Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
File:                     36cb5d2c-2469-3a32-877c-bc1354906cdd.roa (raw, json)
Hash identifier:          ftWS2dLjScO42UUl1YSxBA7m11fObsSLfsYsVcnoCAE=
Subject key identifier:   57:C2:AC:52:05:3B:AA:F1:2E:02:19:39:A1:AE:2C:3E:DE:1E:38:70
Certificate issuer:       /CN=83123792-cda3-4a51-83f1-391c845bc812
Certificate serial:       010D0C9F43285847BC2C1027263B3FAA58321500
Authority key identifier: 60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     397914
IP address blocks:        170.117.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:10:27:26:3b:3f:aa:58:32:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83123792-cda3-4a51-83f1-391c845bc812
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=92b8dec9-3ae8-49a2-992a-df345d8fba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c2:58:4a:fa:0a:03:b7:d4:e4:65:b8:7f:44:
                    c7:5e:8e:9a:fc:f3:f3:a7:e7:ca:52:75:c6:12:de:
                    db:4f:17:13:0c:a9:25:fd:59:6a:d2:82:ef:bd:33:
                    d1:1e:9a:4c:d2:f5:6d:9b:5d:a5:f1:f1:de:fb:a2:
                    cf:84:70:17:e3:8d:da:a4:53:2c:58:3f:e9:9c:b8:
                    1b:2c:7a:4a:8e:3d:65:43:22:0c:29:f7:d4:54:18:
                    06:c6:d3:df:9d:f6:5d:84:52:be:82:88:80:c3:e6:
                    f1:50:ea:1c:8b:fe:60:e1:4d:94:ec:6e:17:d9:89:
                    f1:ef:c6:ae:20:c7:74:0d:be:86:78:8e:ae:e5:78:
                    f1:36:a0:5b:d9:90:3e:91:8b:1d:c4:36:25:83:1d:
                    17:26:d4:3e:02:a7:a2:51:98:02:a8:bd:98:18:4b:
                    94:f3:be:63:a5:b8:90:e9:d4:e5:24:b9:1f:10:b9:
                    3c:6b:a4:b6:09:f0:27:3d:ee:f2:bd:f5:87:88:1d:
                    06:a9:9c:92:83:ff:de:e7:a9:79:c1:23:2c:72:08:
                    27:4e:4c:74:f3:6d:28:6b:f8:85:1d:8a:51:a4:81:
                    4a:79:0e:c4:52:ab:97:7e:ea:d0:01:49:c5:c9:9a:
                    1d:ff:56:48:bf:9d:fb:ac:22:f9:3b:b3:d6:50:90:
                    22:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:AC:52:05:3B:AA:F1:2E:02:19:39:A1:AE:2C:3E:DE:1E:38:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/36cb5d2c-2469-3a32-877c-bc1354906cdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812/83123792-cda3-4a51-83f1-391c845bc812.crl

            X509v3 Authority Key Identifier:
                keyid:60:48:6D:F4:76:69:54:C8:BA:5F:7F:64:AA:DF:7B:64:62:DD:47:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/83123792-cda3-4a51-83f1-391c845bc812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:93:a2:f6:f0:7b:61:fa:22:2e:09:f8:f5:bf:a4:c1:b1:
         f8:30:9e:9c:37:90:1f:e7:f4:b3:54:71:a5:27:84:f6:d4:62:
         e1:fe:7b:3c:37:f7:68:06:b7:37:e9:0a:3b:c3:ca:ac:4a:8f:
         9a:65:b8:a8:22:ca:8d:5a:2b:87:4a:9c:25:44:13:4f:c2:33:
         1d:fa:9b:15:39:07:bf:ee:94:02:ac:6d:27:27:9a:a3:46:4e:
         f7:c8:92:37:8f:8e:71:a1:31:9c:b9:14:b7:53:5d:4c:38:a1:
         41:a4:06:2c:37:c6:31:30:4a:b5:e9:b4:ed:15:f9:c4:70:20:
         b1:6b:c7:c9:12:e3:ec:a0:01:c2:57:e8:da:bc:dd:d0:8b:aa:
         38:54:6a:84:70:78:76:a5:58:74:86:5a:37:75:a3:dd:33:cf:
         1d:a0:c1:f2:07:28:16:62:58:a6:b6:22:bd:d0:44:54:64:3d:
         60:8a:85:3b:16:39:c4:e3:5d:e8:ba:6c:f9:36:69:c9:10:d0:
         e0:68:63:96:98:20:bb:ca:55:92:c0:38:1b:52:09:de:6b:97:
         a9:42:2c:38:c3:e8:7f:98:3f:81:62:55:2f:0b:4e:19:f1:bd:
         63:ba:4c:e0:f2:ed:b9:29:87:20:83:f7:ab:31:2b:92:a8:6f:
         34:c8:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:11 2024 by rpki-client on console-fra.rpki-client.org