Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
File:                     8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (raw, json)
Hash identifier:          c2zPbuT5r7PCt9ySXzU2yfNGcnp1HpN9BmUypMLeaRI=
Subject key identifier:   C0:DC:23:0B:E0:2F:C0:4B:44:40:A2:29:27:8F:E3:7C:A3:8D:4B:8E
Certificate issuer:       /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial:       010D0C9F432858473D25ED83945AA4980BBCFB80
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        162.213.126.0/24 maxlen: 24
                          162.213.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ed:83:94:5a:a4:98:0b:bc:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=fe0e7506-d84b-4468-98be-dfeefe26ccf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:2e:cd:74:38:82:1c:31:37:d1:33:a8:ce:
                    4c:d2:2e:78:cc:cc:dd:e8:05:cb:e5:c3:ff:c1:2e:
                    91:a4:a9:5e:e3:7d:e4:2f:9d:be:ff:23:d2:fc:63:
                    61:95:74:aa:c4:74:7b:17:ce:a0:ce:c7:94:1b:b0:
                    76:41:24:c4:57:4e:d6:f5:c3:13:5f:04:21:f4:f4:
                    09:50:28:8d:b9:ad:1c:1b:98:bc:ce:cd:18:0e:9b:
                    da:5d:98:2f:a9:d9:08:0a:14:c7:e7:13:a5:10:e3:
                    97:39:d6:15:35:da:0c:1a:09:21:9c:58:8d:58:55:
                    ad:58:b3:ec:b4:39:19:5f:95:87:98:c3:ee:b6:2d:
                    2a:ab:be:2f:92:3f:87:32:cd:a4:86:37:df:67:b6:
                    ce:ec:b7:57:13:60:f7:47:b5:29:31:66:85:d1:d0:
                    52:b8:67:42:82:ec:64:26:a0:04:50:b4:c2:5c:05:
                    de:cf:50:e1:fd:b5:f6:be:43:94:69:c8:96:08:9b:
                    70:fe:a5:ff:e0:32:a1:8f:3c:e5:d2:fd:3f:be:4f:
                    ca:5a:41:93:e6:b1:29:38:a2:e8:7d:0e:45:e4:86:
                    ab:1a:9e:08:88:45:86:8f:a1:49:13:e6:6c:73:87:
                    00:e6:dd:06:13:a8:08:40:b8:51:75:13:f3:18:33:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DC:23:0B:E0:2F:C0:4B:44:40:A2:29:27:8F:E3:7C:A3:8D:4B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl

            X509v3 Authority Key Identifier:
                keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:42:6d:1f:da:23:83:85:d3:35:c3:4e:cd:e0:dc:d8:5c:8d:
         a9:a1:4a:7c:12:a0:ca:b3:3f:0a:24:05:0d:6e:f3:ac:76:f2:
         9a:17:45:50:bd:50:18:35:52:9e:19:ce:e4:94:fe:e2:d4:c2:
         c4:30:59:95:f5:3f:4a:28:cc:6c:3d:24:a7:fe:7f:e2:e5:47:
         da:f5:57:10:bd:e0:30:90:85:e9:9f:77:83:92:5d:10:5c:78:
         23:46:ad:a8:57:78:5e:1f:86:69:5a:1e:1d:db:e0:55:b4:dc:
         b9:af:f3:59:9e:1f:25:bf:27:59:d3:e6:e6:f6:75:e5:b2:0b:
         cc:77:aa:ff:fa:da:a6:be:86:33:d1:5c:34:0b:5e:b4:15:29:
         e5:a4:52:0b:13:01:df:d2:26:65:d9:0d:38:92:0d:55:13:5d:
         e0:28:e6:26:c1:bd:f5:f8:0f:7d:36:04:6e:d6:47:e6:d9:13:
         30:dd:b2:58:e6:42:53:bb:e0:58:14:ec:37:b7:2e:69:07:4f:
         f6:81:02:19:dc:f3:71:ef:58:85:cf:04:30:5f:ba:14:69:34:
         00:72:0e:65:52:89:2b:8e:8f:9a:7c:25:60:50:2d:00:8c:00:
         f2:3c:8e:c1:3e:e0:a2:c5:f1:f1:da:0d:d8:35:b9:ca:e0:ae:
         94:9f:37:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:32 2024 by rpki-client on console-ams.rpki-client.org