Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/859e5faa-b450-37f1-be41-24da4e85d6f1.roa
File:                     859e5faa-b450-37f1-be41-24da4e85d6f1.roa (raw, json)
Hash identifier:          O/WCIo8Fq9xWqNjbs/a2pOGdD4b8IsqUILvoxyd2TAo=
Subject key identifier:   0E:1A:8A:1C:5D:73:52:A3:DF:23:1A:D6:B4:37:0A:A3:7B:D4:7C:96
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F43285847C87FF0164537DC2E8E46F540
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/859e5faa-b450-37f1-be41-24da4e85d6f1.roa
Signing time:             Tue 05 Nov 2024 22:59:24 +0000
ROA not before:           Tue 05 Nov 2024 22:59:24 +0000
ROA not after:            Mon 03 Feb 2025 22:59:24 +0000
asID:                     7029
IP address blocks:        170.39.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:7f:f0:16:45:37:dc:2e:8e:46:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Nov  5 22:59:24 2024 GMT
            Not After : Feb  3 22:59:24 2025 GMT
        Subject: CN=6bc8b127-5d38-4266-be22-3cb6065e24f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:21:8f:9a:11:6c:8e:94:0a:cf:ea:78:75:
                    9a:8a:1f:0b:66:6e:df:d4:63:f2:c6:4a:76:4d:18:
                    02:ef:1d:f7:55:c2:ff:32:fc:11:2c:e3:93:20:2c:
                    e6:a2:c1:5f:b0:7b:54:5b:ed:23:50:6e:c4:8d:77:
                    4c:3d:78:a6:4b:81:87:e7:1f:3c:5b:26:c3:c5:e8:
                    58:7d:8b:af:4e:56:2d:d0:e8:e8:b6:4d:2e:a4:e4:
                    15:42:e0:f0:f3:e0:cc:8f:72:d9:9b:40:85:26:08:
                    aa:f8:61:7c:56:b5:55:7e:42:57:96:1e:f0:f8:a8:
                    28:68:8c:e5:2e:d1:47:ad:7a:c2:ba:5f:35:50:be:
                    90:eb:0b:8e:26:c8:f3:73:8e:0e:be:9a:04:75:d8:
                    f5:f9:b8:f0:80:87:de:99:18:9c:42:b3:dc:ec:8d:
                    21:f4:11:46:6c:89:f0:f4:07:bd:e5:b1:09:ef:c0:
                    16:56:54:fb:85:25:a2:92:a3:e2:d4:fd:ed:36:d1:
                    fb:1f:4a:fc:86:c5:4b:e6:c6:63:27:0c:52:84:78:
                    cd:9f:4d:c4:06:fb:36:0b:9a:f1:80:14:1a:63:5a:
                    ca:79:0b:05:f2:cb:08:f5:45:a0:ed:8e:d3:62:fa:
                    bb:3f:56:95:53:aa:7f:9e:3e:99:22:51:d7:44:90:
                    23:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1A:8A:1C:5D:73:52:A3:DF:23:1A:D6:B4:37:0A:A3:7B:D4:7C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/859e5faa-b450-37f1-be41-24da4e85d6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:0e:0c:df:7c:69:21:81:30:1a:2f:4b:d4:ff:3a:8b:c4:
         cb:34:57:b6:4f:ec:73:f8:14:d1:93:b9:4d:d8:b6:3b:20:50:
         23:89:64:40:26:2a:21:a3:ad:ff:8c:5c:91:5a:9f:97:15:a8:
         22:d4:43:e9:6b:1d:53:87:11:10:1e:3e:54:7b:91:09:dc:c0:
         95:6c:29:65:36:10:b0:93:ea:fd:1c:1a:de:74:56:52:c2:3b:
         05:08:5b:4b:96:c4:d7:e3:2f:3b:1b:f8:f2:14:08:3e:40:a7:
         bf:d0:42:f6:96:c2:09:ba:53:66:e6:25:5c:03:dd:08:f4:4e:
         c6:26:b1:72:ab:8b:a8:38:57:50:e1:83:0d:c8:a6:f7:7d:c7:
         dd:e0:58:78:22:d6:82:ef:05:62:01:22:7f:60:9d:d0:eb:48:
         40:fb:66:42:2b:60:6b:8f:5c:16:e8:dc:56:88:f2:04:f6:23:
         b0:69:70:bd:55:1c:10:7f:71:34:17:0a:60:73:69:15:8c:d5:
         9c:13:fa:55:aa:10:5e:06:0e:0d:93:36:4d:46:f8:80:6b:0f:
         d0:0b:3a:20:c8:0b:2d:52:08:55:a3:74:93:85:c3:a6:ae:44:
         89:97:b6:ae:9b:cd:8c:53:47:ba:1b:4d:f2:8e:d2:9d:e7:5c:
         52:00:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:54 2024 by rpki-client on console-fra.rpki-client.org