Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56603839-eb0b-3f76-b1a9-8399d175709a.roa
File:                     56603839-eb0b-3f76-b1a9-8399d175709a.roa (raw, json)
Hash identifier:          4MjK4dRq4jaq/ivQJeNBrqYz9qPbv4MKBLeyG5a6nJg=
Subject key identifier:   9B:67:A4:AB:45:8E:40:ED:68:18:16:FA:A7:92:7E:B1:09:BB:35:25
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847B992CCA130AF2757CB835B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56603839-eb0b-3f76-b1a9-8399d175709a.roa
Signing time:             Thu 31 Oct 2024 14:40:17 +0000
ROA not before:           Thu 31 Oct 2024 14:40:17 +0000
ROA not after:            Wed 29 Jan 2025 15:40:17 +0000
asID:                     15169
IP address blocks:        192.178.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:92:cc:a1:30:af:27:57:cb:83:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 31 14:40:17 2024 GMT
            Not After : Jan 29 15:40:17 2025 GMT
        Subject: CN=b1ffe8e5-67be-4e2b-85b2-c1eaf89f64d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:3d:e4:72:3c:8a:3d:58:d1:05:e6:33:93:
                    7c:e1:80:30:f6:3f:62:94:24:6e:22:ec:89:a3:b0:
                    52:a8:df:62:34:a2:e4:df:4f:30:95:a0:e0:58:a0:
                    39:b7:1b:0c:64:63:2f:5d:6a:a9:a8:6a:34:f8:49:
                    3e:d9:9f:4d:23:54:a0:26:29:46:48:4d:6d:50:99:
                    64:de:69:e3:01:95:ec:e0:28:4f:df:25:78:f2:1a:
                    fa:8a:74:c4:7f:e0:e6:f2:38:e0:a1:d5:d1:f2:a5:
                    34:fc:57:c7:e0:72:8f:48:7c:3d:a3:64:28:79:a3:
                    15:dc:83:77:d9:2a:33:98:5b:aa:41:8b:65:59:3a:
                    c3:ff:36:ef:f7:12:a6:b6:d6:f4:30:a5:2b:cf:49:
                    09:9a:e3:5d:c2:30:44:fd:3b:c3:1c:67:a1:70:4d:
                    96:a9:67:47:63:29:37:ea:73:cb:ea:a3:c7:f9:e1:
                    82:b1:4f:22:1e:8e:ab:1c:65:a2:23:85:ad:af:2a:
                    1f:f8:fa:3e:68:db:fc:ff:99:84:d2:02:50:c8:b3:
                    17:bd:14:57:bf:45:ba:d2:3e:26:25:8f:17:f0:40:
                    b3:0b:e0:b1:65:65:cf:5c:d2:6f:54:0f:5d:69:5b:
                    92:9a:a7:3a:67:3a:be:53:f0:bc:d5:c6:ed:1e:ed:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:A4:AB:45:8E:40:ED:68:18:16:FA:A7:92:7E:B1:09:BB:35:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/56603839-eb0b-3f76-b1a9-8399d175709a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:75:fa:ca:ed:9d:80:74:fa:45:c9:6a:65:d0:5c:25:ae:45:
         96:b7:ab:bb:42:30:31:a5:c1:cf:42:3e:10:61:dd:f9:da:80:
         7c:6a:9b:6a:5a:29:34:ab:30:36:ea:da:32:eb:92:b2:9e:8f:
         58:1c:29:8e:21:2c:75:c9:ae:cc:7f:ee:c3:39:19:d2:4b:19:
         58:66:8d:de:ef:9d:d5:50:1f:6e:a8:58:cc:05:70:88:0b:76:
         fc:ce:cc:27:45:94:9a:ba:ee:7d:84:65:38:d2:78:d3:7a:48:
         25:f5:f4:67:38:ed:f7:5d:70:79:a2:f5:cf:96:db:1f:ff:3e:
         5d:29:ab:27:cf:a4:16:48:5e:17:4b:eb:de:f0:75:a5:2d:51:
         98:23:14:90:be:16:33:e1:0e:ee:98:c8:cd:9b:98:c2:0e:c5:
         1c:77:d4:90:db:61:84:d6:78:05:f9:2c:dc:2f:60:c3:c0:b7:
         c2:59:b7:ea:3d:5b:ec:06:50:66:0f:f6:80:2b:37:e0:57:e5:
         ca:de:d5:a5:1c:2d:c1:eb:b8:18:6a:b1:06:e3:09:1f:13:ff:
         5a:b1:e9:61:8b:8b:67:7a:d2:25:80:3f:06:f3:c2:62:03:d8:
         ff:1e:72:1b:6a:d6:cb:59:b4:91:a9:b8:34:0e:af:74:a6:be:
         bc:b6:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:11 2024 by rpki-client on console-ams.rpki-client.org