Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa
File:                     1d420aba-3ce9-3377-be34-e47d162a1845.roa (raw, json)
Hash identifier:          tQ6C9jTIfU+9cGZ9pwxHU9qBQCE0gt1GXmt2h+LbLQA=
Subject key identifier:   EB:10:53:C4:D0:3F:A3:7D:F2:0F:07:53:6D:85:11:FC:28:1F:9C:90
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F432858479A7771D846B446B2B05FAC40
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa
Signing time:             Sun 20 Oct 2024 11:15:06 +0000
ROA not before:           Sun 20 Oct 2024 11:15:06 +0000
ROA not after:            Sat 18 Jan 2025 12:15:06 +0000
asID:                     9084
IP address blocks:        154.1.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:77:71:d8:46:b4:46:b2:b0:5f:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Oct 20 11:15:06 2024 GMT
            Not After : Jan 18 12:15:06 2025 GMT
        Subject: CN=d0712b22-6c4d-4a19-8095-da1b56936b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:9f:6b:ac:a4:ba:3a:7c:e1:0e:48:75:1f:
                    f2:5d:14:d2:6c:45:05:84:33:c3:2c:74:48:7c:64:
                    20:99:7f:32:30:f0:28:45:f0:7c:45:5d:34:ee:98:
                    fa:00:2d:1d:12:75:42:cd:01:61:6b:26:0a:8e:c9:
                    28:68:b6:1f:6b:f9:99:83:79:21:80:db:46:be:be:
                    b4:91:fb:f1:a8:af:eb:6b:9e:3f:9d:85:ba:72:67:
                    1f:16:b4:08:28:5f:09:22:69:49:b6:b8:e1:15:1c:
                    f6:20:f7:f7:cf:87:5b:d5:c9:41:08:03:13:00:69:
                    63:f2:b8:49:7a:13:a4:f9:01:f1:26:78:ee:f0:27:
                    12:c8:38:0c:9c:16:4f:95:1d:03:e4:46:fe:ee:ad:
                    e4:24:b8:5a:88:28:46:1a:1c:3f:d6:82:b3:fb:21:
                    41:c5:64:f7:59:e8:f0:f3:1b:15:a1:41:cf:7c:4f:
                    98:e8:af:84:65:fb:a1:4d:6e:cf:1f:b0:1b:b5:68:
                    01:fa:0c:f6:4f:b9:1b:dc:68:46:c0:d5:6a:95:66:
                    45:53:48:2d:33:3b:55:38:f0:76:99:7f:71:cd:42:
                    b9:ae:a9:d9:de:1d:54:d6:00:64:e9:04:48:bb:b6:
                    85:e5:60:b8:37:8a:55:78:2d:97:ab:5e:15:a5:4c:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:10:53:C4:D0:3F:A3:7D:F2:0F:07:53:6D:85:11:FC:28:1F:9C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/1d420aba-3ce9-3377-be34-e47d162a1845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:8b:ca:e2:66:1c:d4:32:c9:98:df:83:48:5b:d4:95:fe:
         20:b1:23:76:9c:7a:8c:8e:4c:33:fc:ff:c5:9d:5f:3a:48:18:
         73:56:77:da:5c:da:af:3f:cc:f1:8d:ff:79:15:45:c1:14:ce:
         3f:a7:e4:a0:8d:86:df:ad:11:d5:f6:c8:9c:80:bd:4d:c5:3b:
         22:11:2e:49:53:cf:7b:e9:c8:8b:bd:bb:a3:07:a6:00:27:fe:
         0c:69:3b:30:53:d1:1a:fc:7d:f8:e1:5a:ae:15:b7:46:c7:cd:
         b4:28:10:03:64:57:f8:9a:d6:4e:99:34:89:1d:ec:4e:81:f0:
         9b:19:16:01:e7:57:6c:9c:e1:d1:bd:a1:fb:bd:bb:15:cd:ca:
         82:15:b7:cd:97:d9:9a:12:d9:b9:07:2d:5b:9d:7d:93:90:21:
         ef:09:b2:1b:d1:df:4b:5f:ff:bf:93:50:26:71:0c:bd:51:6b:
         22:63:33:35:cc:9a:60:30:c2:05:9c:e1:2a:9c:9c:21:bc:ad:
         0a:8a:d3:c9:c8:c9:07:44:ea:a2:31:e0:10:b2:fa:05:65:c1:
         e5:82:2e:31:93:ed:db:4f:62:20:8c:e4:79:22:d6:32:e7:b3:
         f5:ed:c8:1e:1a:eb:35:7f:24:14:1a:25:7d:61:ff:9b:03:e5:
         79:ad:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:42 2024 by rpki-client on console-fra.rpki-client.org