Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/416aa955-ef8a-3e95-857c-b4902b59687f.roa
File:                     416aa955-ef8a-3e95-857c-b4902b59687f.roa (raw, json)
Hash identifier:          nSFhQr/rXqprTZgtBT2eh5/xwG1yxlhWj6Q7Omg1VII=
Subject key identifier:   20:82:0B:17:9A:1A:63:0E:0C:23:18:B7:66:6F:07:DB:BC:91:37:18
Certificate issuer:       /CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
Certificate serial:       010D0C9F43285847F4EF493DE92D7734D9FDAE40
Authority key identifier: 25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/416aa955-ef8a-3e95-857c-b4902b59687f.roa
Signing time:             Thu 21 Nov 2024 20:59:19 +0000
ROA not before:           Thu 21 Nov 2024 20:59:19 +0000
ROA not after:            Wed 19 Feb 2025 20:59:19 +0000
asID:                     20473
IP address blocks:        192.104.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:ef:49:3d:e9:2d:77:34:d9:fd:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e1eff5-1423-4100-89f4-3340efd8f1ea
        Validity
            Not Before: Nov 21 20:59:19 2024 GMT
            Not After : Feb 19 20:59:19 2025 GMT
        Subject: CN=d276969c-7f6a-43c1-9f23-ea32a4f75d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:44:70:e7:74:84:87:70:d6:09:8b:fd:41:d0:
                    43:84:91:80:5d:82:4a:4f:2b:d3:ed:b2:ec:71:06:
                    73:f8:06:3d:73:95:4e:bd:56:07:6c:2a:3a:95:d0:
                    37:af:98:85:dc:da:d0:42:43:82:3e:e1:7a:33:db:
                    41:3e:61:76:c3:33:0d:23:e5:56:55:6a:44:0e:d9:
                    4a:7f:78:dc:b8:0e:e2:7d:9f:ad:a6:71:4f:ee:91:
                    c0:ba:f8:86:7a:37:a1:4e:98:ec:ce:8a:7d:1b:8c:
                    3c:b1:e2:1f:db:92:d2:d6:09:d7:2e:6d:5c:8b:b2:
                    4f:b2:d7:e7:15:b8:38:f1:15:1d:f7:c4:ea:1b:f6:
                    15:88:ef:b1:e6:77:db:f8:46:69:81:70:7c:2d:b6:
                    fa:90:aa:2e:ac:55:87:b8:c2:c2:49:0c:6f:17:4c:
                    07:7b:80:45:01:f0:7a:e8:ba:63:97:4b:f1:06:54:
                    78:f5:00:15:3a:f3:1b:f7:63:6b:58:d4:73:47:2f:
                    7d:4f:d3:ee:89:22:49:c0:35:bf:74:5d:5e:6e:71:
                    13:60:46:5c:59:2e:b5:f5:59:44:89:23:4b:3b:4f:
                    ee:9c:84:e9:95:b2:e9:30:a2:d9:1d:93:c5:53:48:
                    f2:db:1e:b7:55:f1:e9:74:53:28:4a:4c:3e:b1:be:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:82:0B:17:9A:1A:63:0E:0C:23:18:B7:66:6F:07:DB:BC:91:37:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/416aa955-ef8a-3e95-857c-b4902b59687f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea/32e1eff5-1423-4100-89f4-3340efd8f1ea.crl

            X509v3 Authority Key Identifier:
                keyid:25:40:2E:DA:F7:51:96:33:82:42:E8:DD:64:00:E5:D4:11:88:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32e1eff5-1423-4100-89f4-3340efd8f1ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:df:c0:9d:ea:be:0e:11:dd:89:a0:c5:b5:f5:bb:73:d3:e2:
         70:fc:0a:34:58:3e:f9:8c:83:4d:3e:c6:2d:fd:46:96:23:54:
         f7:23:2e:4e:be:1f:fe:cd:cc:7b:8c:24:ee:9f:2c:ec:0b:43:
         74:e7:e5:db:9a:32:64:a7:b3:9b:d7:76:f1:93:d4:78:5b:68:
         9c:1d:a7:34:2f:e6:d6:0c:67:a9:61:33:19:e6:b9:0d:c1:9a:
         bc:fe:b4:11:1e:3d:f2:d7:45:d3:10:0e:ed:3e:26:ba:88:07:
         a0:2a:37:0e:e0:0e:3e:80:dd:5a:00:d9:e5:32:cd:bc:a6:78:
         b1:97:7e:6c:ed:7e:5c:27:2d:9a:30:7b:c1:d7:8c:dc:6e:4c:
         d9:ce:85:b7:ef:43:ef:f6:e0:29:0b:47:ff:b3:76:02:09:91:
         0f:bf:8f:b4:dd:75:6b:5a:c0:01:7c:d4:6c:a4:15:54:3d:23:
         d7:2c:d9:5e:74:3b:d5:0c:46:51:21:55:ad:ab:e6:d2:fc:08:
         dc:74:bc:0b:3d:71:51:a9:a9:6d:b2:5c:0e:7c:8e:fe:2a:e1:
         96:76:1c:da:d6:fd:34:97:6b:c7:7b:ab:68:c5:91:ca:8f:04:
         3d:43:d5:5a:cc:e8:69:77:5a:df:a5:86:87:34:ad:0e:de:3d:
         ed:df:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:29:42 2024 by rpki-client on console-ams.rpki-client.org