Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
File:                     e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa (raw, json)
Hash identifier:          D1noG42QUffVWx0zYf5F/ADbhGVHxu7qh48UiZ+QvwE=
Subject key identifier:   31:BF:E6:C7:AD:CB:DE:23:DB:6F:73:26:68:35:0B:D9:2E:00:62:5C
Certificate issuer:       /CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
Certificate serial:       010D0C9F4328584789EBF57E478320B2CB86D640
Authority key identifier: 55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     961
IP address blocks:        205.166.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f5:7e:47:83:20:b2:cb:86:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=9729f853-aa2a-44e1-a7da-a84f4e67c4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:1a:b6:ee:d9:ce:ec:9b:7d:9d:20:aa:ca:
                    89:20:8c:8c:a0:95:d3:a2:d1:a8:9b:b4:fd:59:aa:
                    87:46:4d:e0:6b:d0:fd:e2:32:52:38:b7:ea:18:2d:
                    e8:26:82:e2:76:ee:0a:97:c6:dc:c9:1a:6c:52:d1:
                    9d:51:ba:34:24:3a:b2:f8:b7:4d:d2:70:72:1a:6b:
                    aa:3b:f5:d7:f8:17:9b:72:9a:70:55:95:ce:7d:29:
                    db:bf:4d:9c:1d:03:70:c0:f9:fd:19:1b:2e:8c:7a:
                    96:da:0c:64:9a:34:8f:c3:b5:9f:0a:0f:01:5a:b2:
                    9c:ed:2f:23:64:33:84:a2:dd:c1:bc:51:87:0b:41:
                    41:7b:e1:d9:b6:a7:16:06:13:8b:71:79:4c:ae:41:
                    05:99:8f:47:79:20:64:75:e9:f3:c0:6b:65:d7:6e:
                    09:65:14:ce:40:6d:bc:5a:b9:e3:b5:a6:07:3e:9d:
                    f9:d4:f1:29:9e:cd:69:02:4b:ff:f6:73:58:ee:6c:
                    a9:b5:86:c8:55:e1:b2:53:12:60:0e:40:ac:76:2f:
                    9b:20:b1:15:4a:26:e8:12:89:ad:d4:e5:47:f4:53:
                    da:78:5c:22:90:a7:3f:a9:ab:2d:8f:1d:21:20:f3:
                    e0:f9:61:5c:53:cc:fe:49:9c:07:ef:ef:84:7f:54:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:E6:C7:AD:CB:DE:23:DB:6F:73:26:68:35:0B:D9:2E:00:62:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl

            X509v3 Authority Key Identifier:
                keyid:55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:6f:fa:d2:9b:4b:5b:c9:7d:99:be:b4:66:9f:f6:e0:a9:
         b8:1f:8a:3c:16:08:bc:0c:25:31:ce:6e:1b:77:c4:81:9e:23:
         57:52:e0:5d:2d:8c:11:25:d4:51:5b:7d:47:16:44:c0:b8:ca:
         65:6c:d2:71:8e:e3:71:49:b3:36:44:7c:6b:51:aa:47:a3:30:
         59:fc:fd:3b:22:b1:29:f1:8c:38:b5:c5:17:15:49:37:ef:ba:
         03:a2:38:db:6d:e1:fe:48:a4:85:fb:38:0f:e3:38:40:a2:c2:
         67:a8:60:df:74:03:c8:03:bd:a1:4a:cc:16:a4:e5:61:0d:32:
         3c:2d:99:34:d9:eb:64:56:aa:6f:2a:51:6d:c9:57:c3:42:7f:
         2c:98:93:58:05:f5:33:8b:15:b0:76:c3:8c:26:84:57:d6:f4:
         4c:0f:66:09:34:f9:af:22:ae:6a:b7:4b:30:f7:65:1b:6c:d2:
         ca:44:e7:c7:9e:c4:ff:d6:c4:78:6d:70:89:ad:83:a7:17:14:
         29:08:9c:96:d3:ed:ae:84:0b:2a:89:1a:2b:80:79:54:19:dd:
         2d:d5:1c:f5:7e:8c:ac:4a:8a:76:88:ed:b5:fd:ce:37:9f:ef:
         a1:7f:0c:f8:19:d7:28:53:de:6d:6f:c3:51:38:bd:19:b8:8a:
         a7:bd:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:57 2024 by rpki-client on console-ams.rpki-client.org