Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa
File:                     a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa (raw, json)
Hash identifier:          UXtuQNxe4uzit4AuZShq2j8MYTXZ13W7T21TZejN1zY=
Subject key identifier:   D0:1F:79:5A:DE:B7:0A:F3:CB:3D:8E:77:56:ED:34:E2:08:01:33:36
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F43285847EFEF8C990D13792C4BE8C600
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     17161
IP address blocks:        205.156.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8c:99:0d:13:79:2c:4b:e8:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=4edc4b19-bb42-4dbd-bc44-9159fd54aa01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:9b:87:8f:d2:eb:ca:45:40:63:2d:fa:c7:
                    67:2d:37:e8:4e:5d:4a:a5:b9:df:16:4d:5b:28:a5:
                    43:36:89:28:41:e9:33:20:3f:29:56:63:30:85:71:
                    69:3a:f1:5d:1f:d9:f3:23:d8:0d:9e:57:ac:41:8f:
                    5c:ef:30:e8:13:b1:a9:0a:f3:8a:05:04:65:91:9b:
                    4e:66:ff:60:67:59:49:26:28:a1:f4:22:de:16:38:
                    0e:65:59:fc:8f:b4:c2:19:e3:a8:1c:08:38:e8:71:
                    93:68:2c:9b:22:fc:7a:a0:e4:69:56:56:00:b2:cb:
                    8c:c5:23:47:30:3f:21:e8:cf:5e:0e:a8:f9:7b:f8:
                    36:a0:f7:51:87:4c:1c:c6:9a:31:6a:93:3f:f7:cd:
                    58:90:9f:8b:54:1b:77:36:07:ed:95:7d:6b:7a:31:
                    95:36:60:21:de:c7:df:f8:29:ae:37:f9:7d:92:bc:
                    91:5b:fb:ed:02:20:7d:5f:22:0f:68:c3:c8:45:f8:
                    69:ed:c2:a3:4a:ad:f3:a3:08:52:4d:49:7c:ac:ec:
                    6c:89:00:e7:8d:56:49:c8:ba:23:16:27:c1:33:ed:
                    bd:eb:7b:8b:27:b4:22:8e:8c:e0:e1:60:ce:7d:fb:
                    14:1c:f3:85:bd:7c:0d:ba:bb:b8:1e:57:69:b4:fb:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:79:5A:DE:B7:0A:F3:CB:3D:8E:77:56:ED:34:E2:08:01:33:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/a2f030d3-c47c-3d37-bea3-00ec7bfde892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:ca:e1:ca:80:cc:e5:b9:3f:a4:f6:00:b7:65:55:41:b3:
         e5:1c:a9:e6:db:9d:94:fa:58:7e:fb:68:02:0d:fa:f8:7c:1d:
         d4:a7:7d:ef:70:b8:c1:ae:3a:3f:65:7a:ea:35:25:4a:1c:2e:
         ab:33:5c:22:be:ea:5e:cd:7d:d7:f5:f0:a9:88:77:39:2e:b9:
         52:0e:5a:cb:28:03:9d:c2:42:00:44:23:77:a2:56:58:93:e0:
         fd:30:02:63:54:8e:a2:e2:14:c7:53:66:9a:2e:38:e2:c7:20:
         de:16:03:b5:70:de:7d:d8:3b:ae:14:3c:99:bc:89:92:9d:4e:
         d4:fc:1b:6b:75:e0:48:a2:16:a3:2d:dd:c1:d9:06:0a:c2:6a:
         26:c8:ce:eb:6f:90:e0:df:d4:bb:a5:75:5e:5b:7d:d2:8d:f5:
         1f:ad:97:83:55:a4:02:08:0b:30:a9:c9:2c:e0:e2:48:5c:ea:
         ba:11:29:92:b2:bf:20:6c:c2:3a:8a:aa:4a:33:33:d3:83:ec:
         f6:65:73:fa:6e:f7:c4:d8:b0:51:87:7a:c8:83:fd:3d:a4:d1:
         6c:ba:1e:46:ed:83:6f:29:a1:3b:4c:64:52:79:bb:28:1f:a1:
         e3:c0:a7:4b:8f:f0:70:37:9a:48:ec:3a:54:42:f6:3b:2e:7d:
         fe:c6:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:16 2024 by rpki-client on console-ams.rpki-client.org