Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa
File:                     cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa (raw, json)
Hash identifier:          2RuJjM+Wrby2g5JxE/l7Ot+HaqA7a+mvLzso4kMXZh4=
Subject key identifier:   9B:78:8B:95:F3:BC:DE:62:2F:AC:E0:D3:2E:D1:4F:DC:CE:24:AC:F7
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F43285847C7748E0E79CD2E97EC0C1E00
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     13952
IP address blocks:        162.249.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:8e:0e:79:cd:2e:97:ec:0c:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=bfe7cc0b-0cdc-4939-9069-d2ca233f5812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:aa:d6:4e:0a:5f:11:10:d1:42:78:51:ab:
                    d7:e3:b9:25:09:08:f6:25:c0:41:12:36:c9:fa:3a:
                    35:24:eb:13:74:84:8c:a7:fd:7e:87:88:94:cb:16:
                    ec:79:55:fa:26:cd:f7:b6:c0:64:b9:8d:0c:51:b5:
                    51:8d:fe:57:4c:34:26:7d:ea:03:d4:de:ec:61:ac:
                    b7:78:c0:65:88:f5:be:38:5b:a0:02:f6:26:6a:8f:
                    53:45:e5:1c:a5:28:3d:fd:f1:70:34:7f:1b:7a:23:
                    58:c5:96:6f:77:52:c3:f8:02:91:08:99:b2:57:f4:
                    0a:6b:fe:3d:a9:0f:fc:c6:0c:12:35:b6:3c:07:b4:
                    e4:0c:9c:35:49:0a:39:56:21:0f:f8:9f:0a:4e:b6:
                    80:c0:23:ee:79:5e:51:24:3e:7f:52:f7:de:29:2c:
                    1c:83:ca:d1:25:bc:07:3a:81:0c:d5:b9:30:fe:e7:
                    d9:22:00:d5:1a:ed:c0:50:3a:9f:0d:b5:35:fe:4f:
                    b4:02:e9:c2:ba:61:eb:ed:d2:a9:2b:5d:e1:82:f1:
                    e8:49:26:50:67:f6:33:b9:f3:e2:32:39:7a:88:44:
                    29:e4:7f:68:ca:f9:96:63:56:5a:bc:51:89:e0:cb:
                    cb:30:37:8c:c7:c9:73:97:e0:57:96:73:2d:c5:0b:
                    2b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:8B:95:F3:BC:DE:62:2F:AC:E0:D3:2E:D1:4F:DC:CE:24:AC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/cb3e573f-eb9d-31f7-a610-d2430a74fe0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:ec:46:a5:14:03:b7:9e:52:36:38:12:8c:48:b0:4f:7c:
         6d:c7:35:c1:dd:da:14:af:9c:32:6d:44:b7:14:29:ef:7d:5a:
         c5:21:d8:a2:57:5b:66:60:42:77:64:12:d1:c2:ad:79:e0:8a:
         6b:98:5c:61:88:39:f9:f0:23:f0:a6:e0:54:1e:71:1a:16:bf:
         31:e1:9b:54:08:a5:6b:31:a3:88:2c:45:89:a5:44:8d:42:84:
         d7:07:0f:14:19:73:24:84:1f:90:1f:79:01:f5:e6:66:4e:1b:
         63:f9:ea:3c:53:b3:9f:c7:cf:c0:b3:6a:25:8a:a6:1b:9a:1a:
         59:cf:8a:41:f8:ad:c3:d7:cd:bf:cc:c3:4e:2a:82:63:9d:64:
         fc:7c:59:33:8f:a0:26:67:31:83:ae:f3:e6:9a:0b:db:37:be:
         d0:54:e9:7f:ab:a8:39:e7:24:ba:60:e1:04:66:2e:7a:8e:c9:
         19:f4:a5:68:0f:04:d6:dc:52:a6:9a:a0:b8:ca:a6:1a:fd:56:
         f9:6a:89:5b:bf:12:56:dd:ef:df:56:85:fc:dd:dd:a2:8b:9d:
         6e:09:16:bb:33:b8:30:83:12:a9:47:4b:20:35:5b:9d:ec:1b:
         a5:61:f6:01:27:c6:10:5f:22:55:50:87:a8:6e:ec:01:64:75:
         8e:10:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:03 2024 by rpki-client on console-ams.rpki-client.org