Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa
File:                     1cc67015-7a49-308f-b9cb-a49114ced13b.roa (raw, json)
Hash identifier:          5RIregz3MvZsljb7gQflj+PBazLrqXyhrAuDJV6GkcU=
Subject key identifier:   05:F5:63:07:40:C9:9C:BE:AC:11:A8:A7:0C:AA:D1:3A:5E:C6:7C:93
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F43285847AB6C03CF80E9BD5F524F1A00
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        170.176.218.0/24 maxlen: 24
                          170.176.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:03:cf:80:e9:bd:5f:52:4f:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=5f7ef54b-866e-4c3c-bc3e-39274cf6f686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:96:2e:f4:80:82:de:8d:43:8c:01:53:77:
                    97:71:7d:17:37:85:34:1b:46:9e:37:7c:58:76:10:
                    41:89:66:f5:e0:a6:0c:4b:a6:d9:d8:98:06:31:c4:
                    6f:00:f2:c2:fc:1b:00:cc:a4:43:61:7e:7d:3a:05:
                    6e:20:4b:6c:f3:1c:b4:fa:1f:d4:d4:1a:13:7d:d1:
                    04:c6:a8:0b:f3:b8:92:1b:f7:7b:7c:4f:22:49:19:
                    24:a9:ae:0b:cc:cd:f3:76:89:52:4d:21:05:61:2d:
                    ba:72:1b:e5:ea:24:8a:aa:56:45:69:48:56:23:28:
                    65:95:c4:48:08:10:e1:0c:94:23:19:e2:59:61:d2:
                    c2:d7:50:04:65:8a:3c:84:05:7f:1c:b3:9c:01:d1:
                    de:ba:31:29:5a:f5:d4:d7:3d:32:39:f7:06:e8:ea:
                    71:25:e5:ff:f4:45:f7:2d:eb:40:b8:eb:49:25:05:
                    90:02:d5:ce:fc:50:9e:0f:7b:51:f3:5c:b3:65:b7:
                    7f:bd:4e:cf:07:59:7c:ca:89:2e:48:00:4f:56:08:
                    5e:4b:fc:43:d6:d0:a9:5d:d9:d4:1f:ec:20:ea:1f:
                    e1:94:d9:6d:59:2c:3b:f7:87:36:e3:41:ee:5a:f6:
                    41:d5:14:b5:3d:60:a6:8f:f4:3f:58:50:cb:08:6d:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:63:07:40:C9:9C:BE:AC:11:A8:A7:0C:AA:D1:3A:5E:C6:7C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/1cc67015-7a49-308f-b9cb-a49114ced13b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:c4:7d:2c:f5:ca:51:f5:64:7e:1a:32:b4:28:bc:d7:d0:
         89:84:c0:e8:5f:80:2a:64:7c:1a:02:2a:0d:99:35:12:12:b3:
         f0:b6:00:35:21:c4:0d:01:7a:18:81:73:08:cb:cc:b5:5b:11:
         8b:a4:1e:27:c7:c6:0d:93:8b:e2:8e:3a:4d:e6:90:47:36:31:
         ad:9a:d8:71:9b:ab:b6:d7:d7:03:4a:d6:e9:cc:d1:49:c2:e9:
         77:7c:03:f2:41:91:9d:46:7b:32:58:5c:a8:47:78:15:1d:ad:
         21:87:ff:c0:ec:ef:7a:93:53:6c:16:50:1d:d2:84:fd:00:fa:
         a0:a4:e0:6e:98:3b:53:e4:65:15:d5:dc:7c:d7:d3:99:23:ab:
         d2:cd:ae:82:a9:18:c1:a4:35:60:7e:68:49:7c:ce:a9:fa:7e:
         ae:09:53:cb:9f:48:b9:1d:f0:d6:dc:0c:54:ea:2d:0c:12:42:
         2a:ea:29:fb:07:56:cb:d7:21:2b:1d:27:b1:17:b9:d0:51:c5:
         0d:3b:9c:bc:49:f7:59:3f:18:8b:fa:a7:09:26:ad:68:23:e1:
         13:f0:7c:c6:65:6e:d0:31:35:c8:81:50:29:fa:cb:6c:f8:13:
         a2:0d:2b:64:d9:d4:65:29:a2:99:98:50:f3:86:22:a4:86:7e:
         53:37:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org