Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdd355cd-7609-3530-8612-7e506257fd2b.roa
File:                     fdd355cd-7609-3530-8612-7e506257fd2b.roa (raw, json)
Hash identifier:          i6OAMsq0VIdqUlLacDn39IWLOA+zNya8jZydl2CL9W0=
Subject key identifier:   3A:7F:C5:D5:FF:E5:EA:80:4A:5F:29:2E:D4:3D:57:A8:12:DA:8E:B6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649BB6DACDD95EC5F6A780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdd355cd-7609-3530-8612-7e506257fd2b.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        173.182.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9b:b6:da:cd:d9:5e:c5:f6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=54e50723-99ad-4611-8909-d93c341fec9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:a8:42:94:cc:c6:9a:9e:4b:39:cd:35:ac:
                    19:9d:ca:dd:46:55:e8:cc:bd:46:73:04:11:1b:2f:
                    38:e5:ae:e3:5c:e9:b4:76:07:f6:6d:93:41:99:29:
                    83:15:f8:c1:f9:c4:81:d5:82:29:25:6d:91:0a:32:
                    2f:79:65:51:e2:bd:a8:78:71:1c:96:74:58:ec:51:
                    58:55:4a:3a:fc:3d:d1:86:39:81:2e:e6:36:18:13:
                    52:2b:30:5e:e0:9f:8a:ba:d3:e2:cc:cf:b3:3c:64:
                    33:e7:4b:16:6a:d8:4d:29:e2:28:c7:1c:ca:4b:c7:
                    04:fb:98:45:19:ad:31:44:32:28:cb:62:e0:b5:7f:
                    26:84:b3:e8:a1:bc:15:00:98:5f:bc:cd:de:36:8d:
                    47:3d:90:4e:54:28:18:6b:07:42:95:24:08:be:e4:
                    86:98:25:41:fa:7d:4a:2c:3e:0f:3f:aa:4c:3b:06:
                    55:e0:4b:c7:0a:2d:cf:e0:85:df:98:fa:5f:71:dc:
                    97:fb:c2:90:f1:74:55:4e:1d:3a:74:a1:51:48:2c:
                    0d:62:23:76:39:1a:00:9d:4b:0e:b2:42:61:05:61:
                    34:e9:be:5b:fa:b8:66:ba:49:11:02:98:94:18:27:
                    75:a8:f3:ed:ad:c4:8d:b0:7c:4c:6c:13:ee:63:6d:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:C5:D5:FF:E5:EA:80:4A:5F:29:2E:D4:3D:57:A8:12:DA:8E:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fdd355cd-7609-3530-8612-7e506257fd2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:ea:5a:af:3e:cc:39:02:21:25:a7:cd:05:bc:36:1c:3e:
         02:d1:53:3a:7f:c6:39:bf:33:9d:ea:a1:ee:c9:c0:2e:53:3e:
         bd:f9:e2:d3:99:36:17:df:da:f3:ab:90:2b:51:a4:3b:4b:85:
         d8:ae:ae:c6:3e:14:8d:25:b6:14:b1:0e:1a:65:32:fc:e3:17:
         f5:3d:5f:7e:ce:15:3a:25:d9:c7:06:5b:2f:d6:94:d7:a1:64:
         42:42:72:6e:aa:e8:54:b1:f1:45:3a:72:41:16:8b:e4:7a:c0:
         49:27:cf:ab:46:64:ea:29:46:b9:5c:dc:3e:ae:63:05:81:0d:
         0c:4e:df:29:07:87:54:04:08:41:a7:dc:19:38:4a:0c:a0:43:
         17:13:bd:0f:96:53:2b:17:d7:2e:68:f1:bc:eb:77:12:54:b5:
         8e:9a:df:9a:cb:be:33:3d:8d:c3:77:cc:b9:3e:8a:fc:5a:62:
         1e:16:87:0f:59:c7:df:49:86:a1:ca:10:09:74:0a:ac:6c:e1:
         ab:a5:19:16:8b:e5:fc:09:ce:fb:a9:c3:3e:30:a0:b5:70:cd:
         00:8c:e7:62:b8:71:33:3b:7a:9d:9a:0a:11:ff:12:68:62:df:
         bf:f9:cb:5e:f9:6c:4d:08:ad:0c:1f:bc:d8:4f:27:ed:79:b3:
         fe:74:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:29:22 2024 by rpki-client on console-ams.rpki-client.org