Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa
File:                     91505259-16de-3e4f-9fdb-1b6d22637eea.roa (raw, json)
Hash identifier:          A4dv9eCW30BSzl7/gil21I4tBKcmHRoAe6aKgunS3fg=
Subject key identifier:   91:AD:D1:43:31:FB:F3:E1:F0:38:9D:30:F0:4B:B6:DD:E5:B8:06:6C
Certificate issuer:       /CN=12d514ee-f97d-4775-a4c9-16429339fd21
Certificate serial:       010D0C9F4328584726D08A4B77DC1B4E8C9C68C0
Authority key identifier: 30:8A:E7:E3:5D:D0:83:E0:A1:14:50:98:64:35:CD:5A:9E:02:6C:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        104.167.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:8a:4b:77:dc:1b:4e:8c:9c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d514ee-f97d-4775-a4c9-16429339fd21
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=1dfd178d-85b8-477d-beba-4df5c3e12c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:bf:1a:33:f6:da:33:b8:b4:d7:c0:f2:9c:
                    e2:2b:2a:df:9c:aa:d2:e3:dd:07:30:23:12:f7:c5:
                    18:f6:ec:80:c4:0c:05:18:b6:ed:2d:c2:b9:cc:cd:
                    77:28:e0:99:a4:a8:d5:b8:f5:79:e3:e1:84:4a:fa:
                    43:0b:aa:a0:4d:6a:12:b0:37:8f:a9:8a:5e:c8:93:
                    3f:65:26:28:73:1f:36:05:04:d3:91:5a:e7:63:71:
                    43:79:4c:7f:5b:6d:42:b8:d1:e1:76:3f:40:c9:d1:
                    3f:fc:d6:7e:16:28:56:99:69:2b:68:6f:43:9c:7d:
                    fa:f5:18:5e:8e:d2:5b:9e:e6:c9:75:3d:e3:95:9f:
                    5a:22:8b:09:36:f6:ee:90:c6:e7:da:cc:29:cd:eb:
                    a1:05:74:24:3e:82:d6:94:a9:d0:63:7d:b6:87:bd:
                    d3:f1:3a:b3:97:6e:66:f1:80:9e:e9:1e:f7:85:0b:
                    dd:48:7f:02:a3:84:b4:d8:0f:fd:22:f5:3e:0f:6c:
                    70:48:57:f2:e7:4b:9e:00:44:35:36:08:fe:3e:c8:
                    95:89:49:20:32:aa:79:a2:80:4c:f4:fe:a5:e9:f9:
                    a0:27:e7:4e:33:19:9a:29:98:34:42:03:eb:54:42:
                    16:95:1d:fa:8f:c8:f3:a4:e1:72:b3:9b:77:3a:25:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:D1:43:31:FB:F3:E1:F0:38:9D:30:F0:4B:B6:DD:E5:B8:06:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/91505259-16de-3e4f-9fdb-1b6d22637eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21/12d514ee-f97d-4775-a4c9-16429339fd21.crl

            X509v3 Authority Key Identifier:
                keyid:30:8A:E7:E3:5D:D0:83:E0:A1:14:50:98:64:35:CD:5A:9E:02:6C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/12d514ee-f97d-4775-a4c9-16429339fd21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:86:fd:3f:b6:8e:c3:d9:ea:ad:39:ae:4a:02:ab:4b:54:
         b7:99:93:a9:5c:e7:84:50:2c:45:12:d8:61:60:6b:7a:74:15:
         f7:b2:69:1d:f6:e5:39:ab:bf:68:f8:c4:5f:c6:8b:9d:6a:a7:
         e3:32:c8:cc:e4:19:32:14:81:71:e5:98:9b:59:6f:c3:97:fd:
         05:87:f2:fb:ae:05:9b:1a:26:c9:e5:be:73:96:9a:3a:7f:d8:
         5c:18:a8:03:87:ab:ef:55:5c:35:46:d9:f9:dd:bb:28:59:7a:
         0c:7f:8b:d5:e0:15:9f:f9:fe:ff:71:f4:f7:3e:c6:d4:f5:07:
         a1:93:e2:15:1f:71:83:a4:4f:fc:65:9b:9d:bd:86:66:79:f4:
         d9:8b:74:24:f9:8a:fc:58:94:8b:d1:d5:1a:1f:1a:88:4d:df:
         97:fc:d9:23:4b:1e:78:1c:1f:28:6d:45:6c:5d:2a:a3:c7:68:
         05:30:37:ad:3d:a5:83:13:1d:5d:9c:b9:49:08:e6:47:ae:b4:
         d4:bc:e0:6f:37:81:70:83:68:58:a3:5e:a4:82:78:d5:e6:ea:
         53:e2:28:19:ad:38:4c:7a:76:f4:e1:86:06:8c:1c:cf:e2:7b:
         e6:2c:1e:7b:30:13:8c:69:ae:45:72:ad:74:6e:f8:8b:dd:ae:
         95:7e:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org