Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa
File:                     337f6349-eb96-3d85-8d88-4d78539f1677.roa (raw, json)
Hash identifier:          hW1uIj6PVBKjDXLOhG3N1boAtBcEaG/TTKgWV/eagKA=
Subject key identifier:   76:C8:BB:D6:87:77:74:70:66:B6:89:B3:34:9B:D5:4E:7A:23:0D:17
Certificate issuer:       /CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
Certificate serial:       010D0C9F432858477BF65DEBF490FFAE44DF1940
Authority key identifier: 5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     198949
IP address blocks:        162.129.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:5d:eb:f4:90:ff:ae:44:df:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb3e110-2f65-4e7f-8ffa-0a6719192f20
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=5bcf4792-225c-4e32-8299-ce0be0ac595e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:d3:79:17:08:68:fb:1b:f1:0a:b4:b5:f1:
                    94:f1:ac:1e:6f:e2:52:22:53:3e:8b:ea:c9:6c:77:
                    5d:1d:26:dc:91:86:f7:d6:a2:fe:f8:39:ed:e6:bf:
                    55:20:17:14:a8:70:72:6f:f1:c6:e7:b1:87:ea:07:
                    b9:4e:28:56:cf:b0:ef:5c:44:09:97:f2:79:ef:80:
                    2b:a1:41:0d:e5:d0:93:7c:33:af:86:b2:99:12:28:
                    97:c5:0c:e3:17:33:9c:c1:d3:fd:d5:a3:dd:80:35:
                    ae:f2:46:f6:58:64:10:b4:e5:33:bc:9e:73:8d:5d:
                    19:6a:e6:a2:89:e8:9d:50:f9:95:76:ea:2d:98:41:
                    bf:ca:ea:16:0a:cc:10:8f:ce:2b:02:f0:ed:f7:31:
                    07:04:f0:fc:a7:85:5e:ba:62:67:31:b1:4d:f0:83:
                    19:a6:0a:75:e4:54:77:59:5a:98:3a:5b:e5:ab:07:
                    62:eb:61:8d:aa:3c:87:a9:92:cb:c2:9b:b4:b6:92:
                    c7:96:06:5b:e5:4a:fb:f4:18:df:18:56:24:ea:f6:
                    84:85:a1:2a:18:7c:5a:ec:78:1e:22:d0:f9:03:67:
                    05:27:f8:fd:4b:e5:6b:45:38:d4:bc:16:04:78:06:
                    f5:bf:18:dd:7d:5c:22:55:9f:63:d2:53:d4:4c:f7:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:BB:D6:87:77:74:70:66:B6:89:B3:34:9B:D5:4E:7A:23:0D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/337f6349-eb96-3d85-8d88-4d78539f1677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.crl

            X509v3 Authority Key Identifier:
                keyid:5D:85:67:E2:D0:90:6B:9D:55:2F:8C:A2:02:A1:80:D0:38:74:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3bb3e110-2f65-4e7f-8ffa-0a6719192f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4b:c0:a1:c2:ea:7f:b9:2a:8b:c1:8e:ce:37:53:dd:0d:02:
         8d:13:a9:98:c1:fe:5b:df:79:05:f6:7a:02:bd:7a:4c:d9:43:
         dd:55:c3:47:f1:15:29:97:1e:c1:8a:9c:e1:ec:24:2d:da:49:
         70:77:8a:82:fa:5f:bb:6c:9c:dd:c2:85:d7:c9:fe:b7:43:21:
         df:96:13:d4:c0:87:ce:64:1c:c5:cf:9a:b8:0c:94:cb:07:32:
         43:93:21:a1:bf:b6:1c:b3:68:ea:72:84:61:73:2e:63:27:76:
         61:7d:06:fe:ba:66:33:0e:f1:83:76:da:72:32:a5:fa:9a:ea:
         b7:42:ae:1a:4b:1c:13:0b:dd:e7:32:07:bb:5b:9d:c1:70:b0:
         31:d1:a2:4a:51:f0:46:42:c2:fb:17:5c:e6:25:19:b7:f2:d5:
         5e:49:55:8c:d9:e6:72:a3:c4:68:34:f7:9f:ce:21:a0:16:1f:
         46:df:9a:ed:c3:39:5a:c2:3d:fb:9f:1f:96:20:42:a3:d3:4a:
         87:f3:d1:58:4c:be:99:cd:0d:6e:5f:3b:26:aa:cb:92:2f:be:
         86:08:ee:d1:9b:6c:79:4c:37:15:64:7e:21:ae:a3:d7:7b:77:
         bc:06:78:bf:6e:c3:5d:37:49:bc:db:fc:57:00:60:61:ba:cd:
         6b:31:44:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:33 2024 by rpki-client on console-fra.rpki-client.org