Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa
File:                     15500956-7ded-3d3f-ae50-b5a339fa54e2.roa (raw, json)
Hash identifier:          o/azYTvDqCXh/PXpyyeUcrY58Vw6tKXRe/25JZxlqiU=
Subject key identifier:   D8:57:32:6A:FB:EA:66:C6:F1:6E:0D:57:DF:0A:6C:93:0A:05:EF:28
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E094EC8F3DCB005DBD39BE00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        108.170.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:ec:8f:3d:cb:00:5d:bd:39:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=025e9925-474f-4595-bee2-54b82ffb4181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:4f:6b:1d:3a:52:00:48:c4:f9:3f:27:4b:
                    80:d2:03:f7:aa:4c:52:2d:d5:37:8a:9d:32:6e:c0:
                    45:d6:b1:dc:76:45:7a:da:3a:91:6f:38:f7:89:c1:
                    fe:cf:f2:50:9f:aa:eb:6b:0e:ee:07:66:d6:10:f1:
                    8f:93:b0:eb:42:4c:b8:93:78:6b:66:c1:e5:eb:e7:
                    1b:3a:ff:c0:13:57:2c:51:a4:f5:d2:8a:e8:1c:28:
                    88:24:22:d3:d3:77:6b:4e:01:b8:60:26:e7:1b:fc:
                    4f:64:52:78:64:47:4c:7e:47:2a:de:3d:b7:f0:dd:
                    21:4d:60:17:53:f7:ea:7c:fa:1e:e1:3b:4d:5a:5d:
                    75:c1:be:a0:28:e4:80:35:55:45:38:29:ed:85:c0:
                    07:0b:ae:ab:16:c2:bc:f9:38:f5:d8:2f:87:e9:96:
                    6c:9f:7b:d2:3b:05:e7:42:65:01:c6:5f:54:ea:c4:
                    83:5c:b9:2b:0d:4f:d6:1f:11:bf:41:95:ed:ce:cb:
                    22:00:9b:4e:27:4a:84:5b:07:32:02:ba:1d:8d:9f:
                    a1:51:5e:81:a1:e7:6a:d7:56:f6:af:90:bf:49:97:
                    d3:f1:c3:8c:9a:70:72:3b:39:9e:df:92:57:1a:48:
                    72:bc:30:e8:28:ea:05:39:f6:d6:21:dc:65:fd:d3:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:57:32:6A:FB:EA:66:C6:F1:6E:0D:57:DF:0A:6C:93:0A:05:EF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/15500956-7ded-3d3f-ae50-b5a339fa54e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:b8:fe:f2:ed:0d:04:65:0c:80:51:06:ed:d1:10:3d:d9:
         50:1f:88:4f:35:86:af:03:b3:bd:bf:ae:b3:0e:a1:92:9e:d9:
         29:1b:c5:6d:41:6a:f5:cf:13:03:c5:6e:50:57:c7:f7:e9:7d:
         c0:f7:89:f0:62:7d:e7:81:1c:16:22:74:a8:cf:bb:8b:74:7b:
         a0:af:ce:31:bf:84:d8:1f:af:d4:ca:0c:44:77:ad:45:3e:13:
         c6:d6:03:a1:32:11:18:04:48:ae:4c:53:97:b9:0f:9b:77:07:
         59:2e:dd:7e:2e:7e:13:bd:13:27:2e:e4:13:fe:07:cf:9b:a4:
         0c:25:33:af:8f:57:ec:dd:ba:58:a8:0c:7d:54:55:f7:89:23:
         4f:29:54:ca:8a:37:93:b4:c6:33:34:b2:ac:f3:8b:97:63:aa:
         0d:49:c9:fa:e2:93:e1:a4:c4:10:1f:86:11:64:78:31:61:01:
         3e:c8:4d:2b:b9:d9:04:19:9c:ec:3c:44:22:6e:81:50:c0:2b:
         76:ab:35:56:cd:75:5f:14:86:2d:e8:24:06:3f:9b:5d:cf:2c:
         0e:11:53:84:9f:6e:25:d4:db:f4:b0:8a:d5:83:29:c7:f7:95:
         11:51:14:8b:d7:fa:96:da:4c:22:94:a4:64:ca:2d:f4:47:e9:
         d1:6a:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:51 2024 by rpki-client on console-ams.rpki-client.org