Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa
File:                     fad3dc40-7180-3075-84bb-6775649efaa9.roa (raw, json)
Hash identifier:          6ckxyagjXTp8shV0pzQOn/EJOlmdji4tNR8EUzo7Xmw=
Subject key identifier:   E1:2D:9D:C3:6C:35:9E:85:BE:D5:0B:EF:F7:93:3D:A5:DA:79:56:64
Certificate issuer:       /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
Certificate serial:       010D0C9F43285847D99A0A0575E6481107C61729
Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     400133
IP address blocks:        167.94.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:9a:0a:05:75:e6:48:11:07:c6:17:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=fdbc93d6-002b-4c42-bdcd-d16c4d29c8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:52:6e:03:84:79:c6:ad:dc:cb:ca:26:b7:
                    ef:6a:19:09:fc:43:b4:f4:29:58:13:df:6e:e2:57:
                    63:98:12:4b:45:7c:b6:e5:a7:9b:bc:2e:54:8f:77:
                    c0:dc:13:de:12:0d:43:bd:ac:04:22:b3:ed:e5:48:
                    e4:cf:30:ca:15:8e:9a:06:76:ef:84:66:1b:2a:a9:
                    7a:c9:96:92:cd:02:73:6a:19:3e:25:18:36:7b:70:
                    aa:14:2b:97:bf:e1:71:10:6e:60:0e:0e:de:dc:9c:
                    99:ea:32:51:5e:86:65:6e:9d:7d:54:f1:f4:2e:2b:
                    91:01:d7:c3:bf:30:52:f6:7d:20:18:59:08:5b:13:
                    aa:21:c4:b1:a1:b2:db:22:ad:88:10:cf:f1:c4:d0:
                    85:2a:d3:a7:1f:ca:19:2d:10:ab:f1:3b:29:5e:0f:
                    80:64:51:54:d9:43:c7:40:df:ac:06:82:9f:21:66:
                    f8:71:fa:70:00:1f:fe:a5:3e:be:4b:2e:50:73:e9:
                    5a:87:5f:cd:fc:93:e5:39:a9:30:e5:ef:3f:8c:f2:
                    39:05:6d:d0:3d:b7:e6:5e:81:71:3c:07:7b:a8:06:
                    83:84:f5:2d:c7:5c:89:56:55:50:31:8a:42:d2:ef:
                    11:ee:b6:7b:44:75:2e:e2:28:4c:5a:2e:4c:5e:f0:
                    67:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:9D:C3:6C:35:9E:85:BE:D5:0B:EF:F7:93:3D:A5:DA:79:56:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/fad3dc40-7180-3075-84bb-6775649efaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl

            X509v3 Authority Key Identifier:
                keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:c5:61:ef:97:49:98:df:90:0d:db:3d:cb:7b:e1:8f:46:
         02:95:e7:45:46:07:27:57:65:10:ed:58:30:8d:1f:ef:54:a9:
         24:07:07:af:18:d1:5a:62:5a:e2:70:5f:28:f7:6b:0d:24:15:
         d1:a3:8f:6c:8a:d9:76:05:71:21:89:5c:b8:06:74:9a:61:25:
         a3:7e:ac:6a:4c:f1:7b:c0:0a:7e:38:25:54:5e:f6:5c:6e:cf:
         c5:52:2d:15:29:ab:55:b0:8c:3a:46:c7:69:c8:62:be:eb:56:
         20:90:3d:b1:8a:11:ec:5b:17:ed:fd:18:6e:1b:aa:66:cb:76:
         9c:fb:6f:5d:eb:b8:8e:f9:00:49:dc:0a:fc:5f:62:95:6d:d5:
         07:08:3c:df:f5:a8:e6:21:5d:86:db:00:b0:40:ed:ba:91:d1:
         40:55:f0:7f:88:9c:c7:0e:f0:62:81:2a:e4:b3:eb:57:90:d7:
         a0:c5:26:c6:8d:5c:27:c9:ae:9d:1b:56:cb:87:3d:c3:06:23:
         4b:01:46:a4:7b:f7:e6:89:82:b3:d6:56:20:ed:7c:14:e0:79:
         74:a1:55:ae:5d:61:ab:42:98:8a:c9:a2:5e:84:1d:49:2b:6e:
         6f:c7:f3:e2:80:36:11:7a:3e:3f:35:ba:4a:2a:35:35:c3:15:
         5a:ba:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org