Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
File:                     a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa (raw, json)
Hash identifier:          kDAZ7Vl6ZonUiF7CNToP6IhN6O3BWfbYBy+8UHrWLrs=
Subject key identifier:   C4:80:35:5D:4F:E0:87:88:63:07:EE:BA:8B:58:F7:76:22:B5:8D:F9
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F43285847CE6F4117CBB301D5325A5D60
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     14579
IP address blocks:        167.80.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:41:17:cb:b3:01:d5:32:5a:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=ffd39699-0684-4a07-bb01-c65171655dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:71:e3:6a:97:f9:f1:5d:70:4a:73:ec:62:
                    04:e2:7b:8b:b9:66:1a:71:46:c4:74:ea:59:e0:8f:
                    54:54:2b:94:dc:85:52:5b:4c:16:a2:b5:1b:dc:70:
                    e5:ee:39:09:b7:4c:40:4e:64:97:73:34:30:ce:c9:
                    ae:a3:31:a5:71:08:67:14:6a:10:f8:54:fc:0c:0a:
                    6d:bf:aa:4d:ae:58:38:9c:9a:f6:ce:68:65:57:89:
                    34:d3:0a:72:28:75:d8:73:0c:8d:10:61:32:36:1f:
                    76:ba:96:39:f2:57:9a:93:91:79:04:2c:a5:c7:fa:
                    c3:a1:3f:3c:01:96:0d:1e:59:6e:42:6e:df:f0:d1:
                    74:6f:0a:e9:76:05:25:c7:2f:ef:0b:5b:d5:9d:4b:
                    44:d9:d6:cf:2c:62:8c:18:60:4a:26:65:72:13:f7:
                    b2:de:c7:42:d8:85:44:1c:d2:b5:13:10:f3:35:d1:
                    57:e1:57:b1:71:a7:0b:36:98:55:90:71:24:bf:cb:
                    19:87:20:2f:92:49:1e:2a:3b:9b:d5:de:2e:a6:3e:
                    d4:49:67:bf:ba:9a:b5:ca:21:c7:d3:30:8e:a9:e0:
                    f6:c4:e3:7b:ec:15:5d:ce:ff:e6:7e:b5:ea:5c:21:
                    df:6b:24:2f:20:e8:e1:ac:05:51:57:c4:6b:1e:5f:
                    f7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:80:35:5D:4F:E0:87:88:63:07:EE:BA:8B:58:F7:76:22:B5:8D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/a2a2fca6-4c51-39b2-8737-a4ac98592acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:33:28:a5:3b:35:3b:c9:ba:fe:cb:7b:63:b0:19:56:34:
         9f:15:ab:dd:e3:7a:0e:ab:35:a6:8f:18:92:b6:ee:6e:b5:7c:
         86:e6:75:b1:61:d3:13:d8:e7:d0:6a:5c:84:69:d5:2d:07:05:
         02:8a:d1:68:1d:b7:66:e1:37:6c:7d:75:fe:a4:01:bb:92:85:
         61:59:60:e6:35:6d:6e:21:47:d6:21:d3:cd:2a:4c:78:27:4d:
         af:72:7f:f4:7d:9f:ec:0c:bb:83:fb:5e:bc:9e:df:dc:1f:5f:
         32:24:21:c3:9f:bc:41:9e:b2:73:a8:73:4a:2d:52:16:4f:d7:
         bc:33:7b:60:15:1b:37:b3:b2:0f:74:89:18:ae:35:1a:de:8c:
         91:fa:e1:67:de:e5:e7:df:cb:b1:55:99:06:cf:0c:6d:6c:27:
         22:c8:64:7d:56:12:b4:0e:87:ce:0e:70:2e:e7:6a:c0:66:1a:
         12:83:08:60:9f:8f:14:f1:9a:b5:f7:6b:c8:4a:39:24:63:1e:
         07:a5:d3:44:a5:5c:62:60:91:14:01:e5:a9:3a:c9:61:4b:87:
         21:53:1a:79:33:1d:fd:90:bb:ae:5a:c5:b0:fc:fa:03:5c:ab:
         4c:4e:f4:f7:ee:e1:92:b1:53:d3:bf:6b:75:43:85:8b:84:28:
         30:87:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:13 2024 by rpki-client on console-ams.rpki-client.org