Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
File:                     4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa (raw, json)
Hash identifier:          ACmcMa38bVQc2Gil7lcXf70Dyy+cP39USwbvIrSaLUI=
Subject key identifier:   36:9E:C6:B1:BC:8C:99:EC:59:8F:6D:84:4A:02:95:6F:19:42:C5:B6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E094DCBDC42EAC7290A82D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        108.177.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:dc:bd:c4:2e:ac:72:90:a8:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=60c389e6-c67e-4e60-9c65-c8f10001d276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:a8:80:ea:5f:76:a9:a9:34:51:7a:4e:b3:
                    a0:89:63:7f:76:42:ce:69:43:c6:cd:55:c8:3e:09:
                    02:e5:f6:9d:30:08:a1:a0:2a:af:ed:a7:82:79:a4:
                    21:65:95:e2:20:51:90:d7:e1:e4:23:37:af:68:1c:
                    c7:00:7b:20:b8:d6:0f:df:e3:d6:8e:63:dd:ff:34:
                    9e:27:f2:8f:ec:fc:e3:b7:38:e2:c1:57:79:ca:34:
                    47:16:15:8c:f2:e8:9f:9b:6c:dc:8a:b7:bf:81:ea:
                    70:69:c5:1a:ff:28:ab:28:9b:88:dc:fd:ca:f5:b9:
                    c8:2f:79:5c:df:a1:5d:0f:7a:a3:f2:ba:32:fa:3b:
                    3e:f0:2f:be:d5:75:14:64:87:8a:5a:d5:c8:1d:63:
                    c4:28:a9:a9:93:92:02:67:06:24:d5:3b:29:86:8e:
                    fe:cc:78:dd:6b:ae:35:42:2e:6c:37:f3:cf:d1:aa:
                    1d:b7:a3:28:58:ae:7a:ba:b4:00:79:19:2f:d0:89:
                    88:d4:31:8c:cf:4b:e4:5c:03:ac:a8:37:17:9c:d8:
                    fb:5e:3b:e2:0d:8d:16:7f:cd:65:5f:75:35:d0:1a:
                    59:d3:c3:52:e0:bb:d3:7b:d0:f3:5b:c0:83:d8:b8:
                    f0:8b:5f:c3:18:79:84:bc:92:ba:28:b0:88:28:f8:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:C6:B1:BC:8C:99:EC:59:8F:6D:84:4A:02:95:6F:19:42:C5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ce12a65-14da-3b72-95a5-da0ac1c3162a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:89:dc:eb:09:cf:c2:13:4c:a3:1f:f5:9d:52:d8:3d:c3:d4:
         09:bf:5b:53:be:da:f0:59:79:3e:ec:a7:29:f5:37:f4:a2:f0:
         ea:fd:42:98:00:82:d4:32:3c:28:d2:4c:59:97:08:0f:32:19:
         9a:1f:44:1b:e4:95:da:10:b9:19:81:c7:f0:ec:7a:0a:1d:43:
         5d:5c:0d:3f:bd:31:de:62:71:6e:ae:36:a8:95:fa:da:ad:c4:
         f1:5e:46:66:dc:ff:67:6b:5c:ef:75:32:0e:15:8d:59:a4:39:
         ca:7d:51:67:ab:20:3f:a0:b0:4e:cf:53:49:56:5c:7d:7b:98:
         6b:ee:5e:7e:90:d8:25:bb:07:37:48:f9:4c:35:9d:4e:01:b0:
         0e:12:94:2a:0b:2b:d3:16:e7:ab:fe:b1:11:b3:8f:d2:59:2f:
         a6:82:65:be:e2:be:3a:0b:0c:75:24:95:59:dc:c9:ad:bd:65:
         5e:d4:69:e6:0d:38:28:fe:d3:3c:cc:90:d6:fb:e3:6b:2a:90:
         c8:06:80:04:24:8e:89:71:e2:65:ed:64:b3:63:e5:d3:dc:ad:
         0c:f3:fd:78:0b:47:10:8b:d9:0b:58:4f:67:12:a8:4a:80:6c:
         66:0a:f2:8b:c0:00:44:35:90:9c:38:0d:a2:ea:b5:40:2a:36:
         59:79:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:52 2024 by rpki-client on console-ams.rpki-client.org