Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/94e95d5d-5a25-3be6-9023-ed12cb276753.roa
File:                     94e95d5d-5a25-3be6-9023-ed12cb276753.roa (raw, json)
Hash identifier:          eyrXrHbM6d8TEImh8b6MEPeMRifPbENuoeMo5dyXREc=
Subject key identifier:   3C:18:C9:D4:0D:0E:EA:FA:F2:95:E9:B4:F5:E6:50:92:45:8C:FA:F4
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F432858473095F76920C36DD6A9826E00
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/94e95d5d-5a25-3be6-9023-ed12cb276753.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     398493
IP address blocks:        170.39.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:f7:69:20:c3:6d:d6:a9:82:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=5baa43a4-7a8b-4ee9-88d2-8dfa7cb42c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:2c:67:cc:80:5c:99:47:3d:7e:3f:e6:ea:
                    67:7e:7b:83:7e:c3:e8:3d:79:66:7c:37:4c:9e:98:
                    51:e2:76:be:31:4e:75:4e:a8:11:f0:44:77:65:76:
                    60:6c:24:c8:b9:c8:29:7a:7c:e6:2f:56:93:eb:bb:
                    8d:55:ae:cb:03:18:a9:68:44:cf:1e:1f:2b:87:e2:
                    d0:62:46:44:82:16:6f:28:d9:b3:0f:33:69:05:97:
                    5a:05:4d:82:74:ad:59:2c:f9:fc:90:ac:76:06:1b:
                    3f:be:2e:3f:ca:ac:9b:c0:78:8e:d1:0c:72:95:10:
                    fd:27:8f:04:ce:c7:67:4a:12:4e:90:b3:4f:76:34:
                    19:42:2f:c7:47:0b:37:ef:15:0e:35:51:32:64:9f:
                    ef:a7:0c:79:a9:81:c1:12:bd:d5:5d:6f:88:60:f2:
                    87:6a:0a:09:d6:34:9d:74:eb:f7:94:35:55:86:89:
                    d8:6d:8e:48:05:2e:ac:ba:a0:cb:7e:fc:0f:49:a9:
                    44:d7:1c:4e:06:1d:32:d4:4d:d5:ff:b9:07:28:ee:
                    04:e8:b8:68:94:5a:e1:ba:16:06:60:ce:e6:35:21:
                    e8:fb:8a:e2:dc:c3:b7:bb:72:19:ca:83:0b:25:cb:
                    d8:36:4a:f0:7f:a5:b3:92:d6:1d:35:c2:3f:08:cc:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:18:C9:D4:0D:0E:EA:FA:F2:95:E9:B4:F5:E6:50:92:45:8C:FA:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/94e95d5d-5a25-3be6-9023-ed12cb276753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:5e:88:08:c4:aa:9b:e1:9d:cb:59:20:b3:ea:40:9f:8a:
         92:4e:aa:29:91:4d:45:4f:7a:db:7e:e3:e5:a8:77:83:3c:3d:
         46:b9:88:b3:d5:8c:67:ef:a4:72:a2:30:47:f9:64:6a:2b:7c:
         b8:ce:f9:2e:c6:65:fc:2a:4f:50:42:46:22:41:80:f3:2f:21:
         e6:67:5d:c4:14:6f:74:ae:9a:39:52:c4:b6:5f:ee:6b:42:59:
         25:03:d2:a4:f2:68:1b:30:2f:15:4a:ae:da:17:89:27:77:10:
         cc:79:b3:d7:5e:c8:da:14:a1:94:e1:8f:a4:fe:8f:98:72:20:
         7f:fd:40:96:2f:85:e8:6c:cd:0f:58:33:ec:91:98:31:38:22:
         8d:e2:5d:48:bc:1b:20:72:7f:43:21:52:dd:4d:e6:c0:43:f8:
         ad:25:52:0d:99:7e:9f:75:de:cc:19:69:d7:05:63:b4:ec:11:
         e3:9f:f1:a4:37:cb:d8:e5:b5:a2:8e:fc:9e:e1:f1:10:a7:f8:
         db:b1:ef:2c:cb:24:3f:be:40:af:a3:b4:8b:c2:c9:91:43:fb:
         89:c0:af:b7:71:48:a2:ad:32:0d:a1:8f:19:dd:64:49:00:63:
         da:7e:47:eb:6e:9d:8a:f9:45:1e:29:f5:ca:80:05:72:0b:a3:
         52:54:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:09 2024 by rpki-client on console-fra.rpki-client.org