Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/919c4a0c-ff99-3494-b68f-0c64d9ed7bd6.roa
File:                     919c4a0c-ff99-3494-b68f-0c64d9ed7bd6.roa (raw, json)
Hash identifier:          UwYXthfenHSIkx54n/5jWUdwJl7N3zyJIQnw5vLIdFs=
Subject key identifier:   19:FB:BE:F7:3E:C7:04:88:E7:92:04:28:A5:85:4B:29:C6:F5:A1:27
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649F09F31A661B4FF92E80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/919c4a0c-ff99-3494-b68f-0c64d9ed7bd6.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        173.180.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9f:09:f3:1a:66:1b:4f:f9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=b9599f84-5a27-45eb-b284-4bc31b0efb60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:29:7b:37:07:56:d5:89:fd:c9:e8:c8:1e:
                    a6:9a:49:79:a1:9f:d8:bb:86:f4:ad:66:76:33:82:
                    65:8d:5d:95:5e:32:7e:cf:21:cd:be:2a:9d:c6:0e:
                    b5:f0:0e:51:41:9a:6a:d4:8f:04:c8:33:b3:7c:a5:
                    41:4a:46:73:b6:fe:94:5e:f6:37:a8:2e:b9:ee:af:
                    5e:5b:38:c6:1f:68:b3:f1:62:66:6b:0b:c8:2d:94:
                    f8:6f:2f:c6:dc:fc:3d:73:79:df:4f:2a:42:a4:b3:
                    c9:c1:45:bd:42:d4:b8:51:45:8e:c2:a4:f8:fa:4c:
                    39:c8:b9:15:47:56:4c:e4:d6:b6:0b:ca:7f:4a:02:
                    55:8a:03:a3:e4:ee:a9:fd:70:00:b3:2b:7b:b8:cf:
                    ad:43:9f:39:f1:31:ab:f4:55:8b:2c:86:0c:c0:56:
                    f5:91:b9:8c:e9:28:1c:21:df:a8:d9:7a:f4:dd:2c:
                    fd:9e:4b:b3:3e:8a:29:5b:36:61:97:11:e1:30:71:
                    55:f6:e2:dd:20:32:26:ff:6a:25:a6:97:4a:8e:e2:
                    68:f3:a6:16:21:f8:90:fa:2c:8e:db:ec:ce:ab:46:
                    06:76:af:66:5d:89:81:22:e6:1c:8b:1c:b7:aa:b1:
                    bb:6c:f6:72:32:bb:60:28:46:1d:94:b9:9c:38:da:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:BE:F7:3E:C7:04:88:E7:92:04:28:A5:85:4B:29:C6:F5:A1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/919c4a0c-ff99-3494-b68f-0c64d9ed7bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c3:eb:a3:2f:15:f6:4e:59:2e:dc:44:b0:fb:29:eb:ac:44:
         a1:1a:7c:c1:29:74:f1:cd:36:3b:84:6f:f6:18:91:77:e9:c9:
         e3:12:c9:e0:c6:83:9b:47:fa:08:18:9c:53:a1:ff:20:9f:3e:
         d2:a3:67:82:8a:5f:61:59:af:84:7d:18:fd:f5:8c:42:26:e1:
         70:a3:4c:e5:12:58:75:60:5f:ae:60:6e:0f:f4:5f:b9:32:14:
         ce:2f:42:59:42:f6:ae:84:9a:36:08:1b:d2:94:84:45:d3:2f:
         85:db:91:8e:81:dc:36:95:f6:fb:a6:35:60:cf:7d:35:aa:13:
         61:1e:54:40:33:e6:86:22:c3:3f:3f:63:9f:a8:d1:7f:7f:35:
         6e:20:6c:7c:5a:11:3c:05:d6:cc:81:b8:4c:45:73:66:44:ff:
         1e:34:53:8a:c6:60:78:97:65:3b:cb:7d:37:aa:75:61:5b:e3:
         b2:02:c0:5c:cc:b8:27:ea:c6:3d:0a:ac:09:ed:a8:b0:b7:0f:
         a4:d3:c8:9d:03:ac:22:2e:c6:34:93:3b:14:1e:1b:e3:51:64:
         52:d9:40:21:d9:22:c9:b2:b6:18:ea:17:0c:8b:07:1b:19:43:
         c4:0a:b7:60:b5:3f:12:16:5f:cc:3a:fe:43:be:8a:7c:4d:ba:
         93:fc:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:49 2024 by rpki-client on console-fra.rpki-client.org