Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
File:                     b405fd56-7238-35e1-ab4d-25811983c86a.roa (raw, json)
Hash identifier:          hNt/QbMgdWBTxGmKwYawupn+XTiKMLyPVyuVGiPQTiM=
Subject key identifier:   27:F3:2B:95:89:E0:EB:D2:08:39:48:71:52:C3:C5:4D:25:73:73:AA
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F43285847537B8013F2B6F11158EF2BE0
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     393398
IP address blocks:        170.75.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:80:13:f2:b6:f1:11:58:ef:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=2b5218ac-4edd-41de-af2b-ca33417db63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:56:39:ad:52:aa:fe:6b:e0:38:70:cd:16:
                    e6:9a:41:ea:38:83:63:43:3e:30:4c:8b:5e:a9:cb:
                    95:d8:ff:b0:54:be:24:6c:24:e5:6f:8d:f4:e8:d9:
                    9d:b2:c2:3c:28:7a:92:e2:72:b1:94:bc:9f:5b:17:
                    b7:2a:66:0f:dc:7c:9f:f0:56:6f:23:3e:1d:c7:08:
                    cb:14:5e:b6:38:e6:7d:86:b0:7c:89:97:6b:98:40:
                    de:fe:0b:76:18:3c:b6:a7:34:99:dd:e9:d1:72:cd:
                    6d:a2:8b:64:2d:90:1e:12:06:9e:b2:8d:ce:6f:21:
                    47:95:07:97:e4:1c:71:c3:cc:84:e0:ab:bd:13:ea:
                    4c:e4:e2:e4:09:83:33:b8:3e:df:a4:35:d2:16:c9:
                    bd:a2:91:ea:c6:21:58:d8:39:52:64:b2:f9:e6:56:
                    f2:e1:aa:7f:8a:ef:6d:0a:0b:1d:bf:17:3d:06:97:
                    c6:40:7e:dd:c2:6b:38:5f:2a:ac:bb:ed:06:d2:45:
                    e6:1c:c6:1a:bf:2d:ba:55:ed:01:6d:89:e7:62:dc:
                    65:3f:f5:33:f2:0c:bb:a9:0c:7d:02:5d:98:b1:90:
                    96:8f:aa:1d:9c:be:57:a6:ce:53:27:64:a4:47:6f:
                    fa:8d:7c:de:e5:d8:bd:13:03:8f:cf:f1:23:af:c5:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F3:2B:95:89:E0:EB:D2:08:39:48:71:52:C3:C5:4D:25:73:73:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/b405fd56-7238-35e1-ab4d-25811983c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e2:38:5f:b3:cb:3f:bf:4f:02:53:5c:d7:88:94:1c:1d:02:
         a7:28:33:b0:a0:07:1c:69:99:7e:95:73:e0:81:e6:7c:4a:0a:
         bb:08:8c:16:a4:50:12:d6:aa:c3:53:53:68:1e:c6:57:89:49:
         cd:82:06:47:22:8c:ad:9e:68:38:5d:59:74:d1:f5:0a:41:0b:
         5c:75:39:3f:62:cc:63:29:06:9b:30:2e:ff:e2:df:67:8d:77:
         ae:a2:3c:18:b9:99:17:47:77:4d:88:fa:85:62:93:5f:6c:dc:
         2a:6f:72:76:89:71:ab:5c:5b:43:dc:e9:02:1e:d8:91:81:0b:
         e6:de:61:e6:16:dd:21:66:63:cf:58:e5:43:1b:5f:1e:2b:78:
         46:f7:3f:35:cd:28:e8:5b:03:27:04:62:9b:f5:cb:e6:e6:fc:
         a0:30:8f:fb:0a:80:f7:70:45:49:00:f3:94:50:9a:b8:16:07:
         a5:9f:0a:51:d6:6b:5d:24:f7:07:65:c2:48:d2:3b:90:a9:c4:
         19:df:a6:f0:66:c8:9d:f1:a3:b3:c7:ef:4f:17:bb:c1:19:c7:
         bc:e2:b5:19:eb:16:3f:0b:b8:fc:63:30:ce:09:5d:87:c6:05:
         3c:4d:2f:c8:d7:cc:fa:5b:c7:9b:cd:a5:cd:82:c9:26:df:e7:
         90:ae:69:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:15:59 2024 by rpki-client on console-fra.rpki-client.org