Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
File:                     b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa (raw, json)
Hash identifier:          E/f20tGgv+suwjewl21JbAWoGPFuZ0dmewRltuqLpRc=
Subject key identifier:   56:D6:28:D8:E3:9F:E5:85:67:79:1A:1B:E8:D2:4E:CA:C0:B6:38:0B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858471E7099A2D7B5DB5ACA600F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     15169
IP address blocks:        108.177.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:99:a2:d7:b5:db:5a:ca:60:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=c3f307e9-b71f-42e9-bb35-c1c37164eb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:f8:84:f2:0a:c7:57:14:3a:34:8e:3a:ca:
                    6c:39:49:b0:01:9e:df:cd:6e:5e:aa:2b:fe:4f:18:
                    9a:ca:98:68:2e:b1:28:cc:b6:aa:77:cd:4b:a8:7d:
                    ed:b3:5e:2c:e8:dc:a0:35:d3:0e:43:b3:b7:61:bc:
                    be:bb:1a:aa:36:a4:9c:38:fc:3f:f5:93:da:c1:6a:
                    ad:a6:15:61:3a:1a:35:1d:da:50:76:ce:f8:1c:d9:
                    06:54:e8:65:b7:e3:12:72:2e:e9:a5:9f:b8:c2:3c:
                    c9:32:81:2b:47:08:f7:ce:67:ec:4d:cf:e8:81:b2:
                    f8:ed:26:f7:76:83:b2:28:58:8f:70:c7:a0:40:82:
                    2d:b7:ea:03:d6:82:f8:02:e2:c3:42:45:55:10:e4:
                    c8:1c:40:3b:fc:2c:ed:5f:ac:3d:1c:21:a4:ed:2c:
                    ca:46:8b:6b:20:c8:fc:aa:6a:f2:c5:35:6f:c7:6f:
                    2f:0e:2e:73:06:fc:47:7e:c0:c8:8d:4d:9c:6d:17:
                    de:b6:72:65:fb:31:c3:e4:5e:5c:9b:75:5e:c0:02:
                    9a:c1:41:7a:8e:90:fa:41:70:64:8f:41:09:c0:c8:
                    d1:58:6d:5e:e9:20:24:6b:ca:16:fb:2f:7a:b5:f8:
                    28:fb:21:bd:f7:fd:10:dc:69:fe:35:ba:55:94:5d:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D6:28:D8:E3:9F:E5:85:67:79:1A:1B:E8:D2:4E:CA:C0:B6:38:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b363d1d8-0b2c-3b45-80c9-e5db03b424f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:59:1a:15:5e:32:87:8b:45:82:4e:15:07:d9:8e:4c:71:
         d3:9c:2a:d5:37:4b:77:11:4d:83:41:ad:99:6f:06:62:5e:71:
         b8:ce:03:2e:ac:d0:bc:51:27:28:e1:12:72:19:34:bf:5c:d2:
         8d:9c:71:20:f6:12:57:96:bd:4c:58:c7:50:4f:20:d5:76:34:
         68:b8:c1:fb:f7:37:6b:a5:7f:85:a3:38:67:36:98:e6:21:53:
         9b:e4:57:17:27:4f:da:cc:a8:82:93:6b:b1:85:bb:81:c0:73:
         f7:0e:c8:3e:b6:28:f6:30:94:80:64:c2:26:f2:ce:ac:61:80:
         ff:ac:5a:35:63:3a:6f:fa:03:cb:4c:9b:ef:04:6d:35:e0:c4:
         7d:78:3f:a6:13:dc:16:7f:11:6e:b5:b4:c9:fa:da:20:e7:b8:
         89:8b:a6:ce:c1:63:9f:db:55:54:28:5a:78:d5:c8:61:5b:7a:
         f4:6e:ef:6a:44:42:b4:7b:49:14:3b:e9:da:b3:7a:12:80:08:
         d8:cf:a1:74:25:06:38:fa:d9:4f:ab:2a:4c:49:08:17:2d:7a:
         0c:b1:ef:a7:cb:48:83:b3:f1:88:91:72:d2:46:51:ac:3f:34:
         a9:c4:91:10:fa:e9:9a:26:c8:66:92:a4:0c:fd:00:19:10:fe:
         9b:72:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:19 2024 by rpki-client on console-fra.rpki-client.org