Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68107580-8167-3095-bdb2-2fd6caf0de80.roa
File:                     68107580-8167-3095-bdb2-2fd6caf0de80.roa (raw, json)
Hash identifier:          fKGDfP5IWtb7NvJppUxgvq4QMC02dSUcz4gttKVoW1c=
Subject key identifier:   F0:02:C0:FF:3B:32:68:6F:3D:50:CD:42:B5:18:96:BB:E8:05:53:A1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E094C8BA5BB9F7E300176C00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68107580-8167-3095-bdb2-2fd6caf0de80.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        108.177.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c8:ba:5b:b9:f7:e3:00:17:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=ef1b091b-2b63-4ef2-8e01-71dbb5b64a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:9a:79:cd:ee:69:ce:17:60:92:e1:30:b9:
                    2c:54:5c:5a:d2:b0:d0:33:78:09:0a:95:55:f4:77:
                    2e:9e:45:86:7e:76:3a:eb:ac:e4:f5:a6:2a:71:78:
                    9a:25:76:1f:bb:cb:52:bb:f9:b9:78:fa:61:7b:41:
                    44:f4:b1:bd:3a:b6:f8:ec:cc:b9:35:ec:6e:61:76:
                    67:7b:7c:a7:63:b1:44:49:9c:e1:47:77:6b:41:2c:
                    c5:db:bc:15:05:6c:0f:69:6e:27:2c:70:fb:29:96:
                    b3:eb:2f:4a:77:a0:9c:fa:ea:17:e2:0c:1b:e6:df:
                    c7:a1:25:26:03:65:09:81:6c:f2:9a:89:db:28:f3:
                    21:52:71:8c:f7:d2:66:2b:ee:7f:0e:3e:65:cb:99:
                    b9:f7:a4:12:9d:be:08:8a:75:1a:09:44:c8:ab:cf:
                    0f:dd:4f:3c:cf:2c:e2:44:7f:21:f5:20:c6:52:1a:
                    12:d4:a3:34:aa:4e:59:eb:3e:e6:f5:b0:d9:e5:99:
                    90:7e:06:97:a0:ab:6e:32:3a:db:ab:a6:07:5e:65:
                    50:dc:ba:0c:06:63:f2:e9:36:15:96:f1:db:33:c6:
                    c1:29:d0:44:32:a8:b7:66:81:cf:3c:0f:9c:39:37:
                    09:b7:c5:a8:26:ab:4b:89:17:8a:52:6c:c7:bb:d7:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:C0:FF:3B:32:68:6F:3D:50:CD:42:B5:18:96:BB:E8:05:53:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68107580-8167-3095-bdb2-2fd6caf0de80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:81:2f:a8:fa:d3:d7:19:3e:f5:69:e0:f1:ff:ec:83:70:93:
         97:13:5f:e4:e1:7c:ce:59:b6:6f:1d:83:d4:b8:39:e9:1c:70:
         fa:b5:49:38:00:d9:af:6b:ab:38:eb:2e:8e:e7:5c:1e:fe:d7:
         bc:7e:00:1e:ff:58:f2:33:89:36:b1:ef:9b:96:a7:53:e8:1a:
         5d:5a:33:e5:18:a8:67:5c:a3:8c:63:cf:d9:62:3a:b7:9f:1d:
         61:69:dc:a5:96:30:af:eb:b6:e8:d9:b9:db:b1:be:28:8d:b5:
         4d:0d:b7:b8:62:7e:12:86:45:b1:67:77:af:57:b4:dd:f0:00:
         91:b7:80:33:cb:76:a9:f1:e2:d6:6d:e9:c8:8e:16:04:b0:89:
         ac:c2:20:b7:2d:a9:5e:b4:be:d7:ea:42:d7:5f:9e:78:c4:35:
         90:7b:48:9a:83:92:0e:cb:df:19:32:c2:cd:a9:5f:c1:f0:58:
         b1:e2:ae:fc:f2:38:75:d9:04:62:86:8b:83:27:24:2c:15:7d:
         e8:cc:f4:74:0d:a3:ff:ba:3c:ef:69:0d:fc:70:0d:79:63:5a:
         49:40:78:75:69:ae:6b:fd:81:b1:71:f3:2b:0c:33:01:80:00:
         48:1c:25:49:cc:6a:b6:18:97:40:c0:4d:ef:b8:0d:28:2e:f4:
         11:4d:c7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:40:54 2024 by rpki-client on console-ams.rpki-client.org