1:78:08:5e:d9:60:d7:a2:6d:c9:a9:b5:c0:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:54:16:F2:59:0D:45:9B:64:7B:F3:26:42:03:21:69:89:78:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b61ee014-42e9-3495-bd06-05b3f8246931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:ca:cc:b5:b6:99:cd:9a:43:95:18:b9:23:f5:27:e9:9b:
         9d:10:ca:91:46:f1:10:ad:eb:cf:30:22:77:5f:4e:46:f3:36:
         58:0a:86:f8:db:01:12:0a:7d:4a:ce:5a:3e:22:94:cc:b4:93:
         87:84:18:dc:d6:6f:0a:78:ae:97:f9:c4:a4:7f:43:08:ed:a8:
         f3:e5:ab:8d:4f:a5:d1:db:a1:c9:78:b2:58:4f:d4:c6:68:5f:
         ad:76:c6:12:aa:90:4d:3c:c7:42:01:06:f9:b6:45:ac:70:42:
         fa:8d:26:18:75:e1:39:a2:35:e7:1f:cc:2f:54:4b:bc:98:41:
         77:1f:10:7c:24:76:1c:a9:74:52:11:4b:11:ca:af:76:81:18:
         88:e9:18:74:b8:7d:56:ea:7c:09:5e:0b:6c:00:8e:b4:91:d7:
         b6:f1:0a:de:5f:da:f4:2b:3d:f6:1f:c5:51:02:a8:ed:7a:83:
         68:16:05:0b:79:bc:d1:d2:e7:f8:ad:e9:f4:ec:42:75:89:ab:
         cd:27:65:67:4b:10:30:86:4f:d1:91:6d:bb:3e:60:df:93:bd:
         f0:79:5f:e5:97:24:5f:a7:03:47:97:24:6d:be:0c:7b:49:bf:
         48:ce:88:0e:3a:08:8e:a9:f3:84:9a:37:33:90:56:f6:9e:d1:
         c6:be:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:06 2024 by rpki-client on console-fra.rpki-client.org