Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/6b8b674f-11f0-3538-ac29-74bdb75e43f0.roa
File:                     6b8b674f-11f0-3538-ac29-74bdb75e43f0.roa (raw, json)
Hash identifier:          DzlEdG+dZWqDmPG8yLQ95xPS6oGEp7eonv4DxRDM0+0=
Subject key identifier:   8D:14:E2:B5:A4:2C:6F:48:9C:8F:E4:86:D9:7C:29:A8:21:7A:45:7A
Certificate issuer:       /CN=7c67559d-5543-4d0a-b17b-c1476e206181
Certificate serial:       010D0C9F4328584788865775ADF8929BB8113080
Authority key identifier: A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/6b8b674f-11f0-3538-ac29-74bdb75e43f0.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     54641
IP address blocks:        172.82.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:57:75:ad:f8:92:9b:b8:11:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67559d-5543-4d0a-b17b-c1476e206181
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=b90655c1-60aa-4ad6-8ef7-00656e132f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:bf:fc:7b:ad:2f:4d:ff:06:c6:fa:46:f3:
                    8e:af:81:18:e0:48:74:0f:10:82:96:5f:c7:6c:32:
                    1f:70:d4:51:4a:02:4a:72:3f:9a:73:ab:2b:54:6f:
                    76:75:0f:51:79:06:fd:ae:7c:1d:7a:46:a9:02:46:
                    bd:b8:e9:3e:6e:bd:1a:39:a2:59:79:c8:0b:7c:53:
                    6f:64:6a:88:9f:61:d7:f5:81:e9:46:b7:03:6f:4f:
                    4a:69:30:ef:aa:00:e1:1f:25:2e:0d:fe:51:f2:86:
                    b4:dc:e6:5d:11:6c:5a:1d:0a:af:d6:0e:82:de:ce:
                    78:df:44:19:15:56:4c:be:7e:c8:f8:1b:9f:cf:b0:
                    af:f5:f7:9c:25:da:1e:03:8c:10:c9:4d:b7:c2:5b:
                    15:eb:3d:a0:b3:1a:1d:23:30:15:6a:d3:fe:5a:1c:
                    8e:78:55:b9:3c:f6:00:15:5e:50:dc:60:89:a7:a0:
                    34:c4:e5:e0:6f:72:69:80:e2:ff:89:6d:09:a3:32:
                    9a:8e:53:40:86:81:0c:08:98:7c:0a:ba:e1:60:b6:
                    f9:81:9a:0b:2f:b6:69:d2:dd:53:6e:5c:a1:c1:1a:
                    7f:1f:07:6f:41:3a:00:63:9f:c4:d9:52:ab:46:04:
                    93:b4:c1:27:43:d1:7e:55:da:45:46:10:f7:7f:0f:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:E2:B5:A4:2C:6F:48:9C:8F:E4:86:D9:7C:29:A8:21:7A:45:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/6b8b674f-11f0-3538-ac29-74bdb75e43f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:96:bc:81:6e:e4:eb:cc:b7:0d:17:92:fc:90:e6:79:e6:b7:
         c3:4c:60:0d:1b:46:88:69:ea:db:3e:e5:e9:27:08:10:80:78:
         32:f6:37:56:8e:59:07:0e:27:f6:ae:3c:4a:b0:40:05:a6:36:
         4b:97:ec:a7:53:1d:59:18:8a:ce:ec:a6:94:34:bb:c6:29:8a:
         d1:05:50:ed:02:8d:02:08:13:ce:bb:7d:99:a7:1e:98:54:2d:
         0d:43:82:db:2b:61:e2:b2:70:db:20:21:d0:5a:66:ed:1e:72:
         20:58:b0:d4:ca:27:cb:96:08:07:57:1e:c4:d0:dd:7a:a8:e6:
         4a:ae:1f:88:35:f1:09:59:89:5d:81:c3:ec:6c:83:5c:df:cc:
         33:4c:1b:5b:4e:bd:02:32:48:04:e8:68:37:21:aa:23:1a:d6:
         c1:cc:1e:9d:3b:b5:43:e6:d9:08:fa:df:f6:ed:cd:be:ac:ef:
         1a:f6:79:6a:31:84:64:cf:8a:9d:98:db:ca:c8:a2:b6:d2:50:
         17:14:c1:08:d5:ab:65:84:59:79:b1:93:1b:8c:7a:8d:77:1e:
         9b:c6:24:e8:d6:80:66:31:10:32:7b:87:d9:e7:01:c0:be:2e:
         e9:ba:28:87:83:8a:86:48:e2:13:69:fc:e1:21:49:f4:64:7e:
         df:d5:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:14 2024 by rpki-client on console-ams.rpki-client.org