Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa
File:                     e969eb6b-84bd-33ed-adf5-6a299076b70f.roa (raw, json)
Hash identifier:          fgAMxwC+lxUZYGz7o2UnmkoOS1t01iFuI91Qw46GO1c=
Subject key identifier:   F6:C9:E7:53:3B:E7:22:53:5A:95:40:33:D0:2F:32:F4:54:DF:8F:66
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F432858474850BB512CE4553A11FA7C00
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     32870
IP address blocks:        136.147.164.0/22 maxlen: 24
                          136.147.174.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:bb:51:2c:e4:55:3a:11:fa:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=f59300fb-5edf-4858-8263-65009f5d7e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:0b:69:22:c1:20:97:b5:1f:68:84:1f:42:
                    1e:82:a0:5c:1e:01:cb:89:eb:58:fe:c5:9a:3a:5e:
                    c7:a2:f7:99:eb:97:e2:59:ac:a7:57:76:ef:d4:8f:
                    f1:86:a4:28:f6:4f:43:a7:b3:e0:62:84:f1:de:72:
                    8c:d4:67:78:6c:ed:bd:83:e6:30:25:e8:66:41:df:
                    1e:f5:80:66:06:7c:25:b7:14:7a:8f:43:c8:d5:92:
                    06:f4:94:63:0b:4f:e1:57:fe:81:e0:39:bf:98:1c:
                    a2:41:09:6e:f7:c2:ce:14:24:90:a2:15:e4:a1:46:
                    6b:5e:94:f9:fa:57:f5:35:98:93:e2:6f:28:a9:ee:
                    a6:35:90:68:93:07:bd:7b:32:fd:f0:ad:0f:8c:08:
                    b1:66:61:e4:20:99:19:d9:cb:6d:53:95:d7:35:f6:
                    11:c5:35:92:72:8e:46:0f:5d:ab:c0:16:4d:06:78:
                    68:bd:10:35:a8:64:0f:73:79:0e:28:a3:29:a3:ab:
                    2a:e5:14:2b:93:12:1e:82:e0:ad:f3:12:52:65:03:
                    fb:43:1f:d4:3a:1c:64:f6:c3:71:f2:54:2d:a5:e6:
                    ec:52:ed:60:58:12:fe:2e:42:f3:a0:77:38:fb:d6:
                    86:d7:86:a2:e5:2a:3c:9d:2a:a6:53:7f:14:f9:15:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:E7:53:3B:E7:22:53:5A:95:40:33:D0:2F:32:F4:54:DF:8F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e969eb6b-84bd-33ed-adf5-6a299076b70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.147.164.0/22
                  136.147.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:4b:86:49:af:56:e1:60:f0:f7:f6:f7:14:73:18:45:76:0c:
         e5:9f:05:df:95:72:27:8e:db:b9:1a:3c:27:c8:dd:cd:d4:18:
         91:2c:a5:eb:1d:6f:83:32:0a:f3:f5:58:d0:49:52:04:73:64:
         0f:dc:df:61:f8:5d:13:82:98:51:0f:df:ff:09:00:12:b7:bf:
         d9:50:15:15:55:73:ba:56:30:3a:c5:d4:44:eb:13:e6:a9:29:
         56:69:66:ec:98:c7:51:64:59:23:9d:d7:5b:98:b9:ff:66:92:
         cb:15:ff:e5:1c:d3:1e:f5:6f:d8:70:de:16:13:44:27:c1:04:
         9d:d4:bb:4f:a3:6d:40:86:7b:73:3d:a3:1c:a1:38:79:50:a7:
         2d:83:31:86:08:15:ef:ba:4e:05:08:15:0f:cb:39:cb:14:dd:
         05:7b:a5:2e:bd:35:b2:2a:6b:3c:60:a7:be:b7:14:22:8f:33:
         43:09:9a:b3:ff:3f:c0:22:49:90:f1:37:bd:78:61:42:97:57:
         c2:7c:a7:e4:44:08:16:f9:71:70:88:7a:99:d5:52:0c:b6:5b:
         a6:48:22:94:d9:42:5e:99:73:8a:12:26:94:76:74:d9:d2:26:
         9c:42:db:d7:d8:21:a0:a9:fb:da:ea:70:66:41:8d:c3:72:66:
         86:7e:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:18 2024 by rpki-client on console-ams.rpki-client.org