Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa
File:                     1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa (raw, json)
Hash identifier:          NoLHvTZKeBTooYtk7/vNjsX7PgBGYKccwNQjZJlUNe0=
Subject key identifier:   3A:06:E5:A5:0A:01:2F:9C:83:BE:68:5B:69:C2:2D:D9:90:0E:60:DF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847EFEF816896CC1BDECB7EA200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     61317
IP address blocks:        173.211.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:81:68:96:cc:1b:de:cb:7e:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=860bef76-e317-44c5-b716-21b920a234f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ea:6a:cc:a1:13:24:65:42:d6:4d:81:e3:26:
                    e3:47:7c:a1:85:66:78:f3:35:1d:16:f0:b5:d9:ca:
                    99:a0:17:57:50:18:e3:77:9d:da:f6:b8:27:93:f3:
                    ad:2f:38:f1:a8:bb:95:c9:ac:db:38:c1:2d:e6:8c:
                    66:84:65:a9:b5:c6:fd:d9:5e:ba:ae:68:4f:8b:c8:
                    9e:02:e2:18:63:25:97:30:02:05:cc:80:bf:06:fc:
                    2e:81:c1:90:82:a8:54:84:a1:f6:de:f0:b8:eb:43:
                    86:ee:2e:17:08:fc:7c:5f:b1:72:71:b9:05:02:a1:
                    cb:ac:8f:4e:df:8b:7c:3d:4f:ce:00:bd:f1:a7:d2:
                    45:49:35:78:99:4d:08:0d:c3:8f:d2:e5:95:0e:5b:
                    65:38:ea:91:1a:69:57:cd:e3:d6:75:43:00:87:ba:
                    b1:2d:da:09:c7:d1:da:7b:13:14:54:6e:58:9f:45:
                    0d:81:b1:72:60:6a:39:25:db:26:ba:00:55:9a:78:
                    8d:19:1e:1a:b6:5e:5a:ec:43:32:d2:ea:02:3e:51:
                    92:5a:a7:bc:78:11:43:f7:c6:9e:a3:13:92:64:c0:
                    8f:6f:32:66:82:f5:f1:90:63:ff:49:a5:b9:cd:09:
                    03:cd:61:e7:cc:65:33:21:f2:45:70:85:00:75:95:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:E5:A5:0A:01:2F:9C:83:BE:68:5B:69:C2:2D:D9:90:0E:60:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:26:0d:7a:dc:98:70:78:27:27:f3:01:19:6a:e2:dd:34:7f:
         e6:c7:94:11:61:dc:71:8f:4e:e7:e4:ed:2c:7f:b5:c4:b7:20:
         f0:d9:f6:87:39:cb:df:6c:fd:f2:44:73:db:36:c8:6a:9b:9a:
         9d:20:17:8e:d1:0d:14:8e:98:33:26:43:3c:f5:a4:43:5f:af:
         71:ee:8f:7d:31:e0:20:20:d5:ee:68:ad:2d:6b:78:dc:4e:50:
         e1:44:d0:21:c8:5d:0e:74:13:4f:1c:c5:55:74:8c:e1:e5:27:
         7c:1d:a0:35:da:88:ee:53:07:90:47:6c:b5:32:65:0d:d3:8f:
         cc:17:43:41:cd:2b:93:99:c5:5e:8f:9d:67:64:56:c5:a8:69:
         84:36:8c:41:14:17:0c:88:44:80:2a:5c:f4:e8:fa:8b:49:fa:
         0e:a8:f7:38:ff:a6:c8:3c:a1:27:d3:c1:70:ab:fe:3f:10:07:
         af:45:6b:38:86:88:3d:c3:53:b9:fb:6a:28:da:4e:1b:38:07:
         7f:73:79:d6:9a:7d:c0:3b:14:57:60:55:33:d4:fa:48:fb:e4:
         a0:90:97:c5:4a:20:15:2a:ab:a5:96:20:c2:b0:b1:d8:11:f9:
         57:6b:8b:80:03:7b:52:db:3d:30:98:9b:47:39:30:6e:0b:cc:
         28:9b:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:17 2024 by rpki-client on console-ams.rpki-client.org