Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/c85fac9a-faff-39c8-b604-d0c6f3364169.roa
File:                     c85fac9a-faff-39c8-b604-d0c6f3364169.roa (raw, json)
Hash identifier:          /QVxRbwgDhhAmMZO7ObH8I6oDx6mSt/wCtxpwdGv3o8=
Subject key identifier:   61:E6:BD:A8:BE:CE:D7:54:A8:D8:8E:F6:A8:38:2D:0B:96:E2:F3:A9
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285846C3B52B33505C1E277559A700
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/c85fac9a-faff-39c8-b604-d0c6f3364169.roa
Signing time:             Sun 04 Aug 2024 13:00:39 +0000
ROA not before:           Sun 04 Aug 2024 13:00:39 +0000
ROA not after:            Sat 02 Nov 2024 13:00:39 +0000
asID:                     16509
IP address blocks:        173.249.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c3:b5:2b:33:50:5c:1e:27:75:59:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Aug  4 13:00:39 2024 GMT
            Not After : Nov  2 13:00:39 2024 GMT
        Subject: CN=9566bb8f-fe8d-4a36-8e52-6e1ece52822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:9a:7f:97:81:1e:89:b3:94:90:0c:4d:3b:
                    61:fb:d1:00:7a:66:f3:01:f9:71:02:5f:1d:6e:a7:
                    c5:3c:f3:27:30:45:ed:55:47:87:ea:11:98:13:34:
                    5a:31:fd:e3:9b:66:ae:5c:1f:82:ed:cb:cf:9a:d6:
                    33:c6:43:41:e4:6a:38:c1:12:d5:4d:d6:1b:56:64:
                    13:36:2a:2d:dc:8f:aa:5b:9a:96:86:9e:b3:cc:a7:
                    f2:77:e7:13:ef:ab:72:a6:b0:d9:e7:93:3b:c2:c8:
                    2a:d6:4a:d5:c0:c1:25:05:f0:20:de:0a:9e:b3:98:
                    76:d8:39:a5:50:19:52:08:cb:cc:b7:de:2d:b5:36:
                    22:3c:6d:4f:2a:10:32:a2:42:f9:5a:09:d0:f9:97:
                    ea:93:de:84:69:57:29:48:01:a9:d2:7a:45:24:07:
                    0e:5d:55:ba:ed:b3:ad:f5:97:74:07:cc:1f:fe:39:
                    16:3b:04:98:d6:41:c7:00:27:d2:58:71:37:f9:b9:
                    c0:7b:d3:4d:7e:99:1c:d0:90:4d:92:94:81:b6:92:
                    7f:3d:97:d6:94:0c:9f:1e:d2:6b:05:a8:ab:44:2d:
                    a8:68:b6:5d:57:c1:d4:d4:3e:8a:91:a2:a5:c0:52:
                    7f:fa:58:97:d6:a2:96:e3:fb:cb:27:40:e6:ea:38:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:BD:A8:BE:CE:D7:54:A8:D8:8E:F6:A8:38:2D:0B:96:E2:F3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/c85fac9a-faff-39c8-b604-d0c6f3364169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:0b:7f:8d:11:52:0a:25:42:2c:91:82:44:16:9f:0f:18:62:
         63:b3:21:46:52:7a:93:13:c9:91:1a:b3:42:41:14:c1:d1:f1:
         8c:d9:ab:65:13:4d:b8:3c:cf:61:f4:73:f5:4e:3a:c1:71:25:
         17:82:c3:fc:eb:8c:92:f8:8d:e3:74:1c:60:da:51:1c:35:21:
         e8:7d:a8:41:5b:a9:7e:aa:a5:fe:4c:3e:05:eb:be:36:28:dd:
         1e:2f:bc:84:af:48:b8:2a:e9:49:0a:25:1d:48:4f:67:8d:5a:
         c1:dd:d0:2b:24:d8:42:39:18:c9:29:dc:93:7d:e1:08:e5:b3:
         65:a6:6e:de:21:b7:bf:db:70:f2:7c:c2:54:ed:b3:cf:97:e5:
         f6:93:d7:af:56:07:8e:1a:ae:6b:2a:d9:57:ee:8f:3d:6e:99:
         98:bf:fe:fc:ec:01:1f:36:c9:9e:48:28:96:19:73:db:84:37:
         5b:a6:8c:73:0c:76:4b:41:59:c8:cd:b2:2b:95:fd:54:c5:6a:
         eb:91:d2:e3:c6:94:72:91:27:06:96:a1:35:ad:ae:84:d4:10:
         1e:ef:87:f9:2c:6d:e0:61:af:fa:b2:73:40:c7:d5:66:65:47:
         4c:c9:9d:26:2c:f6:81:58:b6:d5:d9:c7:d4:1e:5b:d1:d2:c3:
         7d:8e:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:13:17 2024 by rpki-client on console-ams.rpki-client.org