Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
File:                     9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json)
Hash identifier:          tFt72YJnhA/G3AF2sufuv9Szgzh7KkCt4iXa6ibqKSU=
Subject key identifier:   FD:EC:A2:2C:CE:EF:1F:11:40:7E:21:81:70:A8:34:40:1F:54:FC:F3
Certificate issuer:       /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial:       010D0C9F43285847ED24BC18F411B700A085A940
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     16729
IP address blocks:        159.55.213.0/24 maxlen: 24
                          159.55.214.0/23 maxlen: 24
                          159.55.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bc:18:f4:11:b7:00:a0:85:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=5b6c860b-8b59-4df8-bf21-b1e8a0305159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:b9:d8:87:1b:22:0c:8a:7c:2f:80:19:a2:
                    b4:e9:9f:a9:ea:35:b5:4e:ed:bb:93:f0:4d:3e:4b:
                    4a:08:55:36:29:04:8d:a5:ee:73:42:ce:81:bf:13:
                    e4:04:90:09:c8:4f:5a:55:94:21:63:f1:a7:ab:37:
                    9d:fd:de:71:e4:eb:69:1a:7f:26:65:c2:c0:5a:7c:
                    09:8e:e3:11:7d:22:d7:27:47:df:de:4b:e3:ac:03:
                    c3:02:a6:13:a1:1c:b0:5b:f5:a0:cc:99:94:13:b0:
                    94:b1:b1:8a:e0:1b:3b:22:48:6c:a2:d6:38:e6:ca:
                    14:57:05:17:ed:bc:5c:a0:f0:00:82:57:96:82:9b:
                    16:f1:5b:34:a1:39:0c:e5:86:7e:48:7e:b0:72:b0:
                    a8:8b:9e:f6:7c:94:ce:a8:9b:dd:b8:6b:f2:67:f3:
                    08:14:d6:78:23:9b:d9:dc:aa:3b:fe:51:d1:88:0e:
                    4b:3d:a6:05:34:49:1c:35:17:bb:c8:10:29:c8:4c:
                    2e:8c:b3:a2:e1:fd:77:b0:b2:b8:ab:df:92:03:0f:
                    1c:8c:a4:75:8b:2c:f6:7e:ca:f4:4a:a6:10:2d:17:
                    e2:e7:e5:cf:5c:bc:35:45:da:ac:a2:b8:67:1c:99:
                    f6:cb:5a:62:85:43:5a:de:e6:cc:2d:90:66:d5:fc:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EC:A2:2C:CE:EF:1F:11:40:7E:21:81:70:A8:34:40:1F:54:FC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl

            X509v3 Authority Key Identifier:
                keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.55.213.0-159.55.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:30:5a:c3:8e:40:13:53:74:3e:40:68:32:51:22:3b:f5:7a:
         e8:f7:a1:c9:0c:57:b3:fa:84:7f:66:ac:1f:7b:52:48:ab:95:
         57:ac:0f:67:a8:ba:02:d9:a3:3b:72:c1:3f:96:af:4c:0c:f6:
         ff:10:8f:82:24:19:4e:f7:15:7b:22:bd:33:71:0c:7e:3c:f6:
         31:0a:6d:ac:91:fb:b3:68:2f:5e:bc:38:ff:99:c1:43:94:51:
         98:98:a8:87:3f:9d:67:ea:5a:72:3e:2e:13:fb:0c:ea:5f:61:
         df:2c:c3:41:c1:b6:ec:97:6e:00:7e:a4:bb:f0:4c:a7:31:df:
         0a:df:45:4a:10:ef:75:32:dd:72:1a:1e:ea:f3:05:4e:88:3b:
         ff:4d:9d:fb:00:34:bc:d1:01:04:46:4d:42:9f:f1:0a:08:5f:
         88:b3:75:08:52:6f:d3:ad:a0:76:40:40:59:a9:45:97:6f:0c:
         0c:cf:d9:aa:25:8c:17:db:08:34:ec:c7:be:e6:fb:1e:4e:48:
         3b:e3:08:dc:be:08:f4:62:8f:93:68:00:85:33:58:fc:66:84:
         56:fb:ed:83:b0:b9:0d:9e:e6:3d:9b:e9:56:0a:35:d3:3b:e0:
         80:c3:78:d9:e9:e6:e0:55:e1:61:1f:ea:1e:ae:0b:56:ba:c5:
         4a:1a:84:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:52 2024 by rpki-client on console-fra.rpki-client.org