Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
File:                     2054c310-0e3b-3368-b12e-ea712380783a.roa (raw, json)
Hash identifier:          rJcJnF58IpTkrZV1GaPkTEbDFCkHQcCjgAjMMuMTmy0=
Subject key identifier:   57:74:22:D4:0D:0F:8A:2D:D2:C9:BE:4F:8D:0F:79:D5:BF:C7:15:9A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847ED24CA00EC0EB3E4E7434F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     9009
IP address blocks:        162.246.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:ca:00:ec:0e:b3:e4:e7:43:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=79a2a01f-a6ae-47c9-b225-26730d52afc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:78:07:de:fc:09:20:38:7e:18:77:a5:15:
                    da:35:68:0a:3c:85:d1:a6:87:0d:95:f1:11:3a:0a:
                    78:0f:60:dc:17:ff:82:58:0d:f8:11:12:4d:4a:51:
                    aa:3b:c3:d1:39:24:b4:c9:1b:16:d0:88:f9:b3:47:
                    e1:6b:33:f7:69:3d:02:f6:4a:cc:6c:1d:4d:47:c2:
                    d3:18:28:52:02:e8:d2:b6:86:c4:f1:2f:a3:ac:36:
                    a5:e0:c8:ed:ba:6a:8a:80:4d:4d:40:d9:f7:d4:db:
                    1d:79:d4:3c:09:56:ff:02:7e:93:5a:91:db:f7:a9:
                    42:21:99:44:aa:d0:8b:1c:c7:53:be:6a:76:b2:bc:
                    0c:3c:06:e6:13:3c:ca:c6:dd:4e:58:ad:54:cf:75:
                    b6:9d:21:de:e6:81:32:d3:f1:74:8f:6a:d8:73:a1:
                    3a:c9:4f:c8:58:64:33:0d:18:0b:c9:7a:7a:eb:9a:
                    25:23:04:78:26:33:d3:bc:c2:b7:e0:cb:4f:f3:e4:
                    bd:85:10:d3:85:fa:ac:aa:c3:5f:cd:f3:ca:42:ca:
                    c3:81:70:59:2a:2c:33:eb:0a:c4:05:66:38:2d:f1:
                    71:75:e7:e7:9d:8b:9b:dc:71:0d:72:5e:19:9b:64:
                    56:6d:2d:e0:71:f5:8f:e7:c7:62:f1:7f:f0:82:d1:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:74:22:D4:0D:0F:8A:2D:D2:C9:BE:4F:8D:0F:79:D5:BF:C7:15:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2054c310-0e3b-3368-b12e-ea712380783a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e0:b6:d8:1a:f3:47:9c:60:fa:b7:42:be:0e:0e:6d:03:24:
         8c:a9:d1:a6:df:91:d0:c7:a8:35:5d:46:74:df:10:98:d2:a7:
         c1:f8:2e:97:8a:ed:07:a7:21:1e:99:8e:87:a6:94:ec:b9:3b:
         54:02:23:e5:e1:60:1c:70:e5:38:55:c1:b8:9f:51:93:4d:d9:
         df:7d:1d:93:14:31:a1:58:20:bd:9c:bc:f4:3f:b9:07:5d:1f:
         4e:dd:12:80:b2:d9:18:4e:34:6d:3b:7b:21:8c:93:03:af:7e:
         a5:19:89:49:08:7e:b9:df:26:2d:a6:2d:5b:90:0b:e3:5f:17:
         e1:d4:cb:46:14:cd:3a:f3:82:d8:ef:5f:ac:89:15:c7:4c:4b:
         ea:8f:06:06:e6:dd:ef:ee:49:68:d1:77:b6:c6:d8:37:da:12:
         89:2d:9a:b7:a5:b6:b8:3c:9c:e4:5b:5c:5f:8b:d9:1a:39:7c:
         ab:17:01:01:1c:81:04:ce:a7:29:ab:90:3d:b8:c9:55:c5:53:
         8f:cd:50:03:af:38:38:71:f3:ba:9d:3b:66:97:e6:13:a7:8e:
         8e:cb:6b:9a:91:59:03:48:22:9d:69:ee:d9:62:6b:fa:e3:ce:
         c9:b3:1f:8c:d1:b3:75:fc:35:3e:2b:4b:3a:6f:53:0a:36:ce:
         32:07:73:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org