Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa
File:                     2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json)
Hash identifier:          GLdFn/TZ09qznu/UFchvlzSIvgGJdVVB80Q2jF1ZbY4=
Subject key identifier:   BE:D6:C1:FA:63:78:47:F2:64:35:F5:0D:C8:82:A0:4B:2F:A2:77:8C
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F43285847768995E9D66A4DC8FF3FE280
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa
Signing time:             Mon 07 Oct 2024 14:22:33 +0000
ROA not before:           Mon 07 Oct 2024 14:22:33 +0000
ROA not after:            Sun 05 Jan 2025 15:22:33 +0000
asID:                     398210
IP address blocks:        168.220.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:89:95:e9:d6:6a:4d:c8:ff:3f:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Oct  7 14:22:33 2024 GMT
            Not After : Jan  5 15:22:33 2025 GMT
        Subject: CN=eea92ae4-750e-4ba7-b5fa-72e43fc82639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:96:ae:28:2b:7d:80:42:a5:f8:0f:5f:29:3d:
                    c1:f6:21:f2:03:17:8c:24:4b:66:b5:d3:eb:e8:0c:
                    c1:ea:63:fd:13:96:57:28:ab:21:03:fb:1d:5d:fe:
                    7c:16:89:e0:e2:f3:06:03:3f:20:fa:80:09:24:4b:
                    95:69:8c:aa:69:9b:4e:ab:8d:b2:70:40:22:4f:b1:
                    48:60:7e:f1:c3:d8:e2:08:cb:81:c8:5a:20:f4:72:
                    37:ad:07:49:00:12:5e:16:b2:57:5e:63:a0:85:fe:
                    07:da:6a:05:5b:c2:95:b7:17:64:8c:f1:45:60:ed:
                    35:cd:78:a6:af:8f:32:7a:5c:23:77:dd:d5:3b:4e:
                    94:15:c4:25:6e:ec:05:27:89:53:74:65:a9:0d:85:
                    2d:65:10:74:b4:d1:a8:cd:cc:1b:09:11:46:56:b0:
                    1f:e8:08:77:7d:b7:08:b6:92:e7:c7:51:5a:16:56:
                    d1:54:7b:34:44:8c:6e:a8:7d:03:52:01:fe:7b:c0:
                    ad:75:e9:f6:df:bd:91:29:f4:af:97:47:4a:73:a6:
                    59:d7:fa:67:d5:75:50:1e:65:49:7e:06:e7:2c:2b:
                    4c:4c:8c:6a:43:f0:ca:c6:92:8c:df:91:5f:8d:70:
                    89:83:a2:6e:64:13:82:60:4e:58:4a:c5:42:e8:5a:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D6:C1:FA:63:78:47:F2:64:35:F5:0D:C8:82:A0:4B:2F:A2:77:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:42:13:f6:ba:36:34:01:d6:b7:dd:6a:3d:7d:55:8f:0d:8a:
         31:81:b7:aa:56:53:1a:1c:a6:3b:4b:76:9c:f6:03:29:93:0c:
         35:0f:e4:b3:43:29:cb:25:7a:8a:c1:cc:a9:e0:ad:77:4a:fd:
         35:9d:2d:a6:d9:0c:87:59:4d:d4:db:1f:cb:c8:bd:32:59:c5:
         b7:af:95:99:85:9c:9e:b1:60:76:28:72:ea:32:55:b5:2a:9a:
         86:83:56:11:c0:5b:2b:99:75:87:2b:81:81:13:b5:da:d0:11:
         4e:5b:7e:b3:a8:d9:97:9e:1a:e3:9e:08:17:c6:d6:42:98:e1:
         2d:25:ad:e1:aa:14:16:cf:ce:67:4a:f9:09:f2:c4:62:c9:ae:
         4a:73:ae:98:ed:5a:2b:af:09:b6:ce:70:49:fb:63:61:75:88:
         0c:d2:5c:e7:12:7d:02:fd:48:b4:b9:f0:ac:e5:0a:cb:7e:d5:
         fe:a6:a3:9e:f5:3b:3e:bc:ea:cc:55:12:07:3a:8f:fc:cf:2d:
         8b:0a:f7:6f:52:be:d6:ec:96:20:69:ac:ee:ee:b9:0e:c7:be:
         da:cc:0c:8d:7d:3e:60:ea:18:88:31:4d:00:0c:ca:6c:d7:48:
         b8:e6:d2:0c:2e:76:47:35:91:25:bc:65:4b:fb:cd:6a:c0:f4:
         fe:69:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:23 2024 by rpki-client on console-ams.rpki-client.org