Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8924b19-2aa4-3bd2-9a3c-1a87a5f23a51.roa
File:                     d8924b19-2aa4-3bd2-9a3c-1a87a5f23a51.roa (raw, json)
Hash identifier:          Co9ikMTKV5PB5OA9ukBZmzsXqqHAqzC+p4/kFG2g45Y=
Subject key identifier:   24:E0:5E:52:89:4B:D5:B2:63:75:9D:5C:D6:FF:77:54:EF:EC:4A:87
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B50C2D23B95A1D0F547CC40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8924b19-2aa4-3bd2-9a3c-1a87a5f23a51.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.159.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:50:c2:d2:3b:95:a1:d0:f5:47:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=a497a7b2-4abe-4562-9740-833c73d98000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:8b:c8:83:9d:36:a6:8e:9f:3d:ae:1d:f7:
                    23:aa:fb:ba:49:32:2d:46:fe:26:08:a2:4d:71:af:
                    43:1d:33:05:b6:f7:45:a9:62:7f:48:3c:ec:23:81:
                    ef:fb:40:5d:98:47:19:bb:7c:2d:c5:a0:3c:b1:e9:
                    29:f8:e6:61:c0:0d:0b:89:5d:ab:57:66:0b:a5:11:
                    88:64:8a:06:5f:89:2a:57:98:83:7f:9e:68:4c:b0:
                    8f:59:3e:d6:d3:d3:e0:c3:57:15:17:ce:8e:f6:d3:
                    0a:86:12:2d:62:e3:c6:63:c2:0a:57:aa:39:9b:b7:
                    88:3a:c9:1a:2c:ae:a6:4b:b4:dd:3b:1d:be:90:b3:
                    ff:ee:da:b9:15:3c:43:18:ed:00:5f:a5:bb:fc:1c:
                    e1:dc:13:7e:93:45:18:92:d8:09:c4:fa:e4:f5:b6:
                    27:e8:be:db:fd:01:02:70:b4:8a:e1:2c:9e:fa:a4:
                    e2:74:5c:69:3e:fc:1f:f4:b5:9e:14:e9:5f:18:a4:
                    65:3d:ab:fa:1b:9c:0b:45:e6:ef:90:0d:8b:ba:83:
                    2e:0c:10:88:ee:e3:df:17:a8:4a:c4:40:97:d3:62:
                    9a:82:05:05:92:c3:a1:5a:5b:0c:85:18:8a:f0:83:
                    e9:5d:ef:1a:5e:e9:42:dd:49:a4:76:57:ad:1c:b3:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:5E:52:89:4B:D5:B2:63:75:9D:5C:D6:FF:77:54:EF:EC:4A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d8924b19-2aa4-3bd2-9a3c-1a87a5f23a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:7a:6e:36:10:9e:f1:0a:5e:5e:a4:90:9d:58:50:b3:7f:
         ee:17:bb:6e:ea:2f:cd:37:c6:76:34:a0:9b:fa:a3:47:34:8a:
         2b:18:fb:66:3b:ba:ec:f0:f8:ab:a6:46:aa:e4:ed:4f:49:06:
         a8:3f:51:eb:1a:0f:5b:55:01:22:6f:6c:c9:ae:b8:cc:f1:d6:
         6d:8c:87:bc:10:24:bd:06:8f:dc:d3:48:fb:b1:4b:3b:4e:27:
         2b:d2:f8:c7:dd:18:91:08:4d:71:30:60:19:7d:fd:6d:65:21:
         09:a3:16:56:e9:3d:05:30:cd:35:0c:d4:fd:b1:e8:13:cc:2e:
         5c:40:8a:fa:d5:39:82:78:12:f1:b8:08:14:38:ab:f9:68:82:
         15:f0:00:91:3f:18:4d:66:9b:63:59:2f:cd:fd:58:ae:50:07:
         a2:b6:8c:62:8b:e2:bc:6b:9b:40:92:80:6e:0f:b6:e8:26:e0:
         48:33:37:f9:3c:af:dd:2a:9d:38:bc:94:1e:95:6c:60:62:c4:
         9d:5a:f4:18:1a:05:a6:da:bf:b8:e7:08:00:72:76:d6:71:50:
         f9:03:80:33:a5:d1:f2:67:59:78:7b:c9:6e:55:9b:66:af:c0:
         cb:b9:0f:0f:a7:e0:0d:9a:12:be:a4:02:43:ec:94:69:44:94:
         86:1c:f4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:14 2024 by rpki-client on console-ams.rpki-client.org