Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa
File:                     f846d8e9-3192-3eda-b325-c794cfcbc318.roa (raw, json)
Hash identifier:          DyCxxyopK/xJtiiwF8a0zChUsT5hlOHlmSJaMIP3a4U=
Subject key identifier:   BA:7D:D2:D1:AB:C5:9E:C8:DD:C2:69:C5:D1:C5:18:EC:C8:FD:AC:CE
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F43285846AA89D6025B52DF279AC01E80
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa
Signing time:             Fri 26 Jul 2024 12:38:09 +0000
ROA not before:           Fri 26 Jul 2024 12:38:09 +0000
ROA not after:            Thu 24 Oct 2024 12:38:09 +0000
asID:                     19905
IP address blocks:        167.245.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:aa:89:d6:02:5b:52:df:27:9a:c0:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: Jul 26 12:38:09 2024 GMT
            Not After : Oct 24 12:38:09 2024 GMT
        Subject: CN=5ba50cd7-6c83-4e1d-9c91-b451d2094f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:3f:f3:99:b6:6e:0e:f0:c2:79:90:fa:49:
                    a6:13:9f:cb:8b:7d:5c:e1:6e:f3:4a:ef:93:63:6f:
                    49:95:f7:01:d6:c2:89:4e:38:0c:56:18:f7:c6:d2:
                    1c:94:1a:43:23:29:32:39:fb:60:be:e2:f8:05:43:
                    8d:1c:44:05:a1:e9:8f:0e:f4:bf:5c:0a:db:90:c4:
                    34:0d:84:16:5f:c7:f2:5a:17:c4:65:8f:aa:82:fd:
                    b5:44:ed:18:5d:d1:b4:8f:c0:27:af:14:ff:4e:d1:
                    2b:d0:f2:83:c8:8e:56:d7:1b:dd:e3:66:fc:42:9c:
                    42:cc:f0:10:b3:17:27:8a:b5:fa:7c:1d:e4:ff:aa:
                    59:a2:5d:2e:00:30:a0:07:70:87:fa:fa:0e:1b:de:
                    fa:ab:8a:ba:a5:97:01:e4:f1:6a:87:d6:1e:15:84:
                    0c:83:ea:fc:42:4f:fd:80:58:c0:a5:9d:d8:8a:ee:
                    55:fc:f6:0d:c1:22:9b:e0:e6:f2:7d:6f:0f:6a:86:
                    1d:0b:69:da:00:a3:e1:61:b4:5a:63:ef:0a:54:d3:
                    ae:e9:91:83:d8:61:23:b3:f6:9f:25:a1:de:3e:99:
                    b6:a6:7b:33:2e:2d:dd:eb:dc:c6:cd:e5:65:e7:67:
                    6f:ec:48:9e:98:cf:d3:e5:cc:db:e0:57:4f:f3:c9:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:D2:D1:AB:C5:9E:C8:DD:C2:69:C5:D1:C5:18:EC:C8:FD:AC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/f846d8e9-3192-3eda-b325-c794cfcbc318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:e0:48:95:50:20:7a:bb:56:0c:48:8a:28:2f:92:43:6e:
         8e:75:25:7e:a5:25:d7:7d:2c:6f:34:cc:67:ac:6b:3f:a0:de:
         3d:00:df:21:c4:8a:39:12:11:23:1c:d1:8f:e4:94:63:a1:03:
         67:fb:c2:46:7a:bd:37:6d:65:d7:06:82:71:b7:00:53:48:92:
         2c:2e:38:95:f2:f3:81:c0:b3:e0:87:eb:50:5c:26:91:55:0b:
         4e:2c:3a:d5:dc:6a:68:76:28:7c:9a:26:dd:94:c7:8d:ca:a6:
         ba:0b:37:e7:54:74:b0:8a:de:24:b7:09:71:cb:56:e2:50:cf:
         67:4c:2f:19:e6:53:61:85:22:ca:a9:20:b4:48:a4:fb:89:82:
         12:7f:02:80:2d:89:00:7e:0d:f1:eb:c0:38:1c:d8:ba:9a:df:
         b6:5c:6c:4d:0e:80:ef:bc:22:b1:ce:9c:14:69:dd:76:1f:5e:
         f5:60:13:99:ce:68:a0:ec:b3:69:7a:c1:a1:78:15:4a:9c:a2:
         59:e9:ab:d9:83:8a:fe:43:f0:1c:6d:32:30:14:ec:a7:03:41:
         24:c9:93:a7:05:60:b3:d2:9f:f8:1e:f9:31:be:7b:a3:ee:04:
         e4:ea:a5:20:ec:c2:33:46:06:b9:2d:10:98:b8:a3:1c:82:04:
         97:f8:08:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:37:48 2024 by rpki-client on console-ams.rpki-client.org