Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
File:                     09db520b-31cf-3c16-9501-2fe36da89b1f.roa (raw, json)
Hash identifier:          QDrHDady787pOl77MGZ6qukmR9IroXaADSap9cX7kjY=
Subject key identifier:   A5:C8:C6:FB:22:25:60:86:F4:02:68:4B:26:C0:29:47:7B:D4:FC:4A
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F43285847362B5D2E266AE21F2F7CF920
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     13335
IP address blocks:        169.196.0.0/24 maxlen: 24
                          169.196.1.0/24 maxlen: 24
                          169.196.2.0/24 maxlen: 24
                          169.196.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5d:2e:26:6a:e2:1f:2f:7c:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=da38824b-ec4e-4131-9f6e-dc341ada3ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:f1:37:d3:b2:02:91:c1:8c:28:09:b1:d7:
                    1f:a4:47:37:58:8a:49:1e:94:61:d7:7b:28:e1:7c:
                    b9:dc:e3:f7:ae:3a:17:59:78:94:a5:1d:7a:af:16:
                    80:8d:be:60:5e:3b:ee:dc:12:0d:87:f3:6d:79:56:
                    6e:75:d2:5d:e5:32:fc:25:93:fe:06:2f:a9:37:5a:
                    d6:c4:8d:cb:9a:fd:2b:90:a5:a4:2c:84:cf:44:5e:
                    49:62:b5:9a:66:b4:4e:27:08:d3:5c:25:d4:47:8f:
                    d3:5a:f9:5c:97:7b:a7:bb:e7:7b:a5:8c:b0:75:3d:
                    5f:e0:b5:8e:08:67:c4:72:71:a7:42:19:04:ed:84:
                    0d:7c:b8:93:92:8c:77:41:5d:72:87:81:93:60:61:
                    3c:ad:57:89:1d:f2:3e:c1:08:db:8c:40:5b:d0:8b:
                    1f:3f:a3:16:90:44:37:ca:af:ba:8a:4c:89:eb:1e:
                    00:7f:a2:26:a6:33:36:cb:46:65:a2:e2:10:e4:a7:
                    48:c9:56:56:be:ab:5a:13:a3:db:36:d5:81:50:78:
                    8d:96:13:32:36:b1:22:00:c8:34:1d:ec:9b:fe:fa:
                    0b:bb:c9:cd:f8:34:03:ee:a3:9d:06:d7:c5:13:2a:
                    60:14:19:78:1c:65:76:97:08:41:81:aa:7a:a1:c9:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:C6:FB:22:25:60:86:F4:02:68:4B:26:C0:29:47:7B:D4:FC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:2e:8e:8a:03:43:38:20:8e:e3:07:c1:13:75:b0:98:e1:
         b0:91:eb:ed:3e:92:ee:04:e9:48:b5:0c:06:e2:68:3e:5b:df:
         8b:ee:68:97:15:64:7c:23:b4:13:90:3e:7e:39:92:7a:15:09:
         f0:ff:d5:de:0e:56:34:8f:45:b8:63:57:81:57:93:2d:9b:5f:
         d9:0f:f4:6b:f1:3c:a5:49:77:a6:5d:69:31:ed:cc:9b:b1:a2:
         5b:88:13:ee:73:d3:53:17:6d:e0:13:14:64:24:e9:29:23:69:
         ed:ed:49:07:40:2c:a8:9e:91:2d:97:ab:99:40:14:29:0a:1f:
         7c:ed:c3:37:99:e3:c7:96:fa:23:17:64:52:56:1b:3d:b8:2b:
         b8:3d:f0:69:8a:ce:a0:ff:fd:26:a0:57:1b:3a:70:92:b6:47:
         d0:b7:5a:7f:19:c4:bf:f7:d8:27:4d:c7:ff:90:7c:72:c8:7c:
         37:f8:24:7d:d7:9d:8b:63:d0:b7:77:61:22:c3:f3:de:05:6e:
         90:24:e1:99:12:82:41:0c:45:26:c9:f9:b9:98:37:b4:d5:3c:
         b9:d9:50:29:18:33:22:91:e0:83:22:98:ac:f0:84:e6:2e:41:
         22:62:68:d5:b2:00:f4:94:67:51:15:38:e1:45:a7:f2:a3:b9:
         e6:78:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:50 2024 by rpki-client on console-fra.rpki-client.org