Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa
File:                     cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json)
Hash identifier:          7B5GJZXiwP92C7kBY2qAPwWKKiQy+tGp8vqwlqrBmD8=
Subject key identifier:   E5:C1:75:7A:47:2C:8F:18:42:5D:01:60:D5:DD:75:F1:76:A7:66:4E
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F43285847B96175B65DC01E8F46C9A000
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     202
IP address blocks:        216.168.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:75:b6:5d:c0:1e:8f:46:c9:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=e458e84a-bfd8-494e-be11-407cef141810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:5b:e8:36:6e:9d:a6:a1:e9:a4:2d:1b:b3:
                    95:78:b9:35:b0:36:9b:e9:ac:ac:e9:d0:fb:02:40:
                    b4:a7:aa:d7:ea:cd:8b:db:ca:24:12:3d:02:2c:b6:
                    14:5b:ad:5b:aa:4e:57:df:36:f5:14:af:14:f4:7f:
                    7a:51:17:0c:df:1a:98:ba:f5:79:03:cc:af:b4:47:
                    f3:bd:7c:8a:09:bc:c8:bd:7d:2d:20:a7:b5:68:5c:
                    de:81:19:17:e5:da:10:75:f7:a7:2d:f0:d5:fe:03:
                    7d:a7:ee:b8:64:e7:8a:8b:15:ad:fc:8d:07:ee:82:
                    3f:49:f2:f6:16:4a:8e:bf:5d:64:39:37:d2:2a:16:
                    4d:80:ee:6e:7c:c3:ef:43:ec:fe:db:34:a5:97:cb:
                    cf:d4:a1:20:0e:d8:be:ff:6a:9d:60:7a:68:23:a6:
                    20:f0:1e:1b:f6:bf:d2:af:9a:b0:fa:8f:dd:90:0d:
                    21:ff:6f:00:b1:e4:6e:a3:9d:9b:3b:21:1e:6e:57:
                    95:19:77:11:03:f0:cb:59:24:b4:bb:a6:50:ac:de:
                    85:07:19:60:26:9f:ab:25:27:fe:dc:85:aa:7f:37:
                    bf:c2:c5:a0:8e:08:a7:ea:a9:96:78:d7:61:72:40:
                    0d:bc:6a:d1:f5:2a:91:3e:34:9e:da:2c:71:c0:2f:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:75:7A:47:2C:8F:18:42:5D:01:60:D5:DD:75:F1:76:A7:66:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:48:d2:8f:dd:da:20:b1:69:16:57:94:0b:94:6f:7a:54:4f:
         e5:12:0e:bd:2d:8f:6f:cb:7b:99:3b:75:28:ce:41:47:ec:72:
         f7:45:d5:73:9e:44:81:f6:d1:97:a1:f3:4e:c7:77:e1:21:07:
         3c:b6:01:1c:72:c1:78:f9:91:11:11:bd:73:db:66:16:0b:e2:
         8b:d9:c7:2c:fc:d7:80:ca:1f:50:d6:94:30:dd:77:60:76:a5:
         0b:3c:5f:b8:a9:c1:af:5a:d6:13:91:59:7e:8e:1b:58:57:b7:
         30:96:4f:49:25:57:43:90:ef:89:17:4d:9b:a2:01:71:49:87:
         1f:db:70:c8:0d:97:b0:4c:32:a9:1b:ca:c2:cc:e8:f7:98:8f:
         33:6c:04:b8:eb:94:28:f4:a5:58:3a:53:42:9d:f5:1e:9c:5f:
         93:ba:9f:0f:b6:61:79:bf:05:10:30:b8:d8:00:86:7d:3f:2e:
         0d:c4:73:77:4f:73:47:1e:70:54:83:2f:21:af:56:5c:7c:37:
         3a:b6:dc:ea:2e:7b:39:de:8e:f9:5f:53:04:d1:c5:0b:60:ef:
         ee:86:30:df:21:f4:93:9c:b4:4c:9b:d9:75:d4:5e:6c:69:7c:
         4a:98:db:14:1d:ec:29:54:16:75:4b:12:64:e0:59:b9:61:44:
         fe:c5:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org