Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa
File:                     a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa (raw, json)
Hash identifier:          nvWvx+yqejj/nD/AuNttnCs9tzzKTDiRJvR21KlpKDY=
Subject key identifier:   04:CC:90:9B:4E:B3:68:A2:F5:CC:F4:3A:A8:EE:9C:58:51:32:B6:94
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584782F100F877162692A8051380
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa
Signing time:             Sat 12 Oct 2024 01:00:32 +0000
ROA not before:           Sat 12 Oct 2024 01:00:32 +0000
ROA not after:            Fri 10 Jan 2025 02:00:32 +0000
asID:                     397453
IP address blocks:        170.117.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:f1:00:f8:77:16:26:92:a8:05:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Oct 12 01:00:32 2024 GMT
            Not After : Jan 10 02:00:32 2025 GMT
        Subject: CN=2ba50308-9018-4c8a-b83c-1793d7b7022b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:97:45:cc:7d:b0:a3:94:2f:2a:ce:cf:10:0a:
                    ea:c4:31:71:b4:d3:ed:ce:91:1e:5f:22:94:4a:60:
                    3c:d6:a5:ee:31:b0:91:d6:42:f1:ca:a0:96:d2:47:
                    87:d2:45:af:88:7f:ac:63:31:6d:e1:a1:e5:91:5d:
                    38:99:45:37:0f:eb:01:98:50:2f:09:0c:8a:ee:65:
                    48:a0:28:a1:13:e2:f3:25:44:3a:49:91:69:a5:ea:
                    86:85:09:89:ec:b2:ac:72:32:a7:e5:93:ce:1f:32:
                    7e:35:90:26:e9:fc:f9:e6:85:43:9c:4d:f0:73:0e:
                    ce:62:69:18:57:58:69:0e:56:39:61:17:8e:ec:64:
                    fa:fd:25:1d:21:48:f0:1b:ee:50:fe:39:62:1d:c8:
                    e3:28:8b:9e:96:e1:20:5e:b7:20:3a:f0:77:38:48:
                    96:bc:6a:1e:d5:aa:0d:4c:fb:2a:6b:13:cf:d3:75:
                    7b:c9:dd:04:ed:b4:e9:4c:1a:2e:98:af:c9:59:79:
                    31:b9:e0:ad:64:3a:66:24:3e:88:b3:2a:e8:45:34:
                    63:1f:84:c8:09:8c:89:19:f1:34:56:3e:7d:b2:9c:
                    5a:72:c6:d7:25:9b:44:65:54:18:49:95:9f:8b:0b:
                    9d:b5:c5:7e:ab:03:e0:2b:b5:a5:5b:a0:ae:93:e7:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CC:90:9B:4E:B3:68:A2:F5:CC:F4:3A:A8:EE:9C:58:51:32:B6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.117.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b5:35:a7:ae:95:7f:7c:e5:f1:1e:f0:33:92:a2:79:80:4e:
         39:df:cc:da:49:59:8f:a5:fe:12:0a:9d:1a:8b:c5:a1:58:ec:
         d6:44:0a:dc:bc:ca:f2:86:6f:6c:66:6d:a3:e7:5e:90:fb:a5:
         0b:4b:53:45:2f:b3:f9:0c:86:d5:9f:e6:7a:c4:12:e7:ac:52:
         25:1c:47:c5:26:b0:d3:2c:fb:78:70:c8:02:b4:c2:a3:ba:90:
         01:87:74:dd:9b:61:32:4c:b2:39:68:a7:2a:fb:25:8f:9a:e8:
         6f:65:37:17:f4:24:62:be:e6:63:35:95:78:a7:07:8a:8d:6c:
         56:9f:c4:5e:ef:09:04:61:b6:84:81:59:ba:a2:66:bc:a2:58:
         0c:b5:88:50:d1:67:1c:c5:01:cb:ea:b5:75:26:ef:d8:4f:7e:
         08:ad:b5:5e:72:66:34:e9:c0:5f:f8:b1:9c:a4:49:af:dd:68:
         48:70:44:63:2a:1c:84:ad:f7:fb:7f:af:e8:b6:84:e7:61:2c:
         37:2a:9e:83:0e:4a:9e:27:3f:56:f7:d8:69:47:51:32:d8:b3:
         ba:28:0e:27:0e:66:af:f8:07:b4:d2:67:98:9a:ea:61:11:a9:
         c7:10:88:2c:eb:b4:78:d1:d1:6e:c5:98:08:85:af:61:ec:c5:
         e0:92:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org