Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
File:                     df1d5c84-0603-3a6e-8b97-6347fffa8312.roa (raw, json)
Hash identifier:          4hUq1//sI651XH+5sbcyAvlCRV4yb12s0e7D0joyB6k=
Subject key identifier:   FB:2B:39:92:6E:CB:9D:C5:B1:C0:59:38:3B:FC:CC:44:46:36:28:63
Certificate issuer:       /CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
Certificate serial:       010D0C9F43285847A0414DA2A202311EEC7503C0
Authority key identifier: DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     14579
IP address blocks:        167.80.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4d:a2:a2:02:31:1e:ec:75:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3c554b-e8cd-4306-91e0-4a275269ccbb
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=131964a2-8b60-4e1a-add1-fe7f49535eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:25:c0:4a:f5:d1:90:a2:dd:28:ab:91:2b:
                    95:67:40:c6:51:01:ac:1c:21:2f:99:19:2b:fc:65:
                    a2:7e:dd:f4:8f:af:d9:51:b6:14:d9:fb:cd:fb:01:
                    b2:fb:28:d5:fe:99:6d:67:bd:9f:2b:dd:62:6e:51:
                    85:01:e5:65:7f:e0:b7:54:8c:d6:19:03:e6:b4:4c:
                    1f:f8:9a:90:1b:bd:ff:2e:a0:1f:49:b6:f3:15:00:
                    42:5e:ff:df:5d:ec:12:a1:8f:a9:e6:36:55:e8:cb:
                    a1:48:52:08:a0:94:27:f3:4f:01:41:70:00:2c:17:
                    ed:bd:d1:c3:c4:f6:86:9f:4b:27:d5:05:10:e0:98:
                    07:2d:79:03:ec:b8:bb:ee:be:85:b4:7a:7c:93:6f:
                    62:92:ba:0b:b1:7b:b7:dc:59:31:e9:04:51:91:4c:
                    7c:fe:df:ef:9b:e7:54:92:b4:d9:49:35:3a:50:1e:
                    19:32:17:99:c4:c2:6d:11:36:8a:09:e5:b6:ea:51:
                    15:0a:b1:70:9d:67:d7:78:ff:ec:9d:08:9a:f3:af:
                    39:e4:e5:d5:e1:da:d4:39:cf:a0:1e:65:9c:57:d5:
                    a5:07:85:27:57:d3:c7:2d:e9:28:49:61:c5:eb:dc:
                    ae:aa:bf:39:4b:37:ac:e6:62:78:f7:e5:78:86:53:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:39:92:6E:CB:9D:C5:B1:C0:59:38:3B:FC:CC:44:46:36:28:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/df1d5c84-0603-3a6e-8b97-6347fffa8312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb/4f3c554b-e8cd-4306-91e0-4a275269ccbb.crl

            X509v3 Authority Key Identifier:
                keyid:DF:03:36:F3:E8:AE:F0:C0:F8:54:FE:15:3B:89:8E:C4:1B:CE:EA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4f3c554b-e8cd-4306-91e0-4a275269ccbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.80.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:55:5a:91:08:64:6a:88:a3:a9:bb:b3:0f:08:ff:13:71:65:
         4e:fc:6c:e0:72:0b:45:e3:2d:e0:45:77:0c:65:e7:b5:32:82:
         38:65:ff:86:c8:7d:7f:5e:9c:2c:09:4b:41:ec:d1:0f:7e:93:
         52:47:64:74:8a:01:1c:03:a0:18:51:9c:8d:a9:50:91:d6:41:
         c1:52:7b:25:79:0a:38:4b:69:4a:cd:72:15:06:36:23:67:28:
         98:ab:58:ce:38:8d:b0:2d:76:0a:50:22:b3:0b:fa:e8:bb:8c:
         1c:94:59:93:fc:26:f4:91:7d:4e:8e:b0:7a:33:14:47:4b:67:
         a0:7b:d5:dd:1c:65:b6:c9:20:d2:a8:25:ca:d1:ec:d6:bf:2e:
         d6:26:94:06:19:64:f8:13:bb:1b:5a:87:4d:f1:d9:fd:6d:69:
         35:7a:fe:0f:e5:5f:1e:bf:fa:75:ce:4d:18:d1:ff:f9:be:1f:
         14:83:67:8e:db:3a:62:d6:b4:11:88:0b:81:48:09:96:56:a8:
         8e:d5:bc:66:2b:ea:3a:c8:af:9c:06:52:3f:f4:14:c9:57:d9:
         20:d7:82:2d:29:ab:9b:94:0c:f5:8c:4c:9e:43:0a:4f:6d:ec:
         da:c9:47:ad:59:ca:4a:fb:30:76:aa:50:ca:68:9d:73:77:95:
         37:a7:12:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:13 2024 by rpki-client on console-ams.rpki-client.org