Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
File:                     d428c59e-2516-3824-8041-36df18452c2d.roa (raw, json)
Hash identifier:          1ae9QYw0caSJjV0luCVb5xbI3inLOwQ6aiRZOu1q1yw=
Subject key identifier:   26:F5:0A:A4:03:BC:A6:76:10:51:43:62:59:04:78:D9:6E:F5:6F:A8
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F43285847AE36B7FB4BFFB2DE5F920BA8
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        170.39.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b7:fb:4b:ff:b2:de:5f:92:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=9797a94b-254b-42bf-a1b6-53632e499550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:d2:14:88:1c:30:0f:41:c2:cf:8a:76:cc:
                    44:94:a4:28:cd:16:e1:19:f3:f5:34:9b:f9:8e:f6:
                    0d:f0:0e:0b:86:e2:9f:78:a3:82:02:fa:54:b4:46:
                    2e:1c:2a:0d:91:ae:64:1e:f4:14:7e:cf:46:9d:8b:
                    1d:e5:89:96:28:84:d1:47:82:c8:37:46:40:4e:dc:
                    aa:9e:4d:f1:fe:ee:b4:16:15:f4:f4:0e:49:c7:bf:
                    bd:36:ca:c9:6a:78:d6:b4:c6:9c:51:37:ea:ee:5f:
                    3f:02:b8:b3:97:fd:26:8b:09:92:9b:e7:44:f4:e8:
                    58:c9:4c:e8:31:01:cb:31:64:68:47:aa:ec:8b:1d:
                    c3:d8:fa:c0:6d:59:e2:0a:e4:5d:7a:b8:e4:77:f2:
                    ae:b3:47:23:5d:9f:93:7d:85:fb:e6:b2:3b:e0:34:
                    08:f4:56:9b:f6:5c:c4:27:8a:ae:4c:40:9d:71:6a:
                    e5:4b:73:fc:8f:2b:81:26:89:fe:49:80:0a:2b:51:
                    3e:3a:c1:a5:d4:df:dd:36:bc:c2:85:c0:6e:24:43:
                    51:a4:98:00:e3:ec:37:7c:d9:c6:be:11:1c:e1:d4:
                    05:e8:fa:5a:35:2e:a6:ef:bc:5e:8b:21:ca:6f:f8:
                    12:fa:0f:04:e8:12:d2:c1:47:5c:f4:88:bf:2d:69:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F5:0A:A4:03:BC:A6:76:10:51:43:62:59:04:78:D9:6E:F5:6F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/d428c59e-2516-3824-8041-36df18452c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:01:17:2c:60:f1:eb:63:66:08:b1:44:64:42:a6:ae:a9:f5:
         a4:57:db:22:92:e5:c2:5f:e6:fb:d0:29:40:8f:fd:47:0f:24:
         ab:da:70:77:db:f4:94:1f:7c:fa:ac:81:88:28:e2:3b:fe:4f:
         91:54:69:32:cb:85:17:fd:ac:26:eb:6c:03:3e:65:d1:a4:44:
         88:43:96:1a:e0:8b:de:1f:52:54:81:85:6a:5c:bd:52:50:13:
         08:3d:cb:e3:f7:1f:8d:5b:2f:18:60:78:bb:16:71:e6:a2:9e:
         83:d3:01:6a:04:0f:e3:f3:72:1e:c0:b6:eb:cd:30:f5:27:ce:
         37:9f:b4:a9:93:62:c1:b6:24:c7:00:e2:e3:66:a6:7d:b9:93:
         af:7d:e2:de:c7:17:98:3c:f0:d9:7f:62:46:2a:18:0f:82:7e:
         42:25:80:6d:c9:a5:ec:db:f2:7e:e8:06:e7:40:7f:41:ee:ca:
         84:58:b7:0a:fe:12:51:04:bb:37:3b:3b:56:bf:01:07:f7:c2:
         97:54:e3:f1:4e:e5:8e:7e:32:dc:85:60:cb:8a:67:d0:25:6f:
         4f:ba:0a:a1:5f:79:34:4e:b2:4e:2b:d3:8e:d2:48:60:ff:6d:
         fc:bf:f1:fc:e3:56:13:75:13:f1:5c:ea:a8:a8:0f:2e:95:55:
         8a:80:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:30 2024 by rpki-client on console-ams.rpki-client.org