Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa
File:                     168c288f-3357-3f43-83d2-a20bb6ff9278.roa (raw, json)
Hash identifier:          G7UIOHgv9KZ1UfN/vDbK3y6obHimAoZAQlmPqDT/WWw=
Subject key identifier:   B0:31:2C:CA:C7:01:60:5C:4D:19:53:53:0E:1C:F8:D3:0D:CA:10:9D
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F432858479A82410AD419B2C2F69BF580
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa
Signing time:             Sun 20 Oct 2024 11:36:53 +0000
ROA not before:           Sun 20 Oct 2024 11:36:53 +0000
ROA not after:            Sat 18 Jan 2025 12:36:53 +0000
asID:                     216425
IP address blocks:        165.140.20.0/22 maxlen: 24
                          2602:fc5d:fe0::/44 maxlen: 48
                          2602:fc5d:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:82:41:0a:d4:19:b2:c2:f6:9b:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Oct 20 11:36:53 2024 GMT
            Not After : Jan 18 12:36:53 2025 GMT
        Subject: CN=5bbd4d3a-921e-47ac-963d-6dfa6f2894a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:4b:33:4b:8c:46:02:c5:f9:8b:e0:98:ef:
                    5c:27:97:13:47:21:f3:e4:0b:9d:ce:72:f2:89:46:
                    4a:bb:d3:6d:bb:d1:12:87:c3:b6:08:72:ec:ea:a0:
                    76:e9:ae:92:03:03:00:e0:4b:d4:0f:aa:32:00:26:
                    23:63:75:2f:f5:1c:e5:e0:68:c6:7b:c1:36:b2:91:
                    44:50:a5:8a:c5:68:73:93:b5:19:05:18:90:66:6c:
                    b2:4e:90:59:b3:0d:aa:59:6b:bc:5b:c3:41:68:db:
                    6f:59:e7:cf:d7:25:91:76:b0:37:c8:0a:f9:c4:2c:
                    d6:2d:1c:7b:e3:c3:d9:29:42:f6:9f:f4:99:8d:09:
                    2f:40:24:85:59:a6:0c:bb:28:74:04:a8:31:4c:ea:
                    78:8f:bb:66:9e:d0:6e:e0:87:58:b1:95:dc:28:9d:
                    6f:be:00:19:04:e4:c0:3b:62:e2:67:7b:18:6b:92:
                    dd:5a:68:18:d3:c2:22:41:75:a0:53:39:a4:03:46:
                    f3:b8:4d:06:2f:a1:c0:24:30:85:3e:ea:32:f3:be:
                    cb:42:5d:40:f6:60:0e:e5:dc:45:a8:a5:a4:b2:5b:
                    17:61:cf:f5:f0:6c:f0:0e:a7:a4:7b:b6:91:27:67:
                    fb:49:6d:95:a2:d9:88:0a:72:0c:e3:56:db:9f:1d:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:2C:CA:C7:01:60:5C:4D:19:53:53:0E:1C:F8:D3:0D:CA:10:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/168c288f-3357-3f43-83d2-a20bb6ff9278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.20.0/22
                IPv6:
                  2602:fc5d:fe0::/44
                  2602:fc5d:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:d1:a2:15:74:87:c2:05:f1:48:81:09:27:00:7f:2d:7d:
         14:70:5a:7d:71:db:99:a7:66:73:02:2c:43:f0:ec:2b:c9:30:
         6d:5a:79:ff:f2:d5:f9:5c:da:71:9e:32:10:3a:81:b5:4e:0b:
         45:f5:4c:46:20:d0:5d:4b:aa:22:fc:ae:9f:b1:5b:e4:87:29:
         04:32:11:e0:a2:11:20:38:0c:e1:9c:60:a5:68:a2:b5:cb:9b:
         12:48:03:00:5d:da:01:5d:f3:39:e3:d7:e5:de:3b:30:57:30:
         3d:e6:2d:76:55:de:13:1e:ed:c0:61:2e:27:f2:17:a4:8b:a0:
         ad:0b:f0:cd:a2:fc:53:cd:36:d5:fb:25:58:ca:cf:79:c8:e9:
         d3:ae:56:e4:f3:ba:a7:f1:7d:7b:6e:98:50:7a:ed:e0:02:e4:
         ff:d4:59:d4:e0:ff:82:89:69:40:87:f5:63:ce:e3:5c:4f:5e:
         6d:99:cf:2b:a9:a4:85:a3:5b:fd:de:4c:98:91:ff:19:db:9e:
         04:86:82:88:ce:e2:b9:5f:5a:fb:c6:76:a3:ee:35:8a:59:ad:
         b6:3b:5b:fa:0b:a8:fd:82:43:8e:3b:db:b3:49:20:0b:6c:fd:
         da:b0:15:35:de:f6:c0:20:bd:2d:e9:04:a6:8d:71:fa:52:b5:
         3b:aa:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:29 2024 by rpki-client on console-fra.rpki-client.org