Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa
File:                     6637cda3-387b-3290-92eb-9a008e4897f9.roa (raw, json)
Hash identifier:          kjq7V84TEqVhiGZg3vOt+5ia+ykvw6mryfELD1CitxI=
Subject key identifier:   8F:92:96:04:A6:84:EC:C2:C7:76:8F:F0:A1:B2:B7:6B:1F:17:69:7D
Certificate issuer:       /CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
Certificate serial:       010D0C9F432858472F3078A277415F12BB2EB2D0
Authority key identifier: D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     6597
IP address blocks:        147.160.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:78:a2:77:41:5f:12:bb:2e:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=218f07e7-563a-41fd-b79f-89485bb35a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:4b:5d:29:01:ab:cd:77:6c:a2:87:62:e3:
                    36:5c:8f:52:bd:40:a4:0c:a0:90:20:95:23:d3:ac:
                    16:6f:71:0a:c8:a8:2d:78:a8:d2:7c:0c:92:bd:bb:
                    02:4a:c2:c5:ea:64:79:5b:57:76:2c:6d:6a:7a:d3:
                    38:74:c7:77:38:9d:7d:4c:c3:bc:41:ce:01:1d:b6:
                    55:83:ca:b3:4b:41:16:79:ca:83:e4:11:8c:a5:44:
                    09:2d:fd:1c:62:3d:e0:d4:fd:6a:d4:0e:ce:34:39:
                    99:c2:9f:e0:6c:5b:cd:b6:70:79:b0:ec:16:1d:39:
                    25:3c:80:4f:74:91:de:f4:85:30:ca:b0:c3:ab:86:
                    5c:ce:2d:01:0a:5c:6c:58:da:29:d4:f0:75:50:17:
                    96:03:58:6d:19:58:32:c7:0b:f6:59:ba:67:0f:89:
                    3e:31:70:77:a2:f2:d8:18:86:de:dd:82:90:5e:c1:
                    6b:44:9a:79:cd:b0:08:09:87:64:4f:cf:bf:b9:a8:
                    28:ad:0a:8d:a4:32:d0:0a:5d:3e:11:fe:bf:95:d1:
                    36:f8:8b:ba:68:d9:18:5c:77:0b:bd:ce:00:4c:ec:
                    54:e2:58:ad:3f:ef:12:a7:ac:3b:53:26:c4:f6:0a:
                    16:4e:bb:97:14:93:0e:a4:a5:49:78:5b:73:20:37:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:92:96:04:A6:84:EC:C2:C7:76:8F:F0:A1:B2:B7:6B:1F:17:69:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/6637cda3-387b-3290-92eb-9a008e4897f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:af:e7:1c:73:55:31:cf:6f:c5:ee:28:6f:91:c9:a7:a9:
         8c:dc:c1:02:50:cb:c6:64:3d:1d:15:98:9f:77:55:a0:3c:c4:
         a2:bc:0f:55:ac:35:a4:bd:91:bb:51:56:3b:6b:35:8f:14:77:
         be:1b:0e:20:fb:b4:91:fc:eb:97:63:6e:35:ad:c8:03:11:c8:
         95:f7:6e:9a:e0:dc:95:6c:4f:59:c5:ba:a9:6c:55:f4:16:b5:
         77:bb:66:28:b9:8e:3c:8c:39:23:c6:75:3c:1d:78:90:84:64:
         2a:e5:95:88:d4:89:de:8f:0e:c2:1d:e4:a0:be:98:08:2c:a5:
         c6:ac:80:87:0d:b7:c1:70:34:84:14:c9:cb:7b:f9:63:1a:e0:
         5a:00:59:a4:a8:5b:ce:3b:78:1a:6a:51:1b:d0:5c:d6:1e:4c:
         39:52:7c:41:e6:f5:46:7c:4e:47:49:12:05:06:d2:ae:91:96:
         b3:fd:33:8c:ad:6d:b9:20:33:81:d6:12:74:e8:da:19:42:cf:
         17:bc:d5:b5:6a:13:83:10:80:8e:91:5c:96:4d:ed:dc:9f:ab:
         0e:49:b8:0a:4e:95:ca:e8:e1:e8:eb:c7:24:cf:51:04:85:8f:
         38:fa:48:2c:51:bf:95:15:77:3e:7c:76:bd:b0:2f:a5:74:50:
         2f:89:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:23 2024 by rpki-client on console-ams.rpki-client.org