Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
File:                     c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa (raw, json)
Hash identifier:          hoS7yD1PjKXBds/62KUDm76fx81XsrP12dlVdyXb1wg=
Subject key identifier:   39:76:86:95:6C:E2:81:9F:17:6F:D2:F6:6A:1A:54:57:41:AF:59:7C
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285847D404A436AE518AD264CD8740
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     19886
IP address blocks:        171.162.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:a4:36:ae:51:8a:d2:64:cd:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=bb52ce73-9621-4fc5-867b-e924d8f0aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:40:6e:cf:32:a7:82:cd:aa:fb:15:c8:cc:a7:
                    08:1d:e5:d5:bc:57:bf:0e:9e:1e:12:49:df:09:bf:
                    6e:27:a1:30:1a:81:8a:88:2a:03:08:a2:ca:3c:7b:
                    08:f4:40:36:1e:61:ef:6a:8e:ee:05:f1:c2:e5:1c:
                    9d:3e:db:09:74:0e:c2:f9:1f:44:6b:b7:a9:2a:5f:
                    a4:f6:3b:d4:fb:18:b8:aa:7c:5c:51:7a:42:c2:40:
                    a8:09:8f:39:fd:fe:e8:d3:8f:f5:f3:bb:25:be:02:
                    52:f9:f2:de:cd:fb:94:91:df:7d:a6:c3:d7:16:f2:
                    4c:ed:b0:52:ee:f2:1a:3a:0a:9d:d8:54:2c:47:1c:
                    dd:aa:8f:11:76:fb:d9:a3:8b:e4:9b:c6:b1:bb:a7:
                    9c:d7:3c:51:21:ff:49:d3:05:3d:63:8f:0c:d9:f8:
                    25:0e:ae:7c:b4:df:75:e5:92:b4:f9:b6:f7:08:c5:
                    c6:78:66:8d:23:c6:63:f9:c7:2a:98:62:5d:77:f7:
                    78:12:7e:a7:a7:78:63:59:33:fe:af:13:3f:c1:4c:
                    a4:2f:ec:40:82:cf:3e:42:84:5c:9b:b8:eb:65:41:
                    1e:b9:41:08:b1:98:82:5a:18:91:69:4f:2f:f8:ae:
                    68:b2:78:4c:b4:71:ba:0b:dc:c1:7e:dd:fd:28:eb:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:86:95:6C:E2:81:9F:17:6F:D2:F6:6A:1A:54:57:41:AF:59:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/c1e8c2d2-160f-3990-a9c7-d89f744505a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:31:18:83:e1:4b:cf:0a:5a:3a:01:41:ac:1c:ad:fb:06:36:
         47:77:04:eb:1f:17:42:7a:c5:ac:5c:c2:10:8a:1b:72:03:82:
         30:55:83:9c:91:8f:94:61:53:55:9b:e0:d3:74:08:36:2b:50:
         1f:f0:9b:dc:7c:91:73:7b:63:33:0a:f1:b0:e1:d0:a4:a3:9c:
         3d:75:c6:c5:1a:dc:09:d7:ca:e6:6c:4e:ac:37:da:92:54:f5:
         98:d5:f5:df:2b:d6:19:ae:dc:e4:72:0a:ea:21:85:e3:0f:89:
         cb:40:9c:a1:8c:43:09:7b:3c:28:11:4f:c6:f9:c3:fe:61:d1:
         a4:c9:2d:84:50:c2:60:72:db:6f:0e:4e:ae:b4:61:fd:b5:3b:
         e7:da:39:1c:36:ed:d7:3d:d3:3a:a1:9e:29:08:f1:dd:b4:06:
         44:2c:d0:aa:1d:21:44:c6:2e:74:44:0d:ce:41:9f:51:34:ea:
         2b:b5:45:ea:fd:ee:03:13:2a:dc:38:5c:70:78:28:24:7f:c7:
         23:a2:0b:77:73:70:46:be:dd:ef:80:27:e0:41:28:5e:2c:68:
         26:f5:14:e1:80:8e:7d:54:d2:49:1e:42:d1:74:9b:5c:9f:a1:
         f5:68:37:c4:00:ce:c4:2b:25:2b:29:c3:39:25:df:80:a3:45:
         d7:4c:4c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:16 2024 by rpki-client on console-ams.rpki-client.org