Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
File:                     8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa (raw, json)
Hash identifier:          Q4DssmyAgxMOq8Y7EUGYOaal1y+us6Qkr+UlPWifiOU=
Subject key identifier:   D9:07:BD:B2:DD:23:A1:DC:5C:38:93:5A:AA:86:C6:9A:5E:F7:A4:FA
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F432858475910B4B9E7D23471BDC96380
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     401133
IP address blocks:        168.100.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b4:b9:e7:d2:34:71:bd:c9:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=43243b75-03dd-4227-8ded-cbcd74d804e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:41:7e:cc:50:d7:00:f1:44:a1:bd:11:c7:
                    2c:84:e1:a5:e2:05:48:c4:f8:14:b3:1c:be:c1:fd:
                    ea:a1:9d:a3:d3:ba:a0:8d:8c:e9:83:38:d3:38:90:
                    6a:30:50:8f:ac:33:91:86:54:8b:ac:e6:4f:24:27:
                    15:93:88:b7:70:fe:c6:ab:59:81:35:e0:9a:dc:2b:
                    55:dc:39:9b:12:7c:e1:18:1f:f0:b6:cb:09:24:bb:
                    7f:aa:cb:e8:bf:d9:72:a9:47:5d:42:13:9a:20:8d:
                    eb:28:f7:44:f1:40:89:47:f2:f7:eb:4c:af:dc:18:
                    2a:d1:ea:27:fb:14:9c:ac:6e:cf:f6:a2:e3:ac:00:
                    36:13:b5:d8:51:de:3b:21:9e:58:02:b2:c8:4a:84:
                    30:72:3c:f7:cb:ec:2c:94:00:8b:15:56:ba:98:dd:
                    f9:63:8c:9d:3f:dc:d8:d2:6e:ad:f7:07:4d:b8:83:
                    ab:37:ba:06:7e:8f:30:e1:eb:e8:91:ad:c0:3c:b0:
                    ab:ed:b9:83:27:2d:2e:b7:c4:e7:bb:d4:4b:22:57:
                    2c:5e:00:9a:69:ca:3b:43:88:e4:6b:fb:04:f0:73:
                    35:f5:1e:d0:8d:51:44:c8:3b:f9:8f:59:41:d1:ec:
                    8b:79:02:de:6f:5b:86:68:76:f6:49:c3:3b:ec:1e:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:07:BD:B2:DD:23:A1:DC:5C:38:93:5A:AA:86:C6:9A:5E:F7:A4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8ff2c5ce-e41d-3ab6-b22a-b27e602f499a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ac:8a:64:ac:6e:06:5e:c4:a6:6a:5b:e2:bc:e9:f9:63:1b:
         63:54:38:de:46:45:0e:2e:85:66:cb:bb:a2:c1:d5:d9:59:fe:
         4e:0a:25:b6:c0:46:58:11:b0:53:ff:ad:ca:08:e3:b2:a3:0d:
         34:5f:5c:e5:d3:f6:ff:22:e5:9d:67:38:a8:e6:9a:e8:33:a2:
         81:23:ec:7f:d8:a2:e6:a5:1f:cf:2d:e9:49:aa:22:df:1e:e1:
         8e:08:82:f1:af:3a:7b:5d:f0:61:cf:8a:92:5d:01:ec:12:8e:
         bd:4f:41:b7:0f:22:23:fa:67:8f:30:3e:34:be:91:64:a6:af:
         33:70:97:56:5e:f2:21:a9:e9:49:c8:f1:d3:11:c4:e9:08:34:
         3e:05:39:b4:e4:f6:8b:db:f3:90:ca:fb:ba:f0:ac:90:40:33:
         e9:c1:d1:03:79:72:9c:ea:90:ce:87:0b:66:a5:4d:99:b0:f7:
         fa:4f:b2:8d:fb:08:bb:cf:0d:5b:c5:9d:ed:8d:6c:ab:4e:7f:
         5f:77:bf:39:09:f4:c5:b1:69:0f:c4:98:0a:53:04:f0:f2:bc:
         ed:dc:f7:d6:7c:0d:bc:9a:62:50:dc:53:0e:c7:b0:ee:03:88:
         c4:1c:d9:3f:df:07:fa:b4:43:25:a8:d3:41:53:49:14:9d:1a:
         24:30:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:34 2024 by rpki-client on console-ams.rpki-client.org