Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/16fae794-b32f-3341-b897-64dc7a6c01a9.roa
File:                     16fae794-b32f-3341-b897-64dc7a6c01a9.roa (raw, json)
Hash identifier:          zD/dBLHNMtmdzvTdPvYWmFE5v/xJVJcnTq9ynCanKgk=
Subject key identifier:   E8:F7:2E:3C:30:EC:88:E5:7F:AC:C8:41:EE:80:C3:96:53:D4:34:78
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858476C9DB9D7CA84B297CFEBB200
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/16fae794-b32f-3341-b897-64dc7a6c01a9.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        162.212.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b9:d7:ca:84:b2:97:cf:eb:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=d5d81697-85b6-426d-93ac-d0fb7ded4dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:fa:58:60:54:97:b1:47:c8:eb:37:25:c1:
                    57:a4:9f:20:f1:1d:3a:81:f0:e8:bc:1e:dc:83:58:
                    93:e7:87:e5:94:2c:50:19:7e:20:d5:ea:77:d9:6c:
                    cc:fc:87:92:5c:e6:24:b6:38:86:69:f1:f3:90:6c:
                    ab:af:01:ac:ed:9c:df:a8:37:42:60:6d:db:ad:08:
                    8a:dc:42:c4:af:a7:4f:51:5c:fb:4d:3a:60:c1:22:
                    3d:82:83:2e:d6:bf:21:16:8b:9e:65:9f:5e:0a:b4:
                    7d:6b:60:fe:cd:04:c9:08:a2:62:7a:00:aa:fb:e4:
                    49:72:a0:b0:22:ae:c6:f3:40:ad:90:e2:5c:78:fe:
                    04:63:da:42:7c:ac:ed:8d:03:fd:e7:7c:4e:08:f4:
                    81:88:0c:ee:90:29:30:57:48:62:2a:4e:84:00:ec:
                    8e:bd:5a:76:4f:87:63:96:43:b3:6a:ef:01:7e:d7:
                    0b:90:45:0f:57:8d:ca:d6:e6:9c:6d:0e:32:83:33:
                    7e:dd:28:45:ad:37:24:23:9d:ba:44:a8:e3:d3:6a:
                    66:b9:0d:8f:05:85:60:4c:ed:04:14:2a:a4:23:d9:
                    5c:72:b1:b2:fd:ad:dd:4b:a7:82:c3:b1:01:d8:21:
                    a2:9c:e8:72:c4:36:8f:fa:95:5b:53:f9:7a:0d:a0:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:2E:3C:30:EC:88:E5:7F:AC:C8:41:EE:80:C3:96:53:D4:34:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/16fae794-b32f-3341-b897-64dc7a6c01a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:54:7b:dd:dc:53:fb:a3:0f:48:ec:30:46:4a:7f:2d:38:25:
         00:df:ed:74:81:2c:91:9a:e5:51:6a:8d:fb:ce:74:23:4d:db:
         51:13:9d:0a:46:6d:42:4c:69:29:af:b2:b6:bc:41:ed:8b:92:
         33:3b:89:5b:16:b4:9f:7a:4a:54:ea:e3:04:ad:93:bb:5e:b9:
         ab:fe:84:81:90:15:c8:99:87:fa:ec:e7:ee:7c:50:a4:61:92:
         76:8c:9f:8c:6d:7b:a8:ed:70:14:be:91:ef:51:85:64:c2:79:
         6e:67:84:3e:46:65:09:69:14:1c:0f:de:15:15:1a:05:dd:fb:
         81:18:fa:48:62:b1:96:93:fe:82:3e:11:99:43:70:a9:57:15:
         fe:f7:a6:cb:da:c2:61:ab:3c:72:df:a3:89:40:a3:a3:12:fe:
         69:2a:bc:de:49:86:b4:42:94:83:36:22:4f:ef:65:ea:d7:91:
         19:28:fd:38:d8:b1:7d:0a:0b:36:79:de:73:42:8f:d1:7f:4d:
         9d:ed:c0:0b:df:25:1c:25:d2:b5:1d:6f:d3:5a:e2:4a:f7:8e:
         2b:55:1d:9c:f8:84:f7:db:f3:74:a0:92:33:e8:c9:90:42:73:
         e7:ea:c4:8e:45:0d:fb:07:b2:bb:91:16:b5:64:0d:e7:19:c9:
         0b:58:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org