Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/77e9079e-1d4a-3cc2-b038-d23cb88ee81a.roa
File:                     77e9079e-1d4a-3cc2-b038-d23cb88ee81a.roa (raw, json)
Hash identifier:          Be1e23jVVcglF3LLh0GSBHD8GoDBYzzQdtNvXlgX5vY=
Subject key identifier:   98:B6:0E:1D:95:FC:D3:A6:13:AA:B7:DD:2F:51:9F:D9:33:7C:0E:14
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F432858471E709C054236C9E34D8CD080
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/77e9079e-1d4a-3cc2-b038-d23cb88ee81a.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     21928
IP address blocks:        162.160.0.0/11 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:9c:05:42:36:c9:e3:4d:8c:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=0bb75c6f-a4e8-47d1-82b6-ca0e3315a5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:80:d1:13:c8:9b:b8:cf:37:c9:62:49:0a:
                    ce:5a:7e:fe:4c:4c:6b:d6:2b:3f:29:0d:5b:a3:b3:
                    69:19:77:88:db:5c:ba:b7:e3:24:5c:2a:e4:40:ee:
                    05:ab:ed:82:58:7e:e8:93:9f:5b:89:2e:c3:8c:b3:
                    c5:84:d0:f9:de:db:84:9a:4d:2c:dc:5d:fb:86:8d:
                    be:79:0a:64:b8:16:1b:b9:f2:5c:76:47:2c:a2:49:
                    b6:31:38:02:fe:e8:6f:d5:14:1b:e1:49:19:14:c7:
                    b4:5e:23:79:eb:9a:b8:2d:e2:d4:ab:00:e0:46:22:
                    81:82:4f:b9:f1:43:b0:f5:68:ec:e5:fa:35:94:b9:
                    36:16:7b:05:f6:12:55:e4:b2:8f:41:f9:e3:73:59:
                    ef:9e:f0:51:21:51:6d:eb:d0:f0:e5:3f:05:cb:50:
                    bb:a6:fd:9c:97:98:e0:d2:d4:a6:22:12:e9:72:83:
                    57:19:4f:bc:66:27:29:19:c0:96:22:7d:80:e5:47:
                    a4:73:c6:db:d0:dc:8f:e9:de:e8:20:20:f1:56:4e:
                    85:6b:f0:06:f1:f0:cc:14:33:bc:ea:70:0f:8d:4b:
                    11:7b:96:51:12:ef:71:5b:6b:54:71:ba:3f:63:8a:
                    ef:d1:e5:fc:d1:de:44:ad:80:fd:4c:9a:7f:9f:f2:
                    39:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B6:0E:1D:95:FC:D3:A6:13:AA:B7:DD:2F:51:9F:D9:33:7C:0E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/77e9079e-1d4a-3cc2-b038-d23cb88ee81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.160.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:ae:0e:92:78:93:88:a7:15:fc:0f:19:8b:22:bd:7a:11:
         32:a7:02:43:8f:a4:87:e3:d6:6d:ca:be:2e:e4:ad:c8:7e:e2:
         a0:da:7c:6f:9d:a5:e0:94:bd:e7:8c:f7:95:c0:01:40:f4:56:
         6e:8f:c1:dc:58:70:58:85:3b:46:71:70:67:c9:5d:ca:a7:9c:
         62:57:78:2e:4e:ce:24:e3:d9:08:a9:23:d0:04:b6:7e:b2:21:
         b0:51:f9:41:bc:cf:78:cb:60:de:85:2e:a4:90:e6:35:71:87:
         a2:8c:7b:76:ee:ea:22:1c:56:08:d4:c9:87:2e:0e:36:a4:75:
         0d:b7:c0:f7:d0:25:77:0d:0d:d5:ea:ae:ff:53:5f:fb:19:cb:
         53:87:a1:b9:b2:35:1b:e7:21:17:1d:00:65:b4:e4:c4:ee:d1:
         7d:5a:44:93:1b:5a:6f:a9:50:b2:d2:d4:2a:c4:52:cd:87:4c:
         3a:98:df:0c:6a:31:12:d7:b3:dc:0b:25:3f:61:d1:36:04:87:
         b4:68:46:59:03:3a:65:9b:66:4d:80:3c:f1:8b:1c:9c:70:ec:
         d7:da:81:5c:db:cf:fc:00:4c:75:8d:3a:14:ec:ca:f3:36:c1:
         0b:9d:e0:fc:7a:a4:e0:fd:bf:36:75:93:c7:9a:27:1c:e0:79:
         48:18:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:56:25 2024 by rpki-client on console-ams.rpki-client.org