Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
File:                     a470d1cc-8d3f-3e49-813f-a96c3c389107.roa (raw, json)
Hash identifier:          FzOmpKVhxCKIi0HdDuddvyMm7J9ioX36el2SaPRPl38=
Subject key identifier:   2B:94:84:B0:A4:1D:07:F4:34:24:DA:81:B6:99:50:07:4D:45:3F:2E
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F43285847E78F682A02EAE3A2259E5480
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     397606
IP address blocks:        147.160.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:68:2a:02:ea:e3:a2:25:9e:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=db6deb82-da90-47ff-a50c-bfdc10ed351c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:e4:06:59:0b:ce:d3:f8:b5:5d:fd:5d:22:
                    88:28:25:02:19:5a:4c:a9:f8:02:7f:36:99:16:6f:
                    d7:93:0d:b3:09:60:a4:2d:e5:0b:6a:5f:7d:00:bb:
                    9a:2e:a5:69:70:cd:79:66:22:29:1e:49:fc:8d:8d:
                    d9:65:ae:a9:c5:cc:d5:a8:a7:08:76:d6:88:da:62:
                    91:af:4f:2d:13:23:d3:8f:32:ee:4a:64:c2:d6:e6:
                    fa:7e:63:3f:71:7b:6b:de:53:8c:c7:94:6d:dd:ea:
                    24:b6:0c:62:d2:3f:ab:f4:fb:3d:79:bd:f4:21:4f:
                    d8:a4:73:e9:d2:5e:20:db:7b:52:b3:d8:0f:56:07:
                    f5:4c:6e:93:36:fc:cc:08:8e:19:d1:e5:84:85:bc:
                    47:42:36:35:ff:cd:01:19:16:b6:0d:12:8e:18:40:
                    a3:42:34:d2:56:0d:53:33:c0:f4:76:19:78:03:60:
                    3e:89:1c:40:5b:ff:a7:1d:6a:74:0c:bf:56:f8:54:
                    0f:f7:98:b9:cd:54:2e:32:3e:37:5a:6b:d6:f9:4a:
                    9a:f2:70:fb:96:77:1e:f1:d1:cd:a0:64:35:cd:88:
                    f2:9a:2e:11:38:aa:2d:39:3a:ec:b4:36:f5:cc:97:
                    8c:ba:0b:34:00:2b:b7:8f:ea:86:06:80:de:09:ee:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:84:B0:A4:1D:07:F4:34:24:DA:81:B6:99:50:07:4D:45:3F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/a470d1cc-8d3f-3e49-813f-a96c3c389107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:ee:09:5b:c2:60:47:17:92:51:a4:6f:e0:03:70:f2:32:
         54:20:39:a3:96:ff:23:f2:3f:c6:ec:84:a4:a0:35:cf:86:6e:
         31:ac:4f:2a:b7:8e:69:d5:af:80:9c:ca:1c:1e:87:24:dd:e4:
         fa:b9:c2:67:7b:a4:3d:b2:b6:ae:b7:80:a5:c3:97:37:11:60:
         87:11:cf:eb:ea:04:9e:f3:c1:ff:27:37:07:8b:b1:db:a2:85:
         70:6a:d4:c9:bd:11:c2:be:db:94:c3:dc:a5:f3:90:22:18:42:
         d4:b4:e7:95:9d:a5:0d:cf:8d:32:3d:ec:4a:fa:33:8b:ca:99:
         33:ef:f7:55:95:9b:7b:76:f1:f9:d2:3b:ca:b6:36:6e:a2:60:
         02:da:d4:fe:de:09:c3:42:92:ce:0f:29:25:49:09:52:29:91:
         01:47:18:36:3a:fc:5f:0a:08:4f:3f:a7:94:94:20:e7:77:e4:
         27:33:82:57:bd:be:b6:f8:49:ad:36:40:58:69:42:b8:5b:9e:
         64:ca:5f:b9:0b:56:95:56:06:ec:d5:14:0b:e7:f7:71:73:8e:
         29:39:d4:c6:6a:9e:ef:96:76:90:2b:2e:80:10:d8:b4:96:f4:
         20:2f:51:30:f1:f7:b9:13:82:6e:bd:a0:5e:14:bc:fb:c3:d9:
         5d:12:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org