Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
File:                     a7b7be0e-4b13-347a-87f9-6e790f01689d.roa (raw, json)
Hash identifier:          jbCkF4BWLGSSStaopDbVTtBnwvNSiAQhfVOvykQYGbM=
Subject key identifier:   98:30:75:74:AE:CB:E7:69:CD:07:50:8B:89:04:95:D3:2D:46:56:B2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847A3F0810A3EEAEC10867F2860
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
Signing time:             Wed 23 Oct 2024 20:41:18 +0000
ROA not before:           Wed 23 Oct 2024 20:41:18 +0000
ROA not after:            Tue 21 Jan 2025 21:41:18 +0000
asID:                     15169
IP address blocks:        192.178.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:f0:81:0a:3e:ea:ec:10:86:7f:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 23 20:41:18 2024 GMT
            Not After : Jan 21 21:41:18 2025 GMT
        Subject: CN=66469b89-3f37-4885-aa82-f912907c691b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:c3:cb:83:40:9c:bc:9b:96:1f:cd:93:f3:
                    f0:65:b9:9d:a9:d6:d4:7a:e8:12:03:98:0e:29:f1:
                    85:10:0f:95:f3:6e:d0:77:58:73:47:e8:3a:ea:61:
                    48:2a:32:a8:7a:ba:29:90:11:98:ef:28:02:44:84:
                    8a:5b:df:f3:97:de:f0:e7:3d:c1:ab:be:c7:f6:e4:
                    d8:34:02:40:1e:17:f8:cb:b3:2d:94:be:34:d8:b2:
                    19:de:a0:19:85:c5:7a:00:f2:49:e6:c1:2c:f2:9d:
                    81:52:c5:31:cf:e3:e4:6e:9f:4e:ad:41:71:87:33:
                    f7:07:10:08:4b:e2:c8:db:38:76:a6:72:13:f6:ec:
                    2d:81:54:fc:db:79:48:cb:1b:33:e7:0f:55:e7:6b:
                    76:88:22:9a:7d:9a:7c:4b:35:db:55:8f:b5:fd:ce:
                    b5:ad:30:98:38:7b:c9:3f:08:6a:dd:f5:76:3d:7e:
                    fd:67:08:c5:4c:20:d3:d2:46:ba:75:cc:1c:a4:bb:
                    f4:95:7b:7b:4b:85:c3:7e:a2:d1:fa:0e:f3:fc:65:
                    71:a9:44:bc:81:75:b0:fe:d2:40:fd:07:1a:07:fa:
                    64:01:18:77:1f:3e:53:cb:86:94:1a:ac:fc:75:e3:
                    c4:82:67:8d:de:54:90:a5:21:eb:bd:f8:7c:af:bf:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:75:74:AE:CB:E7:69:CD:07:50:8B:89:04:95:D3:2D:46:56:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:07:65:5d:22:d5:b8:74:65:81:e6:7a:ec:44:51:d2:d5:c9:
         18:cd:1f:1e:a9:de:70:3d:e7:d0:13:57:f6:72:38:f5:84:92:
         a5:19:0c:12:1e:41:d6:ce:48:ab:9f:ec:41:b6:b5:19:3b:31:
         28:2a:af:6d:cb:ef:25:6d:c6:ad:5b:ee:58:a3:a5:93:93:3b:
         9c:5c:00:e9:dd:c6:ca:23:6e:1e:e3:22:4e:24:74:be:73:4a:
         d7:8a:1c:cc:1b:39:df:22:4e:ef:84:6f:b3:50:98:f4:4b:0d:
         25:fc:0e:c0:a7:f3:88:91:f2:22:a2:ed:c9:82:13:4f:87:cb:
         be:89:15:b6:5b:36:42:09:ea:9d:b5:b4:66:c4:d1:6b:f2:c6:
         d2:34:e5:bc:82:bc:dc:08:26:1a:3c:77:97:0f:dc:54:74:39:
         11:5f:a5:79:d8:7e:cb:47:64:93:9e:bf:46:91:09:a7:c8:72:
         8f:75:0e:5d:19:10:70:11:3a:a3:b2:a2:c7:2c:b4:bc:a4:fc:
         6c:38:7a:8b:c3:34:b5:7a:d4:79:93:ca:99:cc:26:d1:71:d9:
         a3:36:13:e0:f4:b6:a8:6f:c8:58:99:45:16:88:2c:24:00:b9:
         91:cf:f6:57:b5:d1:84:e9:b5:e1:24:aa:21:81:f0:15:3c:33:
         c8:27:33:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:15 2024 by rpki-client on console-ams.rpki-client.org