Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa
File:                     d097d779-d0f5-3dfb-b429-f39981788e91.roa (raw, json)
Hash identifier:          U0USmbUi9u/3Rm57UIBGXfuJD73Ji7aIonMlPTDF1G4=
Subject key identifier:   6E:79:65:1D:5F:03:B8:5C:64:C2:43:83:3C:29:DB:19:C1:8C:CB:0E
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584726D07C2A956F04C2EACEE780
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        170.176.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:7c:2a:95:6f:04:c2:ea:ce:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=cf12d89c-ebec-497c-a719-0c145215aa91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:7c:43:90:e5:5f:bf:53:5b:d8:d2:b1:99:
                    57:0c:a1:74:3e:9f:39:9f:ed:1d:7c:fa:d2:46:af:
                    c6:a8:e2:ff:42:7d:ba:af:9d:c4:87:6e:4d:b4:61:
                    f4:d5:3b:63:7a:cb:f5:fa:0d:df:10:0b:3b:23:85:
                    5b:fd:78:9f:2a:f7:a1:f2:76:9b:87:7f:12:63:af:
                    39:a3:87:a1:38:2f:ce:d2:79:01:e1:47:23:10:7e:
                    e2:22:c4:77:32:fa:c2:38:5a:80:62:5f:a8:87:a2:
                    db:6b:b2:7a:29:47:54:64:18:1c:b5:fa:b1:f8:32:
                    c0:a2:53:7e:15:c5:9a:dd:87:0f:cf:97:20:54:25:
                    d5:43:f5:a7:e0:c4:16:ba:63:bd:87:0c:67:f8:10:
                    cf:54:ac:7c:33:0b:41:57:7f:71:c8:45:7e:92:28:
                    09:76:7a:9a:97:df:c0:8a:1f:81:5d:75:af:63:c2:
                    dc:44:f0:ea:7b:0e:27:a0:0a:3a:7b:4e:13:70:40:
                    3c:e9:75:9c:c8:ef:7c:41:65:e7:ee:bb:76:04:7d:
                    3c:ae:71:b8:79:39:61:77:7b:8f:ae:5b:ae:b7:98:
                    52:57:66:1a:51:fa:69:9d:d1:87:4d:aa:3b:e9:93:
                    da:be:99:6b:0e:fe:e7:38:aa:58:02:92:47:de:e3:
                    23:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:65:1D:5F:03:B8:5C:64:C2:43:83:3C:29:DB:19:C1:8C:CB:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2e:48:28:bf:24:78:18:5e:d3:70:61:40:09:26:35:de:54:
         95:4c:5a:41:15:1c:bc:f8:38:0e:48:f3:76:0f:77:ac:b1:ed:
         ff:67:7c:1f:5e:7b:ef:6d:3e:e5:d6:9a:6e:c0:0e:42:c2:98:
         02:74:6b:f7:a0:93:5b:0d:14:21:cf:96:89:9e:ff:84:e4:c6:
         db:38:da:23:0e:f8:1d:c8:a6:77:7a:51:e6:6f:2b:8d:c6:a4:
         75:ea:d1:d2:03:e9:9f:ec:be:10:7b:18:15:de:37:b1:cd:6b:
         71:9a:ce:d5:5e:17:8c:15:01:55:3e:63:e6:41:9d:44:9b:b2:
         49:07:9e:91:7f:12:f4:8d:a1:9f:fe:5e:74:29:cf:da:2a:40:
         9f:14:39:86:00:bc:ba:9a:d2:57:f8:6c:00:f1:05:2d:f0:97:
         a1:28:14:a1:6f:a8:6d:5b:f6:45:46:64:d2:20:8b:32:33:1a:
         54:3b:9e:5e:3b:73:ef:b1:86:af:f5:ee:83:45:44:41:12:34:
         a8:b6:9e:45:82:b4:37:a4:1d:c7:3e:bc:5f:07:32:8f:61:d9:
         13:54:c7:b9:2f:5b:89:7e:7e:7f:89:4c:fa:8e:44:44:19:d5:
         09:75:28:28:e3:8e:2c:05:7c:95:69:de:0a:c3:fe:08:8c:d1:
         b6:2b:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:58 2024 by rpki-client on console-fra.rpki-client.org