Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa
File:                     2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa (raw, json)
Hash identifier:          eImezNE6yFIWhHqwOhW+qSnPdtkwqXoy9xjB69e8T9E=
Subject key identifier:   A6:54:CD:F7:27:22:AD:09:D3:87:2C:6D:0C:EC:26:01:1D:A8:CB:C3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285846C24FBF4BE4DA221578591B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa
Signing time:             Sun 04 Aug 2024 01:00:28 +0000
ROA not before:           Sun 04 Aug 2024 01:00:28 +0000
ROA not after:            Sat 02 Nov 2024 01:00:28 +0000
asID:                     15169
IP address blocks:        192.178.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c2:4f:bf:4b:e4:da:22:15:78:59:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug  4 01:00:28 2024 GMT
            Not After : Nov  2 01:00:28 2024 GMT
        Subject: CN=c7fc4ad2-f9fc-4c06-8127-69735c7193c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:a3:64:10:17:5f:f0:ca:c0:32:93:52:34:
                    d2:62:d9:24:5b:40:2b:e2:75:72:72:8e:ee:b5:57:
                    f1:eb:c4:f5:10:98:78:aa:6a:b6:20:1b:aa:ea:29:
                    df:02:73:99:9d:2b:9f:81:b7:6d:9e:e0:60:e9:ec:
                    9e:60:fa:e1:8e:a0:fb:77:6c:5a:0f:7e:48:af:72:
                    1e:85:79:c5:16:16:c3:ac:c2:7d:25:25:f9:fb:d4:
                    61:d3:a3:a9:11:20:75:42:b0:21:97:3f:f7:24:36:
                    7a:c4:67:64:2c:59:a2:39:fc:4b:21:13:a5:24:31:
                    7d:4c:89:e9:4d:f0:c2:63:1d:66:b9:64:7d:04:7d:
                    c9:f0:c2:b1:d4:4d:31:1d:0c:23:d7:b6:65:49:35:
                    56:d1:d3:cd:f6:86:65:f9:82:8d:ea:50:73:5b:5c:
                    9c:62:25:23:81:0d:9b:3a:e1:a1:0d:e8:bd:97:a5:
                    be:65:92:69:31:3c:7f:51:27:df:f4:55:69:15:e2:
                    b5:38:8b:ea:bc:15:b2:f9:71:d6:86:ce:38:10:db:
                    de:96:40:90:17:fa:b8:47:81:2c:b1:0e:c9:53:a6:
                    2d:71:46:96:a6:8c:38:29:60:07:f6:8a:f1:54:5b:
                    fa:71:dc:ba:a8:db:9f:8b:ea:44:c4:80:fb:59:f5:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:CD:F7:27:22:AD:09:D3:87:2C:6D:0C:EC:26:01:1D:A8:CB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2cc338bb-17f7-3d63-b37c-74d0bcb9afa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:fd:d8:66:9f:cf:e4:a9:c3:9b:eb:2d:81:2c:c6:21:91:
         46:12:14:30:85:74:73:9a:a7:06:72:19:32:74:b4:41:6b:39:
         53:2e:8f:ad:92:c9:a5:f2:4c:7f:7d:0f:3e:c5:64:cb:83:eb:
         0e:b3:5d:d7:c1:7f:1d:51:51:b5:5a:39:95:a0:58:66:a3:cc:
         b1:0b:28:76:c7:8e:05:64:da:57:c8:bd:e0:9b:9c:63:dd:dd:
         4c:ae:63:fe:ab:b6:04:8c:03:c8:3c:a3:54:c6:1a:21:64:ab:
         53:d2:88:37:74:74:96:70:4a:c8:7b:b3:04:e8:81:ff:3d:32:
         4e:df:07:9f:e2:f5:63:27:27:88:60:ef:ef:26:2d:6e:30:87:
         d9:42:ae:76:85:4d:13:cc:67:15:32:8b:fc:15:5b:65:39:00:
         a9:20:64:4e:d3:81:29:c3:b0:1d:76:68:d7:ff:13:51:28:e1:
         7b:18:9a:81:5f:e7:fe:31:2b:d8:2d:8b:45:03:b8:3b:03:9a:
         a6:96:e7:0f:d7:0a:39:36:79:77:b4:87:c6:ee:5b:5f:d6:a1:
         cf:d1:e0:cc:4e:ba:b7:7f:3e:50:c7:f9:7a:42:67:ff:26:b9:
         a4:ba:6f:b0:23:c8:db:35:81:d7:4c:40:81:c7:2f:cf:97:e8:
         f3:ef:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:18:46 2024 by rpki-client on console-fra.rpki-client.org