Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a2e01acd-8061-3ede-b2a9-1e489622762f.roa
File:                     a2e01acd-8061-3ede-b2a9-1e489622762f.roa (raw, json)
Hash identifier:          lFF+tDPErPUFxeWiWAUignqpMplsVcHh3J9z/7CpqQk=
Subject key identifier:   E6:EE:07:CE:27:EA:96:30:D5:84:EF:91:A4:3C:79:82:C0:69:13:BD
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858479AABEDA5933D255397D09300
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a2e01acd-8061-3ede-b2a9-1e489622762f.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     62894
IP address blocks:        164.116.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ed:a5:93:3d:25:53:97:d0:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=49752ee2-5165-4e1e-bcfc-ab339769b34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:a5:93:50:a1:0a:a2:51:25:95:96:5d:79:
                    81:02:3c:a9:cb:28:9c:bd:5e:fa:4f:57:dd:3b:4b:
                    5c:3d:ad:47:7a:22:e8:cf:1d:23:88:86:95:80:69:
                    a8:8d:3a:39:1f:99:a6:57:a6:21:88:64:2f:61:e0:
                    d6:3a:0d:20:a6:b0:0b:aa:4e:ff:59:71:ad:f4:0c:
                    1b:2e:10:67:ae:c7:a2:3a:00:0d:cb:4a:ec:20:c1:
                    61:d1:d0:52:ff:5a:24:72:02:68:9a:93:2a:4a:e6:
                    81:ca:3d:21:5a:e8:1f:bd:54:51:26:9a:47:0d:92:
                    3b:6e:f9:58:aa:7e:27:eb:83:c0:18:27:98:3a:6c:
                    c9:e2:f3:bc:56:5e:fa:84:ba:11:1b:2d:40:79:6e:
                    48:41:e7:a1:37:ef:a3:9a:46:62:38:1c:38:81:5a:
                    d7:dd:36:61:2d:11:34:44:d9:a1:ee:f5:09:b5:f0:
                    aa:97:89:b0:10:18:8f:36:94:51:ab:7f:bd:06:ab:
                    ae:a7:03:d2:36:fc:22:47:28:a2:75:7d:03:57:4a:
                    d2:55:2a:20:01:6e:1e:90:18:8c:31:83:5d:94:60:
                    33:6c:a9:54:1d:c5:25:1d:72:1a:9f:23:6f:0d:9b:
                    68:d2:7e:4c:5e:72:38:aa:70:23:52:8b:5b:75:80:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:07:CE:27:EA:96:30:D5:84:EF:91:A4:3C:79:82:C0:69:13:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a2e01acd-8061-3ede-b2a9-1e489622762f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3a:7d:37:93:d5:13:f7:13:05:51:5e:d0:32:31:12:ae:a2:
         8d:d9:8a:73:11:73:e4:8e:7d:34:15:62:9a:a5:50:6c:75:b7:
         a2:c1:3d:65:47:a9:06:fc:e8:b8:cc:81:ce:d3:3d:46:e2:21:
         df:2a:c5:fd:d9:de:92:1b:0a:e1:d1:ba:c2:ab:69:73:13:90:
         bc:56:39:11:7c:4e:3b:b3:0f:5b:8d:b9:3b:20:72:fe:61:3d:
         87:d4:de:48:8a:88:73:8a:f8:bb:79:93:be:ad:4b:9e:b5:9d:
         21:bf:b1:53:5a:42:3d:1b:61:ea:2c:3c:cd:50:dd:c2:ad:06:
         f3:56:70:c3:e2:40:09:f3:d6:c3:3d:38:cc:02:61:bb:a5:db:
         bc:7b:42:e2:3a:70:39:42:3c:82:a5:1c:8d:d8:8c:9c:f1:4a:
         fc:9f:85:ea:e7:a5:f7:74:21:9d:68:7f:f3:9d:9b:37:89:1b:
         f5:9d:c7:da:3d:5d:d1:2e:66:f7:e1:e2:75:57:30:50:00:25:
         94:f3:e2:87:d6:fe:dd:fe:53:7d:7a:39:48:9e:09:92:37:e3:
         bc:27:20:6d:39:bb:22:85:76:5a:00:63:bb:d7:df:e1:c5:7c:
         fb:31:b1:27:5e:ae:79:83:1d:9c:97:31:f4:22:20:9d:36:93:
         be:ad:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:53 2024 by rpki-client on console-fra.rpki-client.org