Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
File:                     cca9dae9-2f19-3eba-9783-9689f593ab54.roa (raw, json)
Hash identifier:          SMqnJQhw+QySBBXJYcV9SCHrPVzwxRLdyXQ4JNaryk4=
Subject key identifier:   5E:FD:D9:F0:47:6E:E8:05:FC:E1:D0:F3:F9:46:70:F2:B6:A6:18:14
Certificate issuer:       /CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
Certificate serial:       010D0C9F432858473D25E6EFC8BB91D9A0B71FB0
Authority key identifier: EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     17098
IP address blocks:        158.51.40.0/22 maxlen: 32
                          172.97.100.0/22 maxlen: 32
                          209.182.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:e6:ef:c8:bb:91:d9:a0:b7:1f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=38dfe32e-0694-4785-b1a3-e35fb2d6ee78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:b0:68:c4:63:72:c3:de:b4:0b:c9:6a:e5:
                    8f:ab:86:cc:67:7a:30:da:91:40:d6:ff:1c:35:df:
                    6c:d0:36:44:2b:f4:47:23:08:c4:74:fc:81:d9:4c:
                    93:e5:89:dc:ee:90:74:bb:7a:6a:e5:28:f4:ac:36:
                    83:c5:ab:b2:f5:d6:cf:bc:06:d7:de:c8:42:45:df:
                    f2:2d:71:a9:f1:38:b1:64:9b:3b:ef:64:2e:7b:9f:
                    ce:b6:a6:94:c6:45:b2:85:2c:8b:89:c4:2c:40:0e:
                    0e:f2:30:42:e3:7c:d3:81:d8:dc:c2:d4:f8:df:73:
                    c4:57:ff:03:23:5c:cf:ed:2f:7f:6a:a0:8f:8b:ff:
                    85:2f:ac:d6:2d:8a:dd:57:72:a2:d2:31:a5:a2:ce:
                    95:10:b9:a8:5e:40:d3:df:d1:02:c6:da:6d:41:4d:
                    bc:7d:94:9a:b4:87:27:5f:c1:dc:4e:63:dd:be:11:
                    b6:89:37:3f:dc:d8:0e:91:ad:2f:7a:80:ba:23:1f:
                    38:22:c6:c8:bf:46:76:56:a0:1e:9d:85:93:e6:64:
                    39:48:8f:9c:64:de:cd:4b:ee:82:5a:83:8f:12:f5:
                    ed:2b:6e:c1:ca:b2:28:27:9a:6a:18:86:c8:a1:42:
                    cb:00:f4:a6:2e:78:54:62:44:21:41:f6:bc:65:ef:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FD:D9:F0:47:6E:E8:05:FC:E1:D0:F3:F9:46:70:F2:B6:A6:18:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/cca9dae9-2f19-3eba-9783-9689f593ab54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.crl

            X509v3 Authority Key Identifier:
                keyid:EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.40.0/22
                  172.97.100.0/22
                  209.182.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a0:8d:f8:d6:22:73:83:67:f2:3c:ea:50:ed:3d:4e:5a:f0:
         32:24:e1:6f:8f:ff:25:f9:0e:9c:43:0a:ed:ba:d1:dd:13:6d:
         00:84:ac:39:d1:a0:fd:4b:80:cb:7b:64:98:26:b8:24:58:cc:
         cd:b0:7d:f6:0e:ac:58:50:7c:67:45:5d:1d:77:3b:98:2b:a7:
         b1:4a:61:95:18:50:c5:88:18:10:e2:0d:bb:ee:76:62:be:0b:
         da:91:6a:0d:b2:8d:02:78:bf:0d:2d:b4:f1:ed:0d:e2:9d:8b:
         ee:f1:8e:0e:8a:39:55:e1:6d:5a:ef:41:d5:c1:b9:2c:3f:bf:
         34:46:97:4d:87:ed:a0:c9:94:89:dc:7a:0d:ba:d2:07:1e:01:
         fa:b7:9c:b8:04:13:91:88:24:30:c0:a1:28:45:2b:f6:ae:61:
         f8:ef:cf:6c:d3:b4:dc:04:9a:43:1e:8b:80:8e:1f:ae:69:8d:
         cc:da:a9:53:76:79:ed:fa:90:f0:d2:9f:02:ff:6b:d2:40:e1:
         f7:d3:72:30:5a:32:70:8e:f1:e6:b4:55:ba:03:1c:54:b8:a2:
         e8:a7:03:65:c0:d6:db:9a:fd:58:16:cc:89:87:e2:65:53:de:
         92:f3:28:b1:14:ec:36:18:88:bd:42:6c:00:2e:30:f9:23:92:
         51:cf:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:38 2024 by rpki-client on console-ams.rpki-client.org