Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa
File:                     04483737-3da9-360f-9056-a84ebc6d1762.roa (raw, json)
Hash identifier:          eDr+vSAAUT8XMYvx+/YAgN9wCuqncG1BkY0bfvqDnIk=
Subject key identifier:   54:D4:17:E2:FC:C3:41:DF:33:2A:14:5F:B5:94:8D:94:A3:29:9F:2B
Certificate issuer:       /CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
Certificate serial:       010D0C9F43285847362B4F240A03FBF5645DF6C0
Authority key identifier: 84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        163.123.172.0/24 maxlen: 24
                          163.123.173.0/24 maxlen: 24
                          163.123.174.0/24 maxlen: 24
                          163.123.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:4f:24:0a:03:fb:f5:64:5d:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d41cd5-6bda-4d2b-aff4-b89893aa1531
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=4d3bd6ba-9e3f-40ff-9144-8a7f9a4747e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:7e:e4:64:f0:4c:2a:fe:96:22:2a:0d:66:
                    50:dc:35:a2:cc:e5:dd:85:c0:9c:75:20:8f:c7:bd:
                    11:6f:73:f9:55:f2:c4:ec:b0:54:a1:b5:55:fd:96:
                    86:4b:40:b2:4a:e8:5b:e9:ca:1b:1a:c7:6c:60:b9:
                    f8:72:67:cf:c6:3f:8c:03:0b:f5:15:29:17:4d:1f:
                    31:f1:b3:c5:1f:5d:4e:77:d1:36:02:9d:07:5f:80:
                    08:f8:95:fb:f4:fb:e0:49:6b:3f:9e:2b:eb:70:ec:
                    73:bc:4a:28:a7:75:eb:21:5a:67:b0:7d:5b:e8:96:
                    11:aa:75:ad:36:ef:f6:af:44:fc:58:2a:72:08:85:
                    2e:ec:d3:8a:20:a2:b1:d8:f3:89:bb:0e:ac:21:dd:
                    d2:a7:66:5e:9b:91:06:9d:d9:d0:59:0a:51:c8:16:
                    7d:ee:3b:f7:79:e2:d6:be:92:f1:99:c0:cd:94:4e:
                    c1:c3:76:1b:32:8a:2b:08:9c:c2:98:35:3c:ee:50:
                    14:a2:3c:1d:63:58:7f:f7:ec:29:bb:17:4b:a6:6f:
                    c0:9c:43:7a:8c:0f:20:af:a4:5d:78:d5:4d:3b:9c:
                    05:ba:3c:ec:21:6b:15:05:74:49:c7:4a:da:f3:5f:
                    e0:ee:11:b3:1a:8e:9a:b6:74:96:00:c2:31:22:33:
                    55:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D4:17:E2:FC:C3:41:DF:33:2A:14:5F:B5:94:8D:94:A3:29:9F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/04483737-3da9-360f-9056-a84ebc6d1762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.crl

            X509v3 Authority Key Identifier:
                keyid:84:75:FD:0B:B1:EC:65:B3:FC:1D:85:04:A8:6C:38:DC:C4:CD:AD:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d9d41cd5-6bda-4d2b-aff4-b89893aa1531.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:37:14:0a:22:73:b0:88:e5:81:d8:8e:1d:a0:96:02:06:94:
         42:57:89:8c:87:fa:98:dd:f4:d6:dc:32:af:97:85:ad:4e:e6:
         95:47:95:98:10:ec:eb:e6:01:94:fb:04:f0:50:e5:24:a1:bf:
         d6:3b:bf:c8:64:99:66:06:d6:e1:44:49:01:82:ee:a4:49:e9:
         ae:ad:af:e2:69:f9:46:98:ff:e5:f1:f8:d2:39:91:d1:07:29:
         b0:b8:1e:36:e1:a9:ee:ad:be:ae:25:11:29:87:0e:a6:bd:3c:
         8a:57:0f:0e:ec:9d:ac:d0:41:d9:d8:34:8d:e1:32:75:8f:32:
         fd:3c:13:aa:84:42:f8:6f:45:fa:ce:bd:25:d1:4a:16:a6:54:
         e7:77:ee:eb:11:7e:1f:b6:aa:8d:ff:85:a5:28:94:e5:f1:b8:
         67:1a:f5:d8:44:0e:9e:87:88:c8:53:d9:48:d8:19:0e:25:e6:
         79:45:df:63:96:52:2b:6a:3e:ca:ee:fe:ed:61:81:4e:62:7a:
         62:0c:92:7b:5b:ef:05:e3:98:5b:6a:b9:6f:15:e1:8c:42:22:
         b1:e6:e7:ab:5f:fd:3c:fe:1b:49:c3:e3:01:f6:ce:0f:5b:f0:
         9d:09:9b:dd:61:e9:16:5f:36:98:68:72:b2:93:c6:67:01:8a:
         57:93:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org