Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
File:                     a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa (raw, json)
Hash identifier:          2fzvpfLUeI0D9IbagLUTGSlYq/jG6ICEb06ve5ZjsB8=
Subject key identifier:   DC:AF:93:51:1F:2F:C7:06:09:6B:AE:6D:D3:DF:ED:E1:DA:58:28:93
Certificate issuer:       /CN=a2159823-806a-4879-9de9-7be634e8cd31
Certificate serial:       010D0C9F432858477D5BA03FC1D53607EFF96FC0
Authority key identifier: A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        151.193.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a0:3f:c1:d5:36:07:ef:f9:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2159823-806a-4879-9de9-7be634e8cd31
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=8cf0bd50-456c-4394-a559-d6c44614b8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:f0:0b:64:8f:eb:15:60:6a:6f:6c:34:1c:
                    9e:85:38:aa:84:41:32:ae:fc:bc:3c:7d:e1:be:a8:
                    40:a8:b3:e0:ec:a3:0f:d0:19:58:11:1c:50:f6:ba:
                    88:74:3e:b0:c2:9a:cb:da:62:eb:d0:f3:61:db:95:
                    80:b4:8c:c1:46:ff:34:d9:c4:6e:54:34:81:c3:19:
                    34:fd:f0:ac:ff:39:ee:d2:8c:c8:75:aa:5b:15:09:
                    d3:67:e6:12:3e:57:c5:ea:4f:d1:3f:6c:46:8f:4d:
                    ec:33:a1:3f:85:a1:cd:c4:e1:44:1c:90:8c:81:59:
                    37:16:c9:59:09:e0:12:4e:7b:b6:d3:2a:d7:4b:c9:
                    7e:7b:42:1f:9b:48:08:b3:6b:29:44:4a:8b:59:06:
                    7d:9d:f8:06:2e:9f:82:86:25:d1:98:08:da:93:8a:
                    92:d5:da:e1:c1:e3:d1:09:f0:0c:c8:e0:b7:53:53:
                    63:d1:28:82:b0:f2:51:9a:2a:9d:06:b3:2d:da:2f:
                    2c:8c:86:80:04:c0:a0:6b:36:c4:3b:64:e5:8c:bb:
                    de:4c:ec:27:53:15:43:59:a9:bf:dd:d2:25:42:bc:
                    7d:b1:f7:2a:a9:0f:cd:5a:b5:10:ed:20:1d:dd:39:
                    b1:e9:5e:f6:c6:5e:d4:6c:51:7c:ed:d2:16:6b:c1:
                    d7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AF:93:51:1F:2F:C7:06:09:6B:AE:6D:D3:DF:ED:E1:DA:58:28:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a9d12e32-ad63-3f4e-a4f1-e3338057b17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31/a2159823-806a-4879-9de9-7be634e8cd31.crl

            X509v3 Authority Key Identifier:
                keyid:A5:91:90:9A:88:86:1F:02:DF:2B:CF:08:D4:A4:94:60:FD:84:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2159823-806a-4879-9de9-7be634e8cd31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.193.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:07:45:94:4e:f5:c7:85:5d:40:09:b2:34:cb:1a:a7:7b:
         5a:a8:ca:89:ac:50:91:41:cb:c5:9f:6f:33:de:de:27:ed:90:
         73:c5:c2:04:36:05:b8:f4:1d:c4:7b:2a:5b:54:73:03:8e:13:
         94:85:79:d8:9e:e8:4b:f7:74:76:04:36:28:2b:f4:d1:25:63:
         41:7d:fd:e2:34:72:4e:67:41:a7:fc:1d:26:62:c9:a1:ad:61:
         65:da:60:64:72:be:64:7f:76:f3:76:23:9f:81:e1:11:88:37:
         70:31:d7:d5:d5:c4:7d:c8:22:d9:64:cc:74:f5:42:d8:30:86:
         24:12:80:11:96:27:82:79:2e:74:72:6d:48:93:55:3d:5b:aa:
         43:4d:11:ee:c2:a1:62:f4:75:9c:00:3b:24:dc:f8:a5:35:bd:
         0c:94:bf:74:e9:14:d4:f9:c6:fe:95:25:f5:34:bc:2a:54:5c:
         9c:6c:ec:00:28:16:2d:08:e3:73:a3:95:db:12:1c:8f:db:72:
         8f:4b:3a:90:f8:9f:9c:5b:ec:ef:0d:86:5b:8e:4e:57:06:61:
         7a:75:1e:17:ae:0f:62:95:c6:f6:b2:2a:26:a1:aa:b9:03:b4:
         5d:2d:0b:cc:cd:a3:b7:78:9b:b0:dc:63:f0:5c:66:02:70:8b:
         47:d9:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:12 2024 by rpki-client on console-fra.rpki-client.org