Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
File:                     aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa (raw, json)
Hash identifier:          zyn12eP05So3arQs6ea59nKQGtIgnR/bpRkJML6y1IM=
Subject key identifier:   E8:89:69:80:16:DD:99:7C:EC:94:DD:EF:31:81:AB:EE:FF:B2:38:8E
Certificate issuer:       /CN=31671c23-3278-409b-837d-7dfe69606940
Certificate serial:       010D0C9F4328584750B0A83E98EB2DBC16DEE240
Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        170.62.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a8:3e:98:eb:2d:bc:16:de:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31671c23-3278-409b-837d-7dfe69606940
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=01446ee9-eae4-4d87-b8a7-f6412603e26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:2e:df:a3:a7:5d:9e:08:59:3f:70:bb:bd:
                    dc:66:b9:ca:17:e3:d9:8e:a9:3a:54:9f:d7:61:91:
                    82:7b:25:46:fe:aa:70:ca:3f:ee:65:24:24:d2:ad:
                    5f:8e:65:39:6d:d5:24:15:da:d4:74:ec:87:d4:0c:
                    fa:6f:7e:6c:d1:96:0d:5a:6d:fc:7e:f1:6f:df:6b:
                    68:f6:ac:c1:c2:8a:86:23:a0:f7:08:90:7e:fc:57:
                    40:73:57:9a:e5:3b:b6:1d:3a:3c:2d:b3:dd:5c:7f:
                    6f:22:f8:35:b1:16:c0:90:42:e6:3a:65:d4:7f:80:
                    f2:f6:3c:bf:c1:ea:94:2a:46:d8:dc:6a:6a:73:cc:
                    9a:89:97:77:9f:31:62:c5:d1:97:ed:a7:31:c9:8c:
                    58:42:a3:13:db:84:5c:61:4e:f3:f2:2f:fb:0b:55:
                    ed:15:ee:21:6c:8e:a4:03:59:fe:18:56:41:09:68:
                    2f:7d:84:81:2b:c9:61:1b:5b:46:62:3d:ba:06:5f:
                    2c:d8:6e:f0:09:7d:0e:ed:d0:b5:7a:f9:29:55:66:
                    b9:c3:6b:93:cb:c8:b9:d4:63:7a:e7:5c:b8:c9:72:
                    44:27:28:b5:e8:16:24:9f:4f:d1:6c:c1:fe:d3:0a:
                    fb:aa:17:01:09:96:15:08:1d:ba:23:2a:51:72:c3:
                    8a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:89:69:80:16:DD:99:7C:EC:94:DD:EF:31:81:AB:EE:FF:B2:38:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl

            X509v3 Authority Key Identifier:
                keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:08:41:03:22:63:91:3f:c5:d0:63:96:52:9b:f6:78:77:
         96:1b:86:8c:2a:1c:07:8e:83:13:ac:fa:f4:68:cf:d1:dd:a3:
         a3:c5:3c:c5:84:be:bf:75:4b:94:01:95:d5:c6:59:da:b0:d1:
         df:aa:87:7f:2c:6f:69:22:3f:d6:37:70:0b:e9:23:4b:ea:18:
         80:b4:73:44:bb:25:35:a8:7b:74:54:5f:e8:4e:6f:fa:73:b9:
         cc:5d:b2:38:a6:63:35:32:02:ee:33:8c:3c:5e:69:a4:46:15:
         11:36:91:b9:7b:74:4d:a1:e4:a1:cd:36:da:59:8c:fa:9b:96:
         68:da:97:c6:ad:c7:ed:fd:86:5a:5d:de:c7:81:e1:63:bb:74:
         c7:2b:75:b3:e0:83:4d:42:ea:66:df:bc:8c:64:ce:7c:1b:45:
         8e:4b:b9:a8:17:2c:14:99:cc:07:8d:2c:1f:f7:67:bc:df:c9:
         35:0d:74:21:e2:54:e6:14:ba:3d:d8:12:e6:63:de:fe:24:00:
         69:a2:28:0f:40:46:75:d7:99:2a:e1:54:ba:ff:63:89:e3:ad:
         b8:da:f0:b1:c6:c9:71:66:b7:1d:b9:aa:95:b4:70:07:c7:8d:
         27:16:9c:22:96:de:87:df:09:a8:66:27:a2:1b:39:0f:59:09:
         be:85:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:31 2024 by rpki-client on console-ams.rpki-client.org