Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa
File:                     ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa (raw, json)
Hash identifier:          59llyJFjcjpnEPsjgekvtZPP8iv2elDQJ/GnOxr0SIA=
Subject key identifier:   4C:C4:8D:7C:F5:C0:C4:71:9E:28:C9:61:AC:4A:D6:F5:B7:58:B4:50
Certificate issuer:       /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
Certificate serial:       010D0C9F43285847ED24CA323D3693E1652EFF20
Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     8075
IP address blocks:        167.21.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:ca:32:3d:36:93:e1:65:2e:ff:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=edd2bca6-152f-43a2-bf48-9f374af57405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:b8:93:0d:bd:f9:a7:4e:e8:03:25:8b:41:
                    e6:39:40:40:62:64:22:a3:c1:42:8a:99:c6:46:5f:
                    7b:b4:b6:32:82:ad:01:02:07:7f:d9:85:a4:75:bd:
                    6c:26:ea:e1:60:aa:84:70:9e:0e:2d:51:7e:c3:70:
                    68:9f:fb:84:e5:e7:9d:4b:7f:8d:13:96:42:9e:7f:
                    50:ed:83:f5:17:fe:d3:f2:93:70:c8:c4:3f:75:9a:
                    b6:5b:45:8e:e2:e2:fd:f2:d0:89:7c:29:38:40:43:
                    26:9e:63:f9:3e:7c:ed:da:56:5b:f4:13:a8:95:8c:
                    e1:63:aa:95:32:52:ee:9e:31:a0:65:a2:38:c9:1b:
                    5c:05:48:45:d4:3b:be:6e:18:43:e2:22:59:cd:e8:
                    85:a7:4a:85:08:b8:97:42:02:72:cf:17:57:39:61:
                    38:e2:45:8f:54:40:fd:fe:fa:bd:d1:f4:a6:d4:95:
                    be:73:fc:c4:62:e7:e8:90:9f:75:60:81:5b:a3:13:
                    0a:2d:d3:4f:9d:37:5e:0f:32:61:26:00:98:4d:af:
                    3c:f9:7f:c7:ff:4a:2c:3f:a9:c7:ab:5d:45:ae:4f:
                    2b:4e:48:03:fc:d7:5e:78:c2:b6:93:3b:17:62:e2:
                    9f:33:ed:7b:c4:f1:f7:8d:d7:7c:43:71:f1:40:26:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C4:8D:7C:F5:C0:C4:71:9E:28:C9:61:AC:4A:D6:F5:B7:58:B4:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/ba40fff0-9611-34fc-81a1-ebf7141e0cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl

            X509v3 Authority Key Identifier:
                keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.21.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:bc:bb:f2:58:32:e1:d6:8b:06:d6:f4:0f:1b:e4:5a:2b:
         89:78:93:cf:27:c6:d6:47:62:4e:c3:61:5b:ab:86:f0:d3:cc:
         68:ae:dd:d4:eb:c5:70:e9:d9:6c:3b:90:fc:de:ba:23:32:5d:
         1b:6e:8b:25:10:7c:5c:6a:a6:2c:78:96:6a:b4:05:42:6b:7a:
         47:8a:7e:88:1a:f3:ba:f2:63:6a:3d:92:3a:f0:31:0a:33:a3:
         5e:f6:03:0b:94:35:45:f2:22:84:d5:c0:c3:f5:57:17:13:dc:
         e0:f3:c2:68:4f:ea:b0:fd:42:32:cd:cc:1b:a9:64:7b:d0:4c:
         b5:a5:d9:f1:26:79:49:25:4d:8d:20:15:04:76:6e:d5:d7:dc:
         8f:dd:ed:05:9d:55:b1:b0:1a:47:f3:18:c1:d3:b8:0e:fd:7e:
         ee:a4:44:46:c2:c6:f2:6e:fd:a8:a0:77:c6:2c:f0:fa:49:62:
         ed:b3:6c:12:2a:ce:2b:d9:cb:e2:da:41:b2:bd:fc:a4:3b:a0:
         0e:68:6e:0b:6b:f1:e2:34:7a:9b:71:2f:c5:4c:77:0b:01:44:
         1d:6d:c7:59:79:b5:0c:20:14:ef:1a:1f:3d:07:bd:a9:2a:af:
         71:ba:57:fc:c1:86:a6:af:3e:bc:29:e5:c3:d5:07:7f:a8:ee:
         5d:6d:08:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org