Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c16094f-7720-3f59-b087-65a0a0b603c2.roa
File:                     9c16094f-7720-3f59-b087-65a0a0b603c2.roa (raw, json)
Hash identifier:          0lDi/g2uC/mjDgLF9ux69OE5gvGvfLAHUaO9M8SRpS8=
Subject key identifier:   B6:D8:0F:33:ED:A1:27:24:F8:09:99:17:5A:09:D5:7B:62:8F:51:3B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649E6411DD1B818C783080
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c16094f-7720-3f59-b087-65a0a0b603c2.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        108.173.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9e:64:11:dd:1b:81:8c:78:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=7c9c9325-6f4b-4114-afa9-46494a96d794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:23:cb:34:fa:0d:b6:ab:63:e1:0d:bf:0a:
                    64:f6:e9:89:24:20:47:66:1f:2f:66:44:3a:6c:b2:
                    60:eb:93:c4:86:21:7c:28:7e:7b:2f:4a:d7:a3:b4:
                    64:a5:31:68:63:7e:41:a4:8c:da:59:c2:0e:2c:4b:
                    ce:57:6c:6a:e3:09:40:40:47:2d:60:b6:67:02:3a:
                    6c:2b:5b:df:18:e0:57:13:40:62:05:e6:e8:aa:f4:
                    a5:db:3e:92:2e:62:da:21:26:57:b2:cb:80:46:23:
                    d9:b2:be:74:41:3c:13:e0:1b:0b:8d:57:4b:79:92:
                    4c:f4:35:1b:aa:47:51:e7:19:b5:f1:83:c5:c2:e2:
                    21:92:74:cc:5b:07:53:e4:29:08:19:49:d9:ee:cd:
                    fb:49:45:e5:51:7f:26:0d:d5:05:1f:d5:f6:6c:ad:
                    97:8c:88:b0:43:79:3c:fc:0f:a9:f6:41:92:30:04:
                    44:37:b0:98:1b:92:bc:b5:20:10:9c:49:b9:e0:d0:
                    e0:02:ca:f0:b7:b4:16:cd:5f:96:9d:67:b4:d8:80:
                    5e:34:66:d9:76:25:08:ba:a6:33:28:d0:f3:46:d5:
                    0f:7f:4e:6d:a5:60:5f:50:53:b6:1b:f6:a0:bf:b7:
                    9a:a6:6b:6b:b7:3d:b0:67:cf:38:a1:4c:4f:ef:b3:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:0F:33:ED:A1:27:24:F8:09:99:17:5A:09:D5:7B:62:8F:51:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c16094f-7720-3f59-b087-65a0a0b603c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.173.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:5e:2b:3e:41:f8:cf:15:47:83:97:dc:c1:3f:0a:0e:45:47:
         28:c9:00:2d:8e:33:17:54:f1:4a:93:96:9f:73:44:aa:0d:8b:
         9e:d4:2f:9e:5e:9f:31:25:e1:49:0d:60:d8:5d:ee:74:d1:da:
         5f:33:00:9d:c8:ef:00:5b:60:52:cf:b0:41:48:d0:23:88:28:
         4d:db:bc:f8:fe:3d:83:ac:2c:44:43:49:41:d5:66:d9:f4:58:
         6e:0b:65:71:3c:6c:c8:9a:c8:b2:a5:5c:3b:1d:2b:25:1c:01:
         2e:2f:08:1c:98:6b:36:59:a6:bd:e8:52:35:f4:00:cc:23:d2:
         ec:aa:59:bb:b4:27:dd:d5:63:42:69:5a:d7:84:81:0f:fb:96:
         a6:57:b6:49:de:85:4c:b7:b7:1d:40:3c:96:86:ba:ff:53:bc:
         52:9c:2d:07:be:08:c5:89:06:df:03:40:b8:06:63:81:6f:98:
         b8:73:94:44:ee:f0:1c:45:30:91:6f:47:0b:a4:00:50:ed:29:
         7d:f9:cd:c2:a0:72:f8:4f:83:39:50:dd:fb:b5:76:02:2a:aa:
         1a:46:ec:4e:04:3f:95:63:71:28:f4:1b:18:22:e7:c9:59:3b:
         4c:57:58:0a:13:af:86:fa:9a:5b:1f:1e:71:fb:8a:2a:b0:46:
         94:31:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org