Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/62e89b93-663d-37ab-890d-d08d66f660df.roa
File:                     62e89b93-663d-37ab-890d-d08d66f660df.roa (raw, json)
Hash identifier:          Zd1ymIgKXEnllMTll9mk3Df5f19tl83PIxLePsAcJGY=
Subject key identifier:   AE:8C:AF:EE:0A:C5:CD:AD:1F:F3:E8:BB:8F:B2:E6:FF:DA:A4:96:75
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584783E8C7E960DE0682C011E480
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/62e89b93-663d-37ab-890d-d08d66f660df.roa
Signing time:             Sat 12 Oct 2024 09:19:52 +0000
ROA not before:           Sat 12 Oct 2024 09:19:52 +0000
ROA not after:            Fri 10 Jan 2025 10:19:52 +0000
asID:                     9084
IP address blocks:        154.1.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:83:e8:c7:e9:60:de:06:82:c0:11:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Oct 12 09:19:52 2024 GMT
            Not After : Jan 10 10:19:52 2025 GMT
        Subject: CN=7210d75e-d78d-4a4c-8d06-54a31d4149cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:dd:e1:75:00:b0:cd:57:ec:3d:e4:f2:77:
                    36:94:66:8a:5e:db:a8:1c:b9:df:45:cb:01:ef:a8:
                    cd:e7:ca:4d:ea:27:7d:01:10:bf:9d:f5:95:c8:bb:
                    0b:20:49:e9:96:1a:02:09:0c:9c:1c:72:a6:22:36:
                    c8:14:75:8a:5f:e7:8d:96:64:20:0c:09:9a:2d:68:
                    f9:45:de:1d:90:28:7b:78:12:42:5f:fb:d1:eb:06:
                    70:0b:9c:3d:f2:95:b3:b9:52:ac:ed:99:47:3a:72:
                    17:f8:ff:11:61:41:e5:59:52:20:e1:6f:54:38:1c:
                    bf:39:ba:03:29:cc:55:0e:14:dd:45:9b:ac:ff:ab:
                    c8:ef:c6:fd:5d:91:28:5f:2e:d0:1e:bd:f0:bb:a8:
                    b5:ae:29:05:11:69:0e:f5:7a:75:7a:09:3e:be:4c:
                    f5:d2:aa:62:5b:73:e5:90:62:c0:f9:0d:fb:23:b6:
                    1a:f4:2f:ab:d1:af:54:0c:65:a7:a3:6e:48:c8:67:
                    63:87:e7:97:6a:d2:9d:32:12:74:a7:b2:a7:db:62:
                    59:93:c0:d7:59:51:cb:08:b4:77:ff:14:b6:fc:74:
                    29:ec:2e:bb:bb:09:89:36:cd:9c:33:76:d8:1a:25:
                    5b:2b:b2:ae:b0:ae:eb:66:ed:09:cf:87:d6:6e:93:
                    ec:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8C:AF:EE:0A:C5:CD:AD:1F:F3:E8:BB:8F:B2:E6:FF:DA:A4:96:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/62e89b93-663d-37ab-890d-d08d66f660df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.1.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:95:ac:21:cf:5e:41:c0:47:36:3b:3f:c6:9d:f0:5d:ec:5d:
         17:9c:c1:2d:1e:28:25:6b:d5:aa:9b:ac:21:f8:43:a8:07:a5:
         36:6d:71:3a:0a:1b:8c:d3:5a:0c:79:fa:37:a5:7c:2f:d2:1a:
         94:13:18:5c:d9:ff:96:1c:c6:74:b2:5b:6c:6e:05:46:6d:e0:
         da:7b:71:60:d7:23:d2:a8:7b:de:7d:fc:0c:37:27:c6:bc:3f:
         04:64:9f:d2:5a:90:d0:03:31:32:30:c8:e1:cc:59:94:81:bd:
         41:98:3a:4a:82:0b:d1:5c:d3:e6:df:c2:85:60:a0:29:3d:c3:
         69:a4:4e:fc:6a:91:a4:ef:9c:f8:04:e7:a3:8b:16:07:85:11:
         d6:bc:f4:0c:54:5f:9a:1a:db:eb:52:e0:10:52:5b:f1:82:37:
         8b:40:c7:2e:8c:56:10:34:d4:81:78:0b:83:5f:71:8e:67:60:
         46:ef:b0:b7:ab:a2:e6:1b:95:64:24:d5:3a:3b:50:57:7c:2a:
         5c:ae:3b:d9:57:16:a1:3e:de:ec:ba:a1:8e:09:76:d1:59:21:
         72:60:ed:c7:65:8f:cb:2a:28:81:a5:4d:c1:37:87:ea:81:e2:
         7a:bf:05:06:06:44:2a:95:6c:47:9f:d3:5b:60:68:ef:61:f1:
         94:8b:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:42 2024 by rpki-client on console-fra.rpki-client.org