Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
File:                     c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa (raw, json)
Hash identifier:          XfzepML6H8LZanoEAh+nycmlV2RFgz2ipVzDnolDIwI=
Subject key identifier:   BC:C4:57:92:6D:7B:52:53:8E:91:82:89:A5:8D:A5:4B:EF:6A:70:F7
Certificate issuer:       /CN=dba0d862-3d0e-4150-90de-3c956c1b532d
Certificate serial:       010D0C9F43285847537B80018CD7AEDF05A14E00
Authority key identifier: 8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     394177
IP address blocks:        170.75.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:80:01:8c:d7:ae:df:05:a1:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba0d862-3d0e-4150-90de-3c956c1b532d
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=d4e8366a-1f78-4883-b03d-cdf429184693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:da:25:ad:35:75:e1:45:03:fc:f0:f3:40:
                    7b:c3:7e:78:7f:bf:0d:36:f4:de:a1:1a:09:57:e5:
                    4c:84:e5:3a:ed:86:64:00:25:56:bb:c9:a6:fe:1e:
                    08:7e:4d:be:b8:ba:dc:c7:dc:76:87:dc:97:39:71:
                    1e:4c:bf:1c:ef:58:03:72:4f:a8:7d:82:f4:81:51:
                    01:1b:e0:1e:21:fb:d8:94:b2:74:74:f5:66:df:ca:
                    90:87:b2:26:30:4f:61:19:4e:4f:c0:a0:f1:b2:64:
                    34:43:43:37:96:81:f1:70:6a:05:15:cb:3c:81:b6:
                    dd:29:0d:a8:39:5c:c3:3f:fd:35:c9:2d:94:24:f7:
                    19:20:25:a7:12:a6:f6:3f:07:2a:8d:9c:1a:92:1b:
                    f3:84:7e:1f:32:92:94:7c:da:e3:27:b5:9a:ba:93:
                    fc:5b:f8:a0:3b:73:67:11:0a:70:74:6a:15:dd:79:
                    d9:b8:04:36:1e:15:6b:76:37:7c:cc:bc:09:a4:23:
                    67:17:31:fc:8a:79:4d:c2:2f:7d:7e:2d:2b:85:be:
                    10:d2:47:a9:9d:62:d0:d3:22:e7:8b:e9:e5:cf:34:
                    4c:36:24:69:89:2f:5b:2c:c5:d3:2f:6e:e2:34:5d:
                    3f:47:bc:8b:a3:9f:52:f2:00:ce:07:33:7d:35:d5:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:57:92:6D:7B:52:53:8E:91:82:89:A5:8D:A5:4B:EF:6A:70:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/c0f6672c-0d1e-33c7-82a2-7de622b1020f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d/dba0d862-3d0e-4150-90de-3c956c1b532d.crl

            X509v3 Authority Key Identifier:
                keyid:8B:1A:62:2D:F6:BC:C1:40:C0:A0:85:B8:34:AE:C3:0C:3C:6D:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dba0d862-3d0e-4150-90de-3c956c1b532d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:79:0c:03:f4:dc:f4:56:27:c9:3c:01:ab:ff:20:e3:e1:9d:
         8f:a0:9c:32:a1:1e:3b:50:41:11:84:b0:2d:7c:c7:ce:5e:c2:
         82:e3:32:ba:c2:8c:d0:c0:1f:43:19:8e:00:d5:e2:68:73:bc:
         23:37:d5:0e:4f:d0:fe:d9:48:87:64:a4:74:c2:b0:d4:66:14:
         44:2f:c3:55:7b:7b:96:b8:c5:ec:28:60:e1:f4:77:5b:c2:fe:
         60:10:f9:d8:9d:15:f9:81:09:eb:2e:f6:fc:2c:20:55:e9:23:
         a5:82:5e:73:be:56:96:8d:b8:62:67:52:61:9e:32:f4:20:30:
         75:59:5b:55:60:8a:69:c9:92:e4:19:3e:cd:10:0e:c5:80:02:
         4e:68:02:5e:be:89:76:e3:68:66:ad:d6:2d:55:42:02:49:cc:
         3b:69:bd:e6:fb:c0:2a:3f:6d:3d:31:a1:1f:90:30:63:90:05:
         85:cd:00:78:6a:d8:b1:28:2f:39:42:92:e5:ec:e9:42:f5:b0:
         9d:48:e8:ed:4c:06:50:75:3c:5b:12:e1:f7:35:14:85:8e:a1:
         68:af:ab:b6:68:10:e3:42:63:e0:1f:9f:8f:f5:9f:19:05:f6:
         b3:61:c5:aa:d0:8b:03:fc:bf:b2:04:88:41:c4:93:66:ed:16:
         97:5a:10:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:04 2024 by rpki-client on console-ams.rpki-client.org