Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa
File:                     9dc53a9b-384c-3962-a145-367406483154.roa (raw, json)
Hash identifier:          MYASP/vgLHNuUdjownlNrvx4GvKhGizp2I+qWkWy5W4=
Subject key identifier:   24:00:54:87:07:D9:96:1A:01:55:D8:DF:E2:12:A6:4C:F8:9C:0E:CF
Certificate issuer:       /CN=c17eacde-68de-455f-97dc-4d67847c03ff
Certificate serial:       010D0C9F432858472B007EEADB35BDFB6FECE180
Authority key identifier: 34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     21577
IP address blocks:        173.250.240.0/20 maxlen: 22
                          199.15.216.0/21 maxlen: 23
                          208.70.48.0/21 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:7e:ea:db:35:bd:fb:6f:ec:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17eacde-68de-455f-97dc-4d67847c03ff
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=5497400e-a0f7-4635-bfc4-2cf0158fe384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:5e:65:5e:47:a9:b2:92:35:b7:02:dc:af:
                    39:d1:6e:45:aa:7d:c3:18:d4:a2:9f:61:27:20:0b:
                    10:e2:8d:46:6e:d9:42:a4:c5:9a:07:6f:4c:e9:e6:
                    65:97:74:fc:d1:c5:f6:4e:2e:13:60:ce:06:79:2d:
                    cd:a0:3f:ba:03:cc:ad:94:52:93:6c:29:12:5d:a0:
                    85:8a:f8:23:fb:a1:b5:da:4b:fa:89:48:9b:da:05:
                    5b:ec:11:92:f6:f9:24:dd:0d:78:f7:a3:f0:6c:41:
                    f6:f3:51:ce:cb:a4:d8:1d:8a:7a:10:39:86:ce:eb:
                    98:89:dc:fc:e8:81:c1:88:9e:c2:7f:94:d1:15:42:
                    8e:9d:4f:3d:e9:e9:0b:63:9d:a9:63:77:cc:38:89:
                    40:30:49:4a:d9:c1:69:8f:16:1b:32:c1:28:37:a6:
                    60:b5:98:7c:fa:79:6e:18:14:13:c4:f2:ab:b5:96:
                    1e:a9:89:0c:79:cf:a8:84:99:eb:e8:4c:2c:57:4c:
                    d8:85:bb:13:be:07:2a:e7:8a:90:b2:b4:45:82:56:
                    9d:13:0f:2b:53:e9:7d:54:44:00:88:6b:03:c2:5e:
                    8f:48:9f:9c:04:f8:69:a6:ef:8c:5c:65:5c:ea:d2:
                    c8:55:d2:1e:a5:39:62:d9:af:92:aa:cc:6b:24:3e:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:00:54:87:07:D9:96:1A:01:55:D8:DF:E2:12:A6:4C:F8:9C:0E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/9dc53a9b-384c-3962-a145-367406483154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff/c17eacde-68de-455f-97dc-4d67847c03ff.crl

            X509v3 Authority Key Identifier:
                keyid:34:FA:19:93:2C:BC:98:3C:00:2E:50:7B:F8:9E:BC:72:C9:F3:BC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c17eacde-68de-455f-97dc-4d67847c03ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.250.240.0/20
                  199.15.216.0/21
                  208.70.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:75:f6:a0:78:b5:b3:10:44:77:5f:0a:3d:24:46:cd:f1:
         76:c3:17:2d:a0:00:a8:f4:de:b7:37:26:31:c6:ec:cc:54:85:
         25:9e:03:19:e4:d5:68:c9:bb:0c:1c:7d:ef:53:72:4c:c5:3d:
         a2:8d:d4:08:cb:1b:ea:af:4d:8c:b6:16:15:90:06:ad:2e:7c:
         6f:18:87:dd:da:70:a5:d3:6a:c3:49:7c:b6:b0:00:f5:ec:1f:
         ed:d1:63:15:4a:d2:b2:ab:df:c6:9e:a2:48:eb:16:4a:65:6b:
         a4:50:b2:22:1a:59:8f:19:bc:7c:84:32:f5:a5:94:cf:f2:02:
         f3:4f:dc:0b:e0:b0:17:de:f2:0c:0a:2f:ab:3f:71:b4:9f:84:
         3f:f9:8c:e0:cd:b5:da:ea:0a:27:05:ed:7b:ce:45:06:7c:ec:
         48:57:3b:96:50:25:52:43:24:71:04:f5:f4:72:72:8d:ba:84:
         94:36:db:6c:56:51:75:86:72:21:18:c6:57:f4:12:a6:fe:a9:
         62:48:de:16:40:cb:5c:8b:b3:2e:3c:d9:20:7f:84:a3:1f:7a:
         0d:ad:b4:b6:6d:06:48:e5:3b:5b:db:4d:d6:12:81:2b:9a:2a:
         d7:c8:8d:08:e7:d0:ab:ee:79:d2:2b:a6:ba:58:be:7a:d5:5d:
         b7:13:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:14 2024 by rpki-client on console-ams.rpki-client.org