Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
File:                     fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa (raw, json)
Hash identifier:          8pNjKdQ/edPFJmDQ6Cf/J9poWxIxLi5NEEdJsR0ZsCQ=
Subject key identifier:   7E:77:4E:75:55:D3:ED:D5:96:B9:BB:CC:EE:43:61:B3:F0:9B:87:35
Certificate issuer:       /CN=26dda032-79f9-423e-9994-33fdb1cd44db
Certificate serial:       010D0C9F432858473A5B87E8C55DA46C1A8BA380
Authority key identifier: 94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16509
IP address blocks:        162.253.3.0/24 maxlen: 24
                          162.253.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:87:e8:c5:5d:a4:6c:1a:8b:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26dda032-79f9-423e-9994-33fdb1cd44db
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=bd9b5b83-4b38-44fb-acf3-9ca0a481d517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:96:5e:fd:45:9e:45:93:cb:79:23:80:cb:
                    d3:cb:2a:b8:60:94:5e:32:26:2e:44:d0:79:5b:4c:
                    8e:3d:fc:fa:98:70:fc:c1:cb:88:64:2e:00:77:c6:
                    69:50:99:1e:16:70:08:54:16:33:ee:cd:80:8f:97:
                    11:c1:e4:cb:10:ca:2a:e8:a3:a0:58:ef:61:23:90:
                    bd:2a:31:5d:47:d7:df:09:18:e1:75:dc:c5:6f:60:
                    ee:68:c6:1b:aa:55:4d:f7:cb:da:5d:d0:e5:a4:bf:
                    3d:19:7a:db:8a:14:1a:e9:f2:ce:69:30:5a:ed:18:
                    fe:fb:9d:dd:77:8b:c1:95:2c:1d:5f:6e:fe:4f:52:
                    d8:9d:9c:d3:63:64:b9:4b:11:f7:df:71:3d:fb:82:
                    86:44:fb:43:0d:95:00:07:57:42:c5:bb:e1:d9:1d:
                    06:96:97:63:69:c6:9f:bf:ab:27:bc:c5:de:95:cb:
                    b2:a6:88:2e:eb:a7:0c:59:93:7f:69:61:0c:7b:3a:
                    e6:f8:ca:94:47:34:f2:66:be:f7:78:7c:c8:83:e6:
                    d4:a2:8d:5f:95:9b:46:98:92:79:97:7f:53:d4:cc:
                    98:d3:14:b0:73:dd:ee:22:12:a6:d6:29:7a:42:e3:
                    38:64:7c:ba:69:b8:83:7a:6f:8f:a0:96:46:e1:32:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:4E:75:55:D3:ED:D5:96:B9:BB:CC:EE:43:61:B3:F0:9B:87:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/fd7537f2-ffc4-362a-9bd4-cfa44d19ff2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db/26dda032-79f9-423e-9994-33fdb1cd44db.crl

            X509v3 Authority Key Identifier:
                keyid:94:EC:47:35:2C:31:EC:44:41:FF:E1:E1:D7:7A:71:05:4F:15:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/26dda032-79f9-423e-9994-33fdb1cd44db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.3.0-162.253.4.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:c0:1b:70:57:b5:de:d3:54:67:9c:91:ea:3e:52:1d:bd:
         e4:5d:5a:26:9e:b6:74:ae:e0:bf:f1:f4:74:4c:12:8b:8c:7b:
         e9:d1:5e:2d:ed:d8:e5:f2:17:86:23:37:39:7b:d4:d9:7d:6b:
         8a:90:29:cf:77:03:12:f6:98:e0:fa:05:11:2e:ca:7b:8f:2a:
         10:44:eb:0a:f3:89:f7:f8:4f:ed:4b:6a:49:ea:01:2b:7f:25:
         79:cf:40:bf:e2:c7:11:13:a2:6d:a6:fa:b2:17:fe:02:4a:9c:
         d8:b8:35:9f:4c:df:aa:e7:62:91:0a:b2:a3:75:ee:e6:4b:08:
         40:90:a4:4b:28:a7:97:94:5b:c0:98:2e:30:49:cb:27:49:9a:
         34:64:c1:63:42:2e:6d:8f:a6:e4:f8:b1:34:ee:3f:34:4e:b7:
         f0:54:ab:45:89:e7:a0:ac:db:6c:eb:af:b2:4c:d3:f3:b7:52:
         a8:0d:80:e3:50:c9:38:3f:da:25:a4:de:da:9e:c1:67:65:d0:
         2d:d1:43:6e:e0:43:7c:50:11:4a:19:94:09:b6:b0:87:ab:30:
         f2:aa:0a:8e:d9:f1:72:33:fc:22:67:e8:3c:15:21:6a:c8:97:
         c8:de:72:ae:e6:d8:00:f6:07:81:d2:ef:44:ba:2a:08:0c:4a:
         26:2f:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:27 2024 by rpki-client on console-ams.rpki-client.org