Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa
File:                     1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa (raw, json)
Hash identifier:          /hhZmGSeGOo0JVtUL3+w5nGOXkAM/3P+zZpJq1rhOpM=
Subject key identifier:   18:86:35:A0:D6:F6:C3:87:E8:FF:CD:EC:7A:86:0E:1E:13:46:D8:94
Certificate issuer:       /CN=d5b5be43-e992-4536-8b4b-8f9370040f04
Certificate serial:       010D0C9F432858473FF0A79D511FBAA365195C00
Authority key identifier: A1:01:B0:CE:15:25:47:6E:E5:01:1D:1B:45:9C:0D:F7:3E:96:74:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     394996
IP address blocks:        172.83.8.0/24 maxlen: 24
                          172.83.9.0/24 maxlen: 24
                          172.83.10.0/24 maxlen: 24
                          172.83.11.0/24 maxlen: 24
                          172.83.12.0/24 maxlen: 24
                          172.83.13.0/24 maxlen: 24
                          172.83.14.0/24 maxlen: 24
                          172.83.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/d5b5be43-e992-4536-8b4b-8f9370040f04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/d5b5be43-e992-4536-8b4b-8f9370040f04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a7:9d:51:1f:ba:a3:65:19:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b5be43-e992-4536-8b4b-8f9370040f04
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=1eb60b13-e6b4-4906-b5a7-4ab8915664e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:91:71:1a:66:f6:51:cd:40:d3:c8:44:cb:
                    b8:99:d8:8d:a4:79:50:6d:b3:d4:c7:49:ab:03:78:
                    69:ca:7f:ee:fe:d3:88:53:90:0c:d6:59:a0:c6:c4:
                    79:af:32:6b:39:ce:23:d5:2b:ac:ac:3b:d4:aa:47:
                    0d:b4:59:4e:20:01:19:03:c4:99:26:ed:f1:6b:21:
                    c4:de:75:f2:e6:02:80:b6:9e:83:b4:61:59:86:ac:
                    78:b9:c4:2d:16:68:fa:38:b3:82:cc:e6:36:60:85:
                    a4:96:eb:0d:d3:d6:d7:a4:34:38:32:1b:a8:58:40:
                    df:ad:8d:5c:30:d8:8b:a1:58:d9:21:92:7c:7d:be:
                    b8:87:ff:84:6e:49:13:40:8c:76:ac:35:0c:f3:df:
                    8c:1d:57:52:63:39:db:62:09:83:90:02:b5:bb:bb:
                    ef:bb:d9:b5:0b:46:48:9c:b5:ef:08:88:91:59:15:
                    b7:d2:c8:da:a5:92:94:ec:19:4e:91:a5:59:a9:ad:
                    a1:5a:7a:56:ea:d6:82:13:8c:f4:4b:32:b9:83:9f:
                    13:f9:a0:8b:9f:50:6c:c1:a5:f6:77:b3:d0:9d:57:
                    87:f0:22:32:e1:2b:53:30:76:d5:29:76:ad:8a:83:
                    36:7a:85:38:85:77:7c:93:6e:ab:06:0b:19:09:64:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:86:35:A0:D6:F6:C3:87:E8:FF:CD:EC:7A:86:0E:1E:13:46:D8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/d5b5be43-e992-4536-8b4b-8f9370040f04.crl

            X509v3 Authority Key Identifier:
                keyid:A1:01:B0:CE:15:25:47:6E:E5:01:1D:1B:45:9C:0D:F7:3E:96:74:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:85:77:e4:69:8b:8b:62:32:7d:7c:7b:c1:c1:f2:a1:07:5a:
         97:6c:6f:6a:dd:44:5d:08:63:ba:eb:c5:2a:17:85:00:ff:10:
         46:e5:f0:d5:4a:94:91:37:dd:94:38:ff:73:25:6d:a3:49:d6:
         63:f5:99:90:fb:09:55:90:0e:92:f6:e1:4f:bf:4b:5b:47:b2:
         b8:1b:ac:e2:92:db:26:46:0f:3f:5a:ba:b9:3b:78:01:c5:40:
         c1:ce:ca:3c:c3:3c:27:bf:83:bc:a7:ea:7e:d7:00:a4:d2:63:
         be:fb:e0:1e:62:f9:84:ee:ba:22:72:d1:16:1c:f5:7c:19:06:
         2b:13:a3:c6:63:fb:bc:db:09:24:69:f4:8f:e1:d4:ed:64:85:
         f3:e3:09:0c:df:ab:33:1e:68:7d:62:6e:ca:19:df:6f:31:1c:
         ef:b9:25:84:e1:8c:31:a8:89:c3:09:b6:cc:b2:bf:57:e0:fc:
         b7:aa:46:74:8a:db:24:a7:c5:d5:fa:f7:cb:4e:67:4d:5c:85:
         49:3c:80:08:ce:e9:e7:a5:2a:6b:ef:af:36:af:67:59:6a:c9:
         7e:0b:15:94:39:5a:3a:bc:95:83:b6:b4:ec:87:bb:aa:20:33:
         5b:07:31:2c:5b:bd:4f:4d:92:93:99:cc:f3:c9:50:4f:e7:2c:
         76:fd:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org