Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa
File:                     38c57f18-eb04-33b1-b282-7e12226e75c0.roa (raw, json)
Hash identifier:          DYxHbgS4iNXIZvHFiX7+0Rn/RctH08aJtL2poahKplI=
Subject key identifier:   FA:C0:62:96:B0:41:91:21:F1:DD:CB:34:30:66:9C:5B:BF:0D:50:9E
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285847C4AA1C2C91BB1CC5C4AA1500
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     212238
IP address blocks:        173.249.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1c:2c:91:bb:1c:c5:c4:aa:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=bb020925-6957-4a92-9a92-f4ee7baf7f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:15:a1:2b:27:35:1b:3e:28:79:9d:c0:3f:
                    d9:fa:c6:ec:d7:fb:64:bd:8e:14:e2:3a:80:3e:15:
                    13:91:3f:15:70:19:7f:7d:24:a1:99:2b:17:b7:d5:
                    f5:ca:71:bf:9c:29:80:ad:30:2b:8b:f0:d3:98:ed:
                    63:bb:20:7c:8d:3c:4b:98:c8:46:df:27:4f:99:aa:
                    20:c3:23:f3:86:76:d6:74:4d:9a:f0:7f:a9:9f:11:
                    f4:29:27:58:5c:6c:3b:5f:94:6a:e8:ac:a5:ea:72:
                    a8:91:a8:da:2b:21:bf:41:85:cd:70:f1:b1:2e:bc:
                    38:cc:be:eb:b9:33:8c:85:49:81:69:ed:8b:3e:91:
                    36:78:6b:30:9c:3b:2a:8a:94:ff:51:42:2f:86:30:
                    6a:7d:b8:c7:d0:b2:c2:11:71:4e:96:d1:91:80:fa:
                    a9:c5:5c:6f:24:ac:3f:ea:13:b4:32:48:6a:01:4c:
                    e6:72:18:d3:8e:56:83:bf:e0:8f:8a:a3:c4:d8:64:
                    e4:90:75:cb:02:a1:90:30:55:6d:e6:5d:4c:66:d8:
                    5d:86:7c:d4:b9:ef:27:3f:29:dc:11:b3:47:d7:ff:
                    3c:f5:e6:6a:bb:7b:33:10:cc:33:6f:49:c4:9a:27:
                    35:18:67:bb:b4:b8:ad:94:06:19:22:05:ac:eb:e2:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:62:96:B0:41:91:21:F1:DD:CB:34:30:66:9C:5B:BF:0D:50:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/38c57f18-eb04-33b1-b282-7e12226e75c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:3a:54:5c:ef:4e:24:3e:6b:9a:1e:7b:ea:1a:e2:75:d9:
         cc:68:1b:09:db:f7:84:c3:b3:95:06:da:37:bf:bd:82:7d:ef:
         ec:ca:7d:31:a0:b5:b6:26:2b:d3:7e:33:75:3f:b9:d4:82:cc:
         0a:08:d1:d2:39:b8:f0:c2:33:10:5c:b3:e9:41:ba:c2:e7:8a:
         d0:57:e7:57:bd:ad:66:4f:1c:87:ec:a1:0c:86:9a:54:a0:5e:
         6f:c5:eb:eb:bc:a6:74:d5:a4:a3:db:b1:30:65:0c:4c:58:6e:
         f4:13:e4:72:6d:eb:2b:34:e2:98:25:83:bd:ee:6c:90:de:1a:
         17:da:00:a8:5e:d3:d8:5c:28:4e:38:c5:98:49:2f:f1:75:ba:
         66:b7:5e:1d:0c:28:96:68:0b:e4:66:5b:04:18:12:fa:39:0b:
         f0:0a:6d:ba:e5:f5:03:92:62:e3:d9:31:4b:80:32:bb:a4:d0:
         b8:b2:ab:4e:c1:02:8f:95:1e:5c:2a:3b:df:45:a9:58:26:82:
         39:c6:ad:6e:a2:75:73:4f:ef:b8:f3:57:3a:1b:16:d6:c2:a3:
         8f:85:d4:35:86:dc:7f:fa:d6:8d:6f:ea:fb:32:43:55:89:f3:
         eb:7e:8b:5b:73:f7:99:ca:18:0f:8d:4f:a7:36:54:66:fd:64:
         96:60:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org