Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
File:                     542e847c-3715-3b27-9f74-ade77a0fb20b.roa (raw, json)
Hash identifier:          fAkCmd7wy3smvnI2ze3ZmkYm29+/iT7fa4YzXcBdwzY=
Subject key identifier:   DC:97:E4:E1:B6:49:26:A0:15:58:3C:DE:83:D2:5E:FB:04:44:24:B2
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285847ACD13F67F59789CABA4E6C40
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa
Signing time:             Sun 27 Oct 2024 01:00:31 +0000
ROA not before:           Sun 27 Oct 2024 01:00:31 +0000
ROA not after:            Sat 25 Jan 2025 02:00:31 +0000
asID:                     21530
IP address blocks:        170.186.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:d1:3f:67:f5:97:89:ca:ba:4e:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 27 01:00:31 2024 GMT
            Not After : Jan 25 02:00:31 2025 GMT
        Subject: CN=31b254be-f72e-4ce7-9402-9c6c1ea3c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:c7:7a:1b:b4:a4:bb:e1:fd:72:89:6e:19:
                    bc:fc:4f:f3:7e:1f:a8:2a:c5:b5:03:57:3b:99:0e:
                    1f:6e:bb:3a:9a:17:8f:33:37:1c:73:eb:4d:15:5d:
                    f9:c5:50:74:b4:97:f9:33:be:6a:71:7c:02:24:a2:
                    2e:77:3b:06:4e:b7:47:b4:50:b3:ff:b8:c7:9f:18:
                    89:5a:5f:70:46:73:22:80:e2:7d:94:be:aa:51:88:
                    98:95:72:b9:52:f8:9b:38:6d:20:42:f7:ba:29:7b:
                    59:d5:01:81:93:34:41:01:8e:34:d5:7b:62:de:ab:
                    d0:88:f0:17:d1:4b:20:8b:ae:c4:df:62:40:6f:b4:
                    40:af:86:a5:0d:8f:8c:0b:55:15:48:15:bd:bf:ac:
                    93:a9:3a:b2:72:1e:ff:67:91:f4:64:9c:8a:0a:6e:
                    e1:2a:22:9a:23:c4:a5:72:23:3d:b0:c2:5f:06:c9:
                    39:35:15:5e:f8:23:35:71:1d:40:70:29:2f:31:34:
                    03:e0:3d:99:d9:26:c6:c7:d8:09:f7:e8:8e:7e:66:
                    e3:cf:2a:0a:11:ee:ad:d4:59:0b:37:f0:91:5b:5e:
                    37:cb:c1:d8:16:b2:d3:37:b6:33:2d:03:60:dd:78:
                    02:e3:2d:57:bf:72:ea:c6:a3:61:18:f4:ee:43:ae:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:E4:E1:B6:49:26:A0:15:58:3C:DE:83:D2:5E:FB:04:44:24:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/542e847c-3715-3b27-9f74-ade77a0fb20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.186.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:36:2d:53:2d:af:e3:9f:47:18:69:7b:20:fc:ed:0d:20:bd:
         4f:2c:c0:02:cc:13:ba:09:01:13:5a:f3:b1:ab:c2:06:a7:bd:
         74:86:61:61:c9:ca:cb:44:2b:39:88:f8:f3:57:59:c5:53:77:
         d8:c3:4e:37:f2:65:82:23:6c:76:47:51:05:86:09:1b:56:a7:
         0f:e1:60:c5:7b:b7:61:a2:73:da:74:b0:11:bf:33:44:2c:6d:
         ce:02:b4:fa:04:35:59:aa:1b:04:e7:19:5a:e1:54:55:c1:81:
         8e:83:a8:db:a9:fb:17:d5:ec:3d:fd:aa:39:9b:4f:e0:6c:41:
         fd:35:2a:4b:7e:9b:6f:a0:25:3e:c4:dc:29:ab:22:b4:0d:db:
         20:8f:98:5a:a1:3d:c9:91:1e:07:74:10:4c:f1:50:36:bb:c7:
         8d:81:4a:83:71:c0:48:d5:10:9b:5a:e2:5b:7e:a8:26:6a:ad:
         bc:4d:af:c4:f4:df:ae:c5:38:8c:9f:4c:bb:6a:d8:8c:d5:97:
         ff:48:75:25:78:b0:cc:f3:43:fe:4c:55:d1:d7:5f:4d:f8:47:
         3f:1c:21:29:46:9d:f3:dc:58:8d:c1:78:8c:d3:80:94:3a:51:
         5f:ed:9f:60:59:c3:c0:aa:49:8d:a0:ed:74:18:b4:44:51:40:
         c2:50:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:02 2024 by rpki-client on console-ams.rpki-client.org