Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
File:                     0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa (raw, json)
Hash identifier:          1dYNvqKhN9dXenlZZJPTNgqeffRhMsPcKGuBn7iw4PE=
Subject key identifier:   A8:36:67:44:B2:F1:53:A9:31:D7:5A:8F:8A:F7:00:70:8F:F8:27:10
Certificate issuer:       /CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
Certificate serial:       010D0C9F4328584748509FC8C46741A95153D300
Authority key identifier: 34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     11659
IP address blocks:        169.147.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:9f:c8:c4:67:41:a9:51:53:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=aca1a402-dd00-4912-991e-b0b2c03aa12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:39:b6:cf:3e:54:1a:c9:17:d6:e4:79:99:
                    e0:01:f8:1e:5f:94:32:4a:d8:36:84:68:7e:01:3a:
                    98:70:a8:0a:28:ff:a1:f3:65:11:40:3b:bb:05:02:
                    bf:19:32:40:cf:4e:ef:e2:ff:07:f5:b2:f4:e2:23:
                    91:5e:fa:52:3e:68:f8:c0:a2:d7:63:bb:fc:1a:2f:
                    14:46:7f:61:a1:43:1c:5d:ad:79:60:c7:45:f6:11:
                    d7:22:d8:1b:96:aa:6b:58:48:ba:e1:fa:aa:3a:14:
                    93:31:f6:11:3e:b8:8e:37:15:fb:cb:b7:d6:f3:7e:
                    5a:9c:3d:10:db:a8:1f:0e:e0:3f:e8:9c:90:3b:f3:
                    48:5c:d3:87:38:16:df:93:ad:38:2b:dd:91:cc:52:
                    7a:47:14:59:d0:78:54:7b:d3:8b:bf:88:74:62:cd:
                    60:27:3f:06:0c:3c:77:31:f0:d2:a7:e2:84:07:16:
                    7a:07:e3:fe:e5:40:44:3f:f3:fe:02:bd:b2:82:ea:
                    07:c6:b5:6d:bc:10:e7:56:8d:0a:c9:89:c8:40:6b:
                    69:fc:6b:04:cb:64:12:a7:c8:6e:4b:15:57:32:98:
                    c3:5e:27:13:f4:f5:56:37:e8:4c:67:b1:76:a7:1c:
                    6a:ef:23:41:be:29:65:c2:bc:46:fb:71:2d:41:d7:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:67:44:B2:F1:53:A9:31:D7:5A:8F:8A:F7:00:70:8F:F8:27:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/0896614d-1a16-3f6a-8e28-7d29222fe1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.crl

            X509v3 Authority Key Identifier:
                keyid:34:87:E5:A9:A8:7B:D5:7B:A5:76:B4:1D:BF:21:E0:8B:47:28:B9:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e0bfe05e-4cb8-4f73-8ece-48ebc82d0d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.147.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:69:fe:4d:05:f3:6b:8b:40:de:07:50:87:2c:50:bc:78:31:
         6a:b2:16:be:f1:f1:27:18:98:57:ae:b1:cf:fd:77:cd:85:b4:
         90:b3:25:09:fb:04:0d:a6:dd:d5:3f:7d:ec:4e:1f:0d:3c:b8:
         44:6f:34:bf:9b:27:a2:19:f9:a9:b0:cf:56:1d:d3:78:73:1f:
         05:71:61:df:fa:f7:00:29:65:d6:82:71:94:48:ad:22:4a:34:
         e3:e1:2d:1e:93:e8:ae:44:b9:31:8a:d8:14:a3:97:ff:7e:69:
         d2:d2:ff:2f:74:f6:22:a3:6e:ea:8e:44:fd:e6:bc:7a:8a:c4:
         d6:5a:a9:f4:a5:44:9f:83:54:5f:cb:b9:b3:b4:b6:c3:15:a9:
         40:8b:35:c3:6d:6f:49:8d:0e:58:75:e8:c5:8b:05:f3:1e:ac:
         d7:90:3d:0d:97:f0:ab:93:14:fc:03:be:ad:0a:44:ac:20:15:
         52:27:35:ef:64:c7:d6:38:59:9f:ba:fc:fb:f6:e9:a6:e7:47:
         ef:f6:1d:d3:e1:93:4c:a6:53:bd:21:46:7e:3a:5d:4c:35:9f:
         68:3b:b4:3c:82:c4:76:c8:5d:1f:08:21:82:b3:b1:fa:6a:6c:
         e7:93:d0:09:6f:bf:4e:fa:5e:48:1e:09:05:90:c6:49:88:79:
         96:74:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:36:08 2024 by rpki-client on console-ams.rpki-client.org