Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa
File:                     d000349d-3aa6-375c-ba19-e325069ec898.roa (raw, json)
Hash identifier:          VTeGOyeQjEAM2MqXIBuRYy0wZ2Zms47qFpq3QyhrcsY=
Subject key identifier:   C3:8D:8A:8C:7C:1D:13:D0:A0:12:49:F9:82:F9:BB:7E:78:59:11:0F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474F4B6860B120DF64C25CAAE0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     20454
IP address blocks:        184.171.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:68:60:b1:20:df:64:c2:5c:aa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=6ad8f3ca-217c-4dc0-a722-4c3a2f5656ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:b4:a5:51:db:84:ea:18:dc:4a:25:c5:9f:
                    08:85:9b:d6:58:c9:51:c8:31:29:50:f8:98:83:d7:
                    6a:61:c9:03:3b:2b:f0:58:94:ab:ac:c6:55:9b:44:
                    30:2c:86:a5:72:e8:02:6c:57:0a:b4:79:f3:0b:7f:
                    a4:cf:56:6a:a7:38:51:aa:fa:58:42:f9:9c:85:d4:
                    d8:e4:54:ce:75:45:48:f5:60:96:44:47:83:44:62:
                    e0:1e:92:00:d0:e1:f7:ec:6a:64:7b:eb:9e:83:86:
                    66:e6:cd:18:17:c0:1c:81:3d:6d:f6:fe:8f:c1:b0:
                    ea:51:ad:a7:ef:26:f1:92:44:ce:24:11:d6:04:71:
                    d3:8a:2b:48:fa:5a:c9:0e:3c:bb:11:12:2a:d4:3c:
                    b4:23:76:2e:54:a7:34:02:6e:e4:26:70:9f:aa:fc:
                    a2:58:08:55:fc:27:51:20:80:d3:1c:ea:12:46:82:
                    56:3c:f8:2a:8b:02:99:a4:45:5e:bd:96:0a:8b:94:
                    a6:3d:e6:44:50:b7:21:1f:38:64:c8:ad:6f:7f:23:
                    f6:9d:62:13:1c:7d:8a:64:86:6c:4e:e0:98:e3:34:
                    87:5f:1e:11:07:2d:62:ba:e6:dd:e9:7a:28:70:c9:
                    e3:89:b5:d4:0d:13:54:a7:93:f8:44:26:fe:74:30:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:8A:8C:7C:1D:13:D0:A0:12:49:F9:82:F9:BB:7E:78:59:11:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d000349d-3aa6-375c-ba19-e325069ec898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.171.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:c7:0f:06:02:f2:77:8b:d6:42:ba:03:71:b7:6f:88:64:
         56:9d:de:2c:7a:30:94:28:da:d8:e9:02:28:ce:e6:28:8e:be:
         76:a8:cf:1b:d5:fc:d9:a3:96:98:40:1e:85:fb:82:f1:01:7f:
         f6:5e:ac:5d:cf:9c:f4:fd:c0:c6:b2:9f:4e:45:93:06:b2:06:
         f0:81:db:3b:a4:e2:dd:33:b9:49:1b:64:9d:1b:90:f8:16:c9:
         7e:9f:70:18:41:16:77:b5:29:9e:3b:68:66:40:e2:05:0a:c9:
         2b:d8:2f:a4:bf:ef:d5:e2:07:5c:7a:fc:6f:da:4d:77:ff:6d:
         61:2e:bb:d5:6a:53:96:89:30:76:23:4c:c1:85:59:35:d7:82:
         11:e0:a1:c9:06:eb:89:2b:e8:43:9d:01:f8:db:a4:34:7f:e7:
         69:ea:5a:b5:a0:9d:5d:cd:f2:5a:f8:98:fc:25:80:e8:87:4b:
         b6:65:f7:67:15:eb:8e:72:c5:a8:f9:95:d7:de:d4:20:05:bd:
         6b:04:7b:2f:f8:45:4a:e4:3f:8c:3f:b9:6c:aa:d9:c9:0b:ac:
         1e:f0:48:18:79:3e:d6:3c:a4:9a:c3:9c:3c:ab:91:c6:f8:7c:
         e7:04:60:a6:81:3d:9b:e3:4a:d6:71:da:30:3b:e9:c6:9a:d2:
         8e:bf:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org