Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/93fce3e3-0fa7-38ee-ad34-7475db7aeb6c.roa
File:                     93fce3e3-0fa7-38ee-ad34-7475db7aeb6c.roa (raw, json)
Hash identifier:          o2wHrxbjmoihJYGveLifoeCAQkpne35T+QMhFuZF6W0=
Subject key identifier:   DA:66:FE:86:AA:55:13:A3:DE:7B:6C:8E:FD:D5:86:EC:5E:E3:D3:25
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F43285847C87F509512490E6C831D9D80
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/93fce3e3-0fa7-38ee-ad34-7475db7aeb6c.roa
Signing time:             Tue 05 Nov 2024 22:58:09 +0000
ROA not before:           Tue 05 Nov 2024 22:58:09 +0000
ROA not after:            Mon 03 Feb 2025 22:58:09 +0000
asID:                     7029
IP address blocks:        170.39.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:7f:50:95:12:49:0e:6c:83:1d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Nov  5 22:58:09 2024 GMT
            Not After : Feb  3 22:58:09 2025 GMT
        Subject: CN=999c9f63-3fe7-4c19-941c-a7044c8af547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:db:a8:4c:27:fe:64:af:6d:f7:7b:c9:88:
                    dc:af:81:24:4f:be:4e:91:ff:83:95:2d:5b:86:6f:
                    0d:25:d5:6f:89:cf:49:c2:c5:88:bb:db:f1:73:75:
                    f5:d0:bf:1c:02:28:94:b9:f6:56:f9:4a:44:91:af:
                    8c:4f:70:0a:70:a4:9c:ee:02:d2:f9:d6:ac:15:04:
                    86:88:b8:58:04:c4:e5:4f:04:84:ca:08:81:99:00:
                    d3:15:2e:b2:8c:75:2d:ce:41:38:1f:94:3c:21:7e:
                    a3:19:c8:e6:f9:e6:39:e1:01:4e:d5:eb:92:18:f6:
                    2d:ce:49:58:3c:16:fe:dc:29:84:30:2e:9f:6b:ed:
                    e1:2b:60:da:5c:05:d9:38:6e:a8:22:d5:1a:7f:88:
                    c0:e2:cf:cb:6d:0c:5a:f5:bd:01:fd:7b:e0:21:34:
                    43:b7:f8:a6:5d:f6:5a:7b:ff:4c:4b:8e:c3:da:e1:
                    ee:73:b2:92:c8:55:8d:22:17:d7:2a:c0:8b:44:92:
                    f5:f9:32:d8:63:b0:6e:a7:92:a3:36:1b:13:63:d2:
                    ac:1c:ac:83:7e:2a:c3:e7:a7:f4:1d:cf:eb:4e:39:
                    34:07:d5:b3:96:49:bd:5b:84:17:a3:00:e5:38:bf:
                    87:c1:86:e8:73:0a:d8:19:c6:ca:3e:f7:2b:b6:f5:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:FE:86:AA:55:13:A3:DE:7B:6C:8E:FD:D5:86:EC:5E:E3:D3:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/93fce3e3-0fa7-38ee-ad34-7475db7aeb6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:76:53:e5:29:95:37:52:9a:d4:77:1e:ab:11:10:37:57:
         b9:68:4d:e7:89:bc:38:1a:f6:b0:73:15:ba:a8:20:d1:39:62:
         5a:20:df:65:bb:2b:13:e8:aa:3b:76:e6:d4:a7:1a:a5:93:42:
         4e:27:97:c3:85:c2:e1:76:db:1a:ce:86:90:43:07:43:54:81:
         d6:99:ca:56:84:4d:4c:0f:23:2c:e1:ad:c3:fa:d2:89:c4:89:
         2e:35:c0:7c:5f:ed:d3:35:a8:a0:f9:35:aa:73:6c:b9:2c:bd:
         59:10:75:5d:c3:2f:34:db:fa:9a:48:24:20:3b:c3:30:d8:c5:
         4c:be:d8:b6:36:58:a0:e3:fd:da:41:b5:97:53:73:ff:29:e5:
         ca:b2:5c:c3:72:df:55:f5:04:c7:0b:ea:7d:28:d9:96:d9:a4:
         dd:41:52:e1:11:cd:ae:c2:0b:12:31:ba:2c:d4:f4:68:bc:ce:
         f9:ca:87:1a:83:8a:d8:98:6c:86:86:81:4f:55:0e:fb:b7:02:
         2a:59:1d:fc:c9:d7:ac:5e:8f:22:fe:71:a2:a2:0d:8f:1a:c3:
         2a:eb:20:ac:21:99:b9:c0:36:6a:c1:94:2a:95:37:e7:cf:4f:
         04:fe:77:b9:59:a7:f0:07:89:61:ae:8a:3a:33:af:ef:11:1b:
         e6:6f:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org