Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
File:                     f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa (raw, json)
Hash identifier:          jcRjCbzVjr0Wi6Svo0bADPzgkIMOala6CcNbiRosUao=
Subject key identifier:   0F:D3:8B:82:C5:D8:B0:B8:BC:08:07:D4:94:1A:80:5F:BA:A1:BD:7C
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584793B124B76A09CB7247BD2540
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     3477
IP address blocks:        170.110.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:24:b7:6a:09:cb:72:47:bd:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=06be2fbb-d114-4ecd-85a7-8de871f35aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:a6:0b:ea:07:03:37:f1:55:14:05:6f:7c:
                    a7:c7:89:63:34:43:bf:d5:8c:0f:25:8f:88:15:3c:
                    d4:9f:69:78:79:38:f5:ad:75:fc:03:92:9d:7c:2a:
                    11:3d:36:2a:e3:12:b9:13:d2:37:e1:74:5b:3e:c7:
                    0a:b0:86:8d:c1:63:93:d1:1d:66:ff:b6:9a:a0:84:
                    cf:03:b6:85:1b:32:b7:bc:ae:26:16:30:4e:a4:0e:
                    07:5c:99:e0:ee:22:87:90:76:78:b1:44:33:17:44:
                    b3:dc:ce:65:c4:11:b5:10:ab:0f:2c:0f:cb:cd:a9:
                    6b:ae:13:92:0a:a7:8c:0d:96:7b:ca:f7:e6:ac:5a:
                    01:eb:c3:be:eb:8a:1f:97:78:29:ca:07:b0:9e:2b:
                    e5:9c:64:d9:98:11:39:40:29:1a:f3:70:05:e0:0c:
                    44:b8:b4:5b:88:58:ea:22:2a:1e:16:8d:9c:62:01:
                    82:f5:7f:43:dd:80:91:bd:3c:39:f1:2d:91:56:d3:
                    73:03:ab:e6:33:72:41:a4:97:b0:79:87:98:6c:fd:
                    51:ea:55:56:1a:39:87:37:45:a7:65:6c:97:07:bb:
                    76:63:70:fb:b8:db:ca:bf:ca:6c:68:67:c5:a9:80:
                    5b:1c:c3:97:1c:d0:50:fd:81:61:cd:ce:bf:98:a2:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:8B:82:C5:D8:B0:B8:BC:08:07:D4:94:1A:80:5F:BA:A1:BD:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/f36b0339-fe5b-33c5-8705-158a4e0e99ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:7a:ba:14:e0:7d:10:bd:65:fe:f6:9b:5a:25:b2:7b:89:d0:
         eb:a8:40:e7:5d:0e:3d:7e:00:d5:54:9a:7e:57:a0:2e:d8:43:
         a1:ed:1d:58:8a:bd:50:8f:2a:b0:85:9e:af:dd:97:5a:7a:21:
         8c:cc:f9:cc:c3:ba:6d:79:37:75:d3:33:3f:fa:27:80:82:3f:
         bf:b7:6e:ef:0e:ed:87:d6:97:f2:e6:a1:5e:ac:40:8c:91:33:
         f2:bc:00:d8:47:39:c9:aa:57:16:c0:98:7a:82:d7:8f:68:2a:
         2f:fb:0a:b3:6e:3a:04:ed:68:56:92:af:d0:c7:15:68:17:f5:
         22:07:d5:ad:ba:d6:a1:93:a1:44:21:e5:8f:59:f4:34:ec:32:
         2a:f5:89:73:0f:29:a9:58:54:43:ed:3f:a7:3e:92:97:8a:7f:
         d5:5c:b1:5c:c9:5e:35:cb:3f:97:33:18:06:94:1a:90:8c:f4:
         7e:c0:5f:c0:9e:84:e9:3f:5d:2b:9a:a1:e8:5e:d5:48:53:16:
         07:0e:96:cd:07:f9:5c:55:d3:2b:15:89:9f:97:96:7e:21:19:
         df:fa:a2:bb:44:0d:b5:b5:31:2a:94:61:b9:8d:8a:e3:d1:18:
         56:ec:be:2d:fd:19:87:18:f6:39:e0:63:41:1b:8e:cf:40:05:
         50:ba:a8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org