Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa
File:                     956168be-7a2f-3b5e-82d2-4e2261f86238.roa (raw, json)
Hash identifier:          z/lbkgGOX7Lw9GvrRlbaUMWvuTvZhGjK9tfZ9Hqd2bo=
Subject key identifier:   F1:8C:B1:E5:8D:BD:04:C8:E9:61:EC:26:CD:E7:94:70:83:4C:D5:B1
Certificate issuer:       /CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
Certificate serial:       010D0C9F43285847CE6F413B9E8C7862AB2AF900
Authority key identifier: 17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     54665
IP address blocks:        162.142.80.0/21 maxlen: 21
                          162.142.112.0/23 maxlen: 23
                          2605:9dc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:41:3b:9e:8c:78:62:ab:2a:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51729fc5-9ab6-4957-8614-8fb01d4fb6eb
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=28246678-4d85-4f95-8290-4430c54f439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:a6:ad:2e:fa:4d:f0:52:06:aa:9f:b1:45:
                    11:9a:47:b1:c0:fa:87:eb:47:b3:1a:0f:5c:08:ac:
                    31:0c:85:57:2f:6c:bc:28:ea:cd:21:9b:7d:7a:c3:
                    89:98:64:5a:d9:16:6c:16:e6:9a:91:23:c3:25:3d:
                    cd:2d:d3:1d:24:bf:5c:4f:34:e0:ca:2b:16:ff:e9:
                    2f:fa:c1:de:94:cd:5e:71:08:96:29:bc:b1:a3:39:
                    b5:dd:1d:fa:8d:3c:36:ba:a1:86:e1:83:15:51:69:
                    ba:99:f7:fa:3a:1c:18:82:85:8b:20:10:db:1b:3a:
                    9f:ff:59:c2:64:5e:a2:0f:47:e4:95:bb:23:ed:66:
                    b6:35:b1:ed:61:9f:ee:66:b8:7d:59:f5:d7:46:ae:
                    6f:f1:dc:1e:31:3b:fc:99:cb:c8:0d:ef:3d:a9:3c:
                    0a:21:49:34:68:fa:a7:9b:38:7b:c8:bb:af:f6:7c:
                    4f:0d:23:1d:37:cd:f8:d9:1d:a7:ea:82:5b:dd:83:
                    78:3f:5d:41:02:96:4d:c5:d1:a5:04:2d:b4:49:e9:
                    04:43:56:ee:ae:4e:63:1c:96:fb:77:0a:40:96:e9:
                    32:fd:2c:58:d7:d3:01:3a:22:51:b3:11:bb:91:0a:
                    6e:12:33:75:09:1a:4a:34:f6:29:42:cd:e5:a2:7d:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8C:B1:E5:8D:BD:04:C8:E9:61:EC:26:CD:E7:94:70:83:4C:D5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/956168be-7a2f-3b5e-82d2-4e2261f86238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.crl

            X509v3 Authority Key Identifier:
                keyid:17:A2:EB:A4:C8:90:DF:3D:91:45:88:EF:64:BB:08:B9:3B:70:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/51729fc5-9ab6-4957-8614-8fb01d4fb6eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.80.0/21
                  162.142.112.0/23
                IPv6:
                  2605:9dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:47:93:a5:18:a4:c5:65:a5:8d:dd:8e:27:e3:c1:a8:07:d3:
         fe:d3:38:6e:55:2a:b9:10:1c:63:63:3f:2f:29:54:c9:de:af:
         98:53:2d:4c:47:55:55:a2:87:7c:e0:c0:89:8e:b8:7a:66:86:
         e6:b8:d3:ca:f9:04:11:48:c1:6a:7f:6a:ad:ce:b5:c9:25:5d:
         61:ca:24:a9:9e:9d:60:50:ec:5c:c3:8a:d6:9d:a1:96:4e:6a:
         f5:bc:b1:da:7c:67:01:47:97:1a:b1:4c:37:29:0a:a3:1b:09:
         3f:34:9c:ce:40:11:22:cd:3b:8a:02:23:ba:0a:e6:2b:07:72:
         be:43:5f:ca:39:4e:9c:72:ba:ad:77:bd:c7:15:39:63:0e:07:
         8c:e0:a1:44:3c:e5:b3:49:8f:d1:7b:af:ff:8b:9f:40:ae:b5:
         4b:ba:a2:ae:39:ac:e1:46:0f:65:03:61:4f:96:80:65:ef:c3:
         cd:f4:40:fe:7d:bb:67:e2:34:3a:a9:be:ac:22:a0:da:52:49:
         bb:5a:aa:4e:94:15:3c:80:33:1c:33:1d:50:3f:cf:bd:d5:55:
         57:1d:4a:3a:ce:22:dc:7a:fa:4b:50:43:ee:ac:c1:1b:84:d8:
         64:52:ab:09:ae:9f:f7:08:3d:db:68:df:d5:38:07:44:7e:b3:
         67:71:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org