Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
File:                     1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa (raw, json)
Hash identifier:          S9YnPFCpcmXRuWqBIJ1PdP4Y0rcr1kNtd7g8rHXG01c=
Subject key identifier:   5A:53:B3:10:20:DE:B6:76:49:E9:13:E1:67:E3:9C:70:A5:7F:5E:DA
Certificate issuer:       /CN=0ad2b3c4-a64c-4afd-b0df-103361339550
Certificate serial:       010D0C9F43285847F4A740B0E19EF2ACBD085080
Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa
Signing time:             Thu 21 Nov 2024 18:34:11 +0000
ROA not before:           Thu 21 Nov 2024 18:34:11 +0000
ROA not after:            Wed 19 Feb 2025 18:34:11 +0000
asID:                     11287
IP address blocks:        163.182.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:a7:40:b0:e1:9e:f2:ac:bd:08:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550
        Validity
            Not Before: Nov 21 18:34:11 2024 GMT
            Not After : Feb 19 18:34:11 2025 GMT
        Subject: CN=f0c90077-66fe-4764-9460-3437b2316862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:c6:71:fd:52:83:f2:ec:ec:ca:91:04:a7:
                    9b:32:cf:e5:a9:68:ef:a6:42:0a:9f:8c:ff:d5:75:
                    43:e7:22:e0:a7:76:2d:7d:af:17:9d:7e:4c:cc:5d:
                    e0:99:2c:13:76:fe:f5:24:1f:10:83:e7:27:38:f7:
                    76:5f:e8:4d:e3:61:96:4a:ad:f1:fa:63:1b:17:20:
                    ae:2a:27:df:db:ed:40:8b:44:70:a3:77:a1:e8:9d:
                    43:be:51:67:88:06:04:e3:e5:52:f1:d8:dd:16:23:
                    67:36:5a:89:fa:92:2e:0b:03:a9:67:c7:f3:1a:10:
                    d8:6d:67:d5:24:80:5e:18:2a:86:4d:3d:77:4d:9c:
                    57:89:26:1f:64:d5:ef:a7:0c:73:af:7d:3a:2e:8d:
                    83:d5:d2:ff:3a:02:90:e8:3b:0b:13:39:a4:74:4a:
                    9c:cb:6b:c8:a0:b7:a6:ab:4d:8d:d9:7d:90:d8:57:
                    05:45:22:64:f7:41:bc:b6:98:ea:de:99:7c:8a:9a:
                    b1:86:42:08:15:09:a4:95:f4:2a:7b:94:9e:3b:93:
                    9e:4e:41:79:93:df:32:c2:98:d4:15:22:fe:5d:b3:
                    7e:cf:01:19:1f:08:cd:20:21:c0:ee:bd:bb:8f:90:
                    1e:99:a8:58:66:8a:2f:64:f9:51:af:78:ff:a1:3d:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:53:B3:10:20:DE:B6:76:49:E9:13:E1:67:E3:9C:70:A5:7F:5E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/1a0530be-6c1f-39e4-b65b-14fd8f320b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl

            X509v3 Authority Key Identifier:
                keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.182.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:99:64:ba:5f:ca:78:3a:33:e0:a0:fc:6c:cb:85:29:d8:9f:
         aa:1a:57:55:24:a5:94:fd:a7:1b:84:ef:cf:ca:a4:a6:6d:a2:
         90:37:22:7c:49:33:f4:91:d6:ed:66:d1:a0:89:49:3b:4a:08:
         cd:29:a1:be:e6:f2:dd:97:d1:a5:c1:90:25:2a:a4:f1:67:84:
         2d:b6:db:0d:be:78:ad:24:c4:88:e9:fd:bb:bc:55:41:66:84:
         ce:5f:95:db:ba:89:26:5d:a9:d5:f7:ce:e5:b5:bf:da:5d:44:
         8f:29:5f:27:8e:76:e5:b1:f1:c4:a4:d9:c8:60:fc:1b:a0:98:
         f2:31:f4:2c:21:22:64:01:60:bb:3e:e1:a7:3b:d7:6f:b6:46:
         44:8b:aa:b5:b7:35:0e:13:d8:f2:12:b8:f2:0c:5b:bb:6d:a2:
         e6:67:4f:90:83:aa:43:c9:d0:8b:48:8a:57:6e:ac:52:fc:ec:
         00:34:fb:6c:ed:7f:76:41:ec:7b:70:e3:b0:99:b7:0d:cf:59:
         0b:89:e7:e8:b1:32:48:2d:83:fb:ca:76:0f:07:f1:48:58:6b:
         e6:6a:26:df:98:1a:b3:80:81:f1:bb:55:38:5b:c5:c0:c4:8c:
         90:b8:27:8e:80:b6:92:8e:55:16:b1:34:c5:10:d5:b2:ee:26:
         09:3e:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:18 2024 by rpki-client on console-ams.rpki-client.org