Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa
File:                     c118e230-bad5-32c0-9043-a0b819d10476.roa (raw, json)
Hash identifier:          ekxy1DBP4oOF4Q8kVxaFq1dfLKePIctaGsuvt0lnTPY=
Subject key identifier:   7F:8A:2E:C5:F9:D0:15:EC:50:A2:A9:95:C7:43:54:94:30:BD:47:25
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F43285847DF2F5550A0A2A27DE1BA78C0
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     16509
IP address blocks:        144.86.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:55:50:a0:a2:a2:7d:e1:ba:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=9584cab3-1726-43b8-a02d-e22307f52d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:af:73:6f:ff:8f:b6:8f:d5:42:51:e5:77:
                    02:8d:c7:2d:34:38:d0:5b:ef:d0:b7:b2:e8:05:0e:
                    df:4a:a4:5f:7c:52:c1:34:0d:6f:52:a4:5e:f9:71:
                    26:42:81:ee:47:e1:d3:11:2d:94:e3:4d:1c:a1:b3:
                    93:84:6b:28:e3:c7:c5:59:42:66:3c:7e:54:19:0b:
                    0b:1f:f2:8f:78:32:22:33:03:01:60:5e:df:95:63:
                    c8:c9:63:1e:32:f6:63:23:e4:ca:c8:dc:2f:a5:3f:
                    65:69:60:78:57:a4:65:de:d9:db:60:16:b4:3a:5d:
                    d8:d0:35:97:cb:9f:df:31:f0:e6:90:5c:7b:96:0c:
                    ee:68:79:fd:ef:34:c8:17:f7:02:1c:83:a4:1c:75:
                    40:fb:37:e5:9a:bb:5e:5a:77:ae:1f:ae:db:2f:d2:
                    c1:43:b5:f9:5c:17:6d:a6:fa:d2:26:7a:b3:0f:75:
                    59:98:68:e3:1f:3a:b1:81:8d:ec:b9:a7:8b:81:a5:
                    d2:67:a8:2d:74:ac:1f:73:97:90:29:7e:bb:65:80:
                    fe:12:dd:e2:e7:a3:8f:cc:5d:ea:12:5d:1f:19:f7:
                    e5:6a:92:e8:6c:77:28:06:32:81:f1:ff:2e:1e:15:
                    ef:4e:76:f8:c4:fe:ab:19:40:0f:21:24:b2:98:de:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8A:2E:C5:F9:D0:15:EC:50:A2:A9:95:C7:43:54:94:30:BD:47:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/c118e230-bad5-32c0-9043-a0b819d10476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:43:a9:60:e5:96:58:5c:e8:c1:2a:ec:3f:d5:5f:9c:bd:
         8d:66:5d:ef:90:96:33:bd:f3:51:54:81:0d:6f:04:1b:86:86:
         98:67:da:b9:a6:71:fa:6a:fd:fb:2e:7e:05:d3:6b:3c:9d:58:
         04:d8:cf:98:8a:7e:89:7e:06:c2:d6:e9:02:48:dc:d9:5c:de:
         39:6a:e3:e0:b2:bd:a0:c5:1a:d9:61:5d:15:04:f1:64:f0:ab:
         84:4c:db:90:43:28:9b:52:92:cd:a4:cb:e3:11:36:4d:98:f0:
         19:dd:17:c3:1b:03:aa:7c:54:1e:88:d0:4f:b0:1f:ce:9e:15:
         ae:e4:3e:dd:f3:a7:3d:8d:60:35:de:f5:f3:fd:cc:7c:ee:cd:
         20:fe:b1:e5:34:64:a2:73:94:d1:43:f0:13:08:84:5a:c1:3e:
         1b:52:64:fa:57:d8:f4:ab:c6:18:13:cd:8c:c0:fb:ad:fa:e0:
         0b:85:3a:f4:a1:76:9d:7c:06:25:78:58:55:01:0e:1c:2e:21:
         2a:40:72:09:87:78:ea:d4:57:da:4b:c6:21:81:8f:7c:82:b1:
         4d:f1:45:ab:46:0f:93:0a:99:73:f2:5f:37:57:e1:c1:cd:ac:
         b5:74:55:f5:b1:84:93:26:a8:b6:c3:ea:04:4d:75:28:43:be:
         63:db:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:38 2024 by rpki-client on console-ams.rpki-client.org