Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa
File:                     0b8a1e80-257b-3d3b-a454-55c527409f72.roa (raw, json)
Hash identifier:          xI3a+iaggrBSm/dFm3pS+NVd7XqLz/M2ajSPRmD0Y+0=
Subject key identifier:   AB:57:38:E2:F7:07:82:FA:03:29:69:FD:18:C6:F7:55:E4:23:47:77
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F43285847F41FA1CC144792D707ADEE00
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     136787
IP address blocks:        172.103.32.0/24 maxlen: 24
                          172.103.33.0/24 maxlen: 24
                          172.103.34.0/24 maxlen: 24
                          172.103.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:a1:cc:14:47:92:d7:07:ad:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=4082663e-da40-4934-a49e-8bbf86ec170f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:98:1e:88:e2:f1:79:60:08:c6:40:3a:2a:
                    01:bb:25:1d:c2:6e:c3:81:f8:ac:2d:c8:9b:08:f0:
                    bc:b2:96:48:56:32:a1:e1:e5:96:67:f3:ce:83:e8:
                    01:ab:73:cf:51:3c:17:6d:11:5c:55:bd:fd:40:60:
                    51:55:43:38:2b:1b:42:30:9f:11:06:09:b8:c3:4c:
                    14:4b:0d:1c:b5:a4:57:7c:99:b6:af:31:10:e7:ef:
                    7a:28:0b:bd:9b:da:50:dc:1a:2f:df:09:cf:ad:82:
                    96:63:4a:53:c4:e6:bb:dd:8e:49:51:42:83:68:68:
                    e8:7e:35:e2:5d:c4:00:6a:d2:d1:0a:0e:60:fe:29:
                    d9:8d:c2:62:04:0d:c3:f8:7d:24:6f:06:e2:fe:01:
                    70:c0:ad:f0:dd:75:9e:ab:bd:ba:35:26:4f:67:32:
                    ee:bf:9f:45:b6:a2:04:28:fc:62:a6:ea:d4:9a:e5:
                    ce:63:d3:f4:f2:71:24:e5:3c:38:68:a0:6e:87:8e:
                    7d:ea:17:4b:3a:82:15:53:4c:5e:2b:c1:19:18:59:
                    de:8e:c7:3d:87:e4:1f:d6:c9:f8:0b:4d:b3:82:69:
                    8b:07:4e:9b:e6:31:7a:2c:f1:0e:0c:92:47:34:74:
                    55:da:31:1f:2c:a8:5a:3f:d2:bf:02:58:cf:97:94:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:57:38:E2:F7:07:82:FA:03:29:69:FD:18:C6:F7:55:E4:23:47:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/0b8a1e80-257b-3d3b-a454-55c527409f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:69:1f:79:e3:01:5a:f2:00:b0:83:e8:24:10:66:5f:f2:6d:
         d6:60:62:22:b3:4c:8f:da:83:9b:83:3c:16:66:13:ad:54:fc:
         ff:90:88:47:38:56:b9:2c:61:47:09:0c:23:84:69:98:09:06:
         75:a1:82:bc:b2:d8:29:4c:ce:fc:ed:71:d8:2f:8b:97:41:78:
         61:30:bd:ad:21:a9:32:7f:1d:4b:b7:7e:3e:6d:59:4b:ad:16:
         ad:cb:2a:56:8a:d0:82:81:a9:62:77:62:ee:88:11:93:86:27:
         c1:65:14:7b:c8:da:53:01:77:54:33:2f:e0:af:ab:2a:ec:75:
         21:58:f3:33:bf:e6:87:09:4a:8a:05:26:29:8a:2a:39:07:46:
         8b:9a:1f:22:7e:2c:10:15:c2:79:7e:4b:1e:7c:a3:23:02:02:
         7b:7e:01:17:1f:9f:7d:60:f5:a8:d7:f6:41:63:cc:c3:48:6a:
         d4:2d:83:e2:f6:35:95:f2:af:81:ab:9c:3c:33:69:ad:2b:b3:
         82:da:c9:40:a1:64:08:39:db:be:db:11:3e:55:a9:cc:c4:33:
         7c:09:11:8d:f5:46:a5:ec:06:a9:e7:76:33:17:41:05:9a:f3:
         7d:44:53:25:f6:1f:1e:6f:77:1d:dd:0e:72:67:a2:8c:9d:51:
         71:15:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:01 2024 by rpki-client on console-ams.rpki-client.org