Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/6f37a0da-4995-3588-b43e-47081548b8cb.roa
File:                     6f37a0da-4995-3588-b43e-47081548b8cb.roa (raw, json)
Hash identifier:          R8uznTx9HXovkaAt5q+Iqb83rbLlJIv/y5bq/Q7RuSA=
Subject key identifier:   0B:69:78:C4:1F:A3:E6:40:98:90:47:1D:EF:FE:A9:0F:8A:7B:04:40
Certificate issuer:       /CN=9c677c51-fa6f-4aab-b913-17c1598c222e
Certificate serial:       010D0C9F4328584733608D547F41C3A9CB1925F0
Authority key identifier: EC:3E:C6:DC:C1:16:F1:5C:38:EA:62:82:A5:7B:40:22:14:06:04:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/6f37a0da-4995-3588-b43e-47081548b8cb.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        170.39.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/9c677c51-fa6f-4aab-b913-17c1598c222e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/9c677c51-fa6f-4aab-b913-17c1598c222e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8d:54:7f:41:c3:a9:cb:19:25:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c677c51-fa6f-4aab-b913-17c1598c222e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=82ca6401-6669-4777-ab24-5c9a6a28d9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:42:86:f2:44:17:f3:6e:65:da:15:fa:36:
                    37:dd:bd:f9:8b:df:59:a6:9a:60:59:46:59:ef:d1:
                    f1:b1:fc:a5:6d:1a:e0:eb:16:eb:47:cf:1e:76:f5:
                    a8:20:77:7a:6a:28:53:5a:42:ee:7d:91:94:7c:0e:
                    85:31:95:64:71:02:92:6f:a0:2a:d7:36:c8:e1:62:
                    23:a3:d9:9d:f0:9e:d6:94:b1:26:84:24:5d:34:a4:
                    08:56:b0:d8:c0:6c:17:c7:85:d2:78:39:b5:26:77:
                    e0:36:f2:68:24:c0:c9:4b:11:bc:a8:87:77:7e:80:
                    57:5b:b8:4f:8c:17:59:86:60:c1:ea:02:0b:17:ed:
                    35:bd:08:e6:52:b2:80:d8:a0:f9:78:c8:95:16:ad:
                    4b:8e:26:70:8f:84:1f:85:85:30:01:55:5f:6e:c4:
                    fa:9b:26:17:3a:d4:85:53:8f:11:35:53:d2:5d:af:
                    59:78:94:2b:0f:43:ff:da:94:aa:3a:e9:54:03:6c:
                    f3:d5:d7:df:24:ff:f9:ad:43:3e:8c:3b:54:66:59:
                    19:4d:ba:51:1f:84:55:92:af:cc:22:3c:67:28:4f:
                    92:03:32:85:bb:83:1d:a9:f3:43:96:98:a8:4a:e9:
                    b2:5a:98:80:71:62:37:b0:e4:88:5c:31:f1:a2:24:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:69:78:C4:1F:A3:E6:40:98:90:47:1D:EF:FE:A9:0F:8A:7B:04:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/6f37a0da-4995-3588-b43e-47081548b8cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e/9c677c51-fa6f-4aab-b913-17c1598c222e.crl

            X509v3 Authority Key Identifier:
                keyid:EC:3E:C6:DC:C1:16:F1:5C:38:EA:62:82:A5:7B:40:22:14:06:04:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9c677c51-fa6f-4aab-b913-17c1598c222e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:08:4e:f5:59:92:6b:65:37:81:fd:cc:32:6b:50:a9:51:96:
         ac:8f:52:8e:0f:f2:ff:d5:fb:74:d8:a8:c3:72:2a:1e:f6:49:
         09:b1:82:fb:54:33:4b:af:23:ac:66:09:ec:46:dd:02:6e:12:
         33:e6:52:4b:95:36:76:02:14:a5:55:6b:3f:ce:7e:3a:19:12:
         af:95:0f:0d:18:18:ee:96:f7:bb:5b:15:04:67:66:de:ed:83:
         fd:17:c4:48:19:99:01:3e:5e:46:d6:24:c1:65:63:f9:1d:b0:
         57:03:55:c4:81:f8:6b:4c:84:b9:f7:f3:8e:b6:49:39:14:b8:
         71:3a:6a:03:2d:e1:fb:11:49:1e:cc:47:35:5e:b3:c3:9b:31:
         a0:30:d7:dc:af:8a:03:cd:87:5c:55:a5:6b:56:96:53:0b:30:
         ac:9f:db:95:4d:94:28:bd:eb:47:50:92:2a:a7:5f:44:71:c7:
         f6:85:25:b0:5d:4e:ab:a8:97:c6:7a:6f:ca:77:ab:e8:b9:fa:
         a5:f8:36:88:fc:ac:10:a0:4e:2d:99:79:e5:8f:83:97:5c:13:
         7d:8d:da:c9:0c:f5:4d:ae:b3:2f:f0:8b:18:5c:13:97:03:af:
         db:0c:0c:72:cf:b9:18:43:fe:dc:67:dd:d0:38:95:c6:e8:d1:
         01:4f:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:19 2024 by rpki-client on console-fra.rpki-client.org