Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
File:                     9ff280db-99d3-3021-aa5e-b41e7078f63b.roa (raw, json)
Hash identifier:          sFmJYlameUceLjxO9QQ4mp43xVbb+y8656F7hBKapPs=
Subject key identifier:   D6:9A:1F:BF:46:01:E0:18:42:B9:08:BF:D2:2C:91:AD:85:D5:06:A8
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584742BB5CA993AD951B9A5C5F00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        170.199.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:5c:a9:93:ad:95:1b:9a:5c:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=66665622-a2b6-4213-a497-87ee1bbe5fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:e2:d0:eb:07:fe:7c:35:62:e6:f6:60:f5:
                    61:4c:d8:74:13:18:45:a1:6f:e0:8f:45:a5:33:5c:
                    6d:b8:8d:9e:a4:b9:9a:ca:98:e4:33:a2:ba:b2:09:
                    b3:ad:fe:c8:35:e3:72:ad:cb:5d:6d:55:3f:51:3a:
                    f0:a7:e2:3a:67:3d:d2:cd:37:21:af:5d:6e:8f:22:
                    f1:83:ca:0a:e2:be:6d:13:f9:40:40:b6:6d:21:e6:
                    c3:92:4e:b8:c0:f3:90:82:ce:9b:0e:95:e1:81:d9:
                    bc:4d:e6:38:d6:c5:2d:95:e4:bf:e4:83:91:ac:f5:
                    74:35:f4:f2:28:b7:76:8c:78:8e:e4:5c:59:ce:7c:
                    61:88:71:68:e3:2d:41:c4:c3:c5:d3:14:a8:46:ed:
                    89:b6:f7:85:50:86:01:68:8c:a0:69:5e:e0:6e:57:
                    d8:07:4f:b7:2e:e2:1b:08:e2:06:a1:f5:82:8f:34:
                    a7:1d:8a:0c:14:78:f2:80:76:ee:a5:77:54:bc:9e:
                    e1:49:67:eb:ba:68:58:48:da:14:70:4a:b5:f2:71:
                    ec:db:16:3f:fb:7f:ba:7c:c1:74:2e:cf:a6:04:20:
                    97:05:a7:a6:46:98:03:ca:fd:5b:1e:26:b8:f6:b2:
                    73:96:2f:de:e4:1a:fc:2d:cc:71:13:6c:17:44:95:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9A:1F:BF:46:01:E0:18:42:B9:08:BF:D2:2C:91:AD:85:D5:06:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9ff280db-99d3-3021-aa5e-b41e7078f63b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:df:64:9d:25:0d:16:0e:64:1f:0d:bd:8d:5e:0e:cc:40:
         4f:80:58:c3:60:12:36:72:e1:56:cd:df:24:f4:ad:79:a5:b9:
         e3:81:d8:4e:61:0b:94:fa:8d:f8:3a:b7:cc:b7:25:ca:41:d0:
         2b:e4:e7:35:51:d2:dd:ef:f6:5f:c1:ad:d4:93:d3:72:77:e8:
         67:4e:6c:bf:fd:9f:dc:37:d8:31:76:cb:f9:83:2e:b3:c0:52:
         bf:19:c9:aa:33:e4:7e:37:1e:3c:6e:72:6a:df:7e:33:b7:2d:
         4e:9a:11:c2:3a:33:a4:de:42:9e:69:fc:cc:32:46:9b:6d:65:
         60:d4:fb:de:1a:93:15:a6:33:f6:d9:d2:0a:5e:56:cc:98:d4:
         8b:44:88:29:6b:77:91:3d:dc:2f:f5:8b:4b:d6:fd:56:50:52:
         43:d9:a9:92:44:84:ca:e3:aa:0d:71:6a:a8:51:04:15:57:bf:
         a0:95:d3:22:3d:67:5d:86:78:6e:6e:f7:76:c1:05:04:3d:df:
         97:bd:8b:2b:ca:9f:c3:24:dd:39:ff:02:06:63:b6:09:b1:e9:
         9e:7c:fc:21:2f:58:78:52:0a:78:98:19:f5:b6:6d:e7:50:bb:
         ec:11:1d:22:47:0f:7f:3d:e2:78:f4:5a:a9:48:4f:73:e9:19:
         75:21:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org