Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/13792193-58cf-35af-b170-0c7fb4cc0f32.roa
File:                     13792193-58cf-35af-b170-0c7fb4cc0f32.roa (raw, json)
Hash identifier:          IFm3xB9C+ThYcMop5B1CStSr2lmOtM2eWXLf2MgMpV0=
Subject key identifier:   2E:82:47:69:1F:CE:DF:B6:A9:9A:62:85:17:A0:B8:C2:12:67:D3:31
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858475BDB7D66590B6738F1157860
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/13792193-58cf-35af-b170-0c7fb4cc0f32.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     394708
IP address blocks:        209.173.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:7d:66:59:0b:67:38:f1:15:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=d4e2c947-0fd5-4801-a608-1919441d5dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:d7:2b:13:b0:e1:28:48:cb:88:45:43:e1:
                    9a:54:b1:f3:02:84:6d:74:cb:c0:0f:a8:9f:aa:df:
                    8a:8a:85:a9:e2:f0:b6:32:48:36:9c:21:be:6c:e7:
                    00:16:e4:cf:0f:bd:9e:63:96:49:31:ff:22:79:2d:
                    c9:17:2f:f7:68:2d:8f:07:03:f9:ab:83:52:4d:9a:
                    22:56:72:4c:79:8b:d7:91:4a:14:d1:89:02:7b:68:
                    0c:39:6e:6b:a5:09:99:89:f4:89:b2:63:99:77:c3:
                    f8:4f:49:9c:3d:1d:c9:4d:27:84:66:7d:b4:cb:3b:
                    dc:f6:39:cc:6b:ee:0f:8d:30:70:f1:fd:46:ed:cc:
                    ab:16:45:77:ed:21:45:07:58:2d:50:e3:06:4b:58:
                    7b:78:9d:20:a7:63:2d:af:a2:16:e2:4f:bd:30:64:
                    81:e9:ec:f8:40:38:93:0a:af:56:96:ab:82:b2:8e:
                    66:63:5f:6a:b6:24:2b:aa:aa:69:a4:62:70:d8:6b:
                    2d:1d:15:de:68:89:6f:49:7e:87:b6:49:e2:a0:90:
                    4b:1d:0c:86:64:66:f5:a5:11:99:95:ba:9e:f2:09:
                    e9:72:37:c2:13:05:ba:1e:c9:dd:8f:96:fc:3c:f3:
                    75:e8:4f:db:35:a0:62:c6:f3:1c:99:ee:fb:45:2c:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:82:47:69:1F:CE:DF:B6:A9:9A:62:85:17:A0:B8:C2:12:67:D3:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/13792193-58cf-35af-b170-0c7fb4cc0f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:5c:fa:12:32:f4:18:73:97:a4:ab:53:a4:37:8c:a2:30:
         b1:2e:19:0d:19:83:bd:7b:d5:04:31:5f:e4:96:a6:43:5d:6d:
         02:63:29:07:44:c5:73:a3:72:75:00:01:79:2e:87:29:c7:f9:
         43:bf:71:b1:76:29:26:62:54:ac:3d:5e:b3:4b:1e:d4:f1:db:
         bf:90:f1:bf:e9:93:a0:c9:2e:b6:34:24:f2:2d:0c:67:c4:72:
         3e:77:13:c2:a2:3a:d7:94:11:b2:c8:fc:e2:a4:26:65:38:67:
         7d:94:4a:44:33:9b:64:5c:83:d3:c6:07:18:9b:18:6f:2a:33:
         06:44:3d:5f:c4:ea:a4:8e:e1:bb:d9:22:d3:e2:4f:76:6d:b1:
         9e:44:9a:8a:c2:1a:73:c5:28:0b:fd:a3:ca:db:77:be:62:86:
         9c:ec:f1:e1:59:97:8d:f9:78:74:76:37:5f:93:a8:b0:d7:51:
         ba:8e:ae:9a:05:f8:7a:2e:7c:99:af:eb:cc:50:dc:3e:1d:92:
         04:c4:f1:2a:90:36:1f:b1:90:4e:14:24:3d:e1:ed:2a:c4:24:
         98:7a:1d:b9:e8:4a:f4:3c:96:84:0f:a7:53:e1:68:23:15:0d:
         ff:7f:06:7e:8c:8b:b7:b7:26:aa:f8:a6:da:c5:a2:7f:72:12:
         69:f9:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:58:09 2024 by rpki-client on console-ams.rpki-client.org