Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa
File:                     e03b701f-5218-31be-83f9-c7f36c6eb80e.roa (raw, json)
Hash identifier:          xbuSTbEBdXHcZhqS01/G+oZfkawim8lUk7eUCbo5dP8=
Subject key identifier:   02:AA:B0:85:E2:D1:52:55:32:74:11:70:6F:F7:AA:31:FF:45:D2:3E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847A3F2124A46BE26745C6A4240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa
Signing time:             Wed 23 Oct 2024 20:44:27 +0000
ROA not before:           Wed 23 Oct 2024 20:44:27 +0000
ROA not after:            Tue 21 Jan 2025 21:44:27 +0000
asID:                     15169
IP address blocks:        192.178.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:f2:12:4a:46:be:26:74:5c:6a:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 23 20:44:27 2024 GMT
            Not After : Jan 21 21:44:27 2025 GMT
        Subject: CN=dca19c4f-1dec-4147-8522-fd158ab0098d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:d3:55:df:e8:bf:3e:22:2d:27:3b:21:85:
                    c5:63:73:08:0f:cf:c9:45:98:29:cf:c9:49:fd:88:
                    3c:4b:09:29:ad:3e:c1:ba:99:17:71:b2:90:b9:6e:
                    78:ef:a2:de:30:5f:72:2e:89:3f:d2:b5:c5:52:ca:
                    bd:70:0c:cd:79:d0:82:55:ab:7d:29:6f:e4:84:b2:
                    b6:e2:ae:18:11:33:89:06:1f:68:2b:72:a2:67:54:
                    56:3e:77:64:80:1c:1d:46:70:5a:52:49:ab:76:10:
                    f4:53:33:19:bf:86:b2:c9:6b:5b:14:ed:b0:cb:ee:
                    b9:1e:e9:18:4d:b3:f9:3a:fb:a4:9e:fb:f5:2c:8a:
                    52:11:46:f0:f3:58:f4:0b:73:a4:d4:01:31:7d:bf:
                    94:3e:1d:d5:4b:d9:49:7a:27:91:ed:4e:7c:f0:82:
                    a2:62:a2:a0:dd:cf:5e:2c:28:ca:e4:55:7b:c9:cc:
                    e0:00:b5:dc:45:36:fd:ff:4d:c0:d0:52:0c:4a:e0:
                    b2:8f:e9:6a:9d:8c:a8:a6:79:4e:a0:f4:24:9a:2c:
                    18:ae:f6:b4:68:6f:fa:32:eb:40:16:41:3c:ea:66:
                    52:5b:f4:8c:23:1e:41:f2:f5:1a:5c:63:85:35:a1:
                    91:f5:38:7c:d4:8a:ac:25:4e:d6:83:e4:73:fa:cf:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AA:B0:85:E2:D1:52:55:32:74:11:70:6F:F7:AA:31:FF:45:D2:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:70:c6:ee:37:dd:ab:a5:30:de:c8:52:0a:cb:7f:07:bb:fd:
         fb:0a:07:bd:4f:0c:30:90:12:f9:37:e1:b5:21:35:48:e1:ff:
         79:b9:e2:45:20:e5:e6:d6:53:fa:49:b8:7e:90:5c:8a:cd:ea:
         98:a4:d2:61:5a:bf:93:a3:4e:b1:0d:ec:d7:6f:b6:e7:8d:04:
         4e:d8:8d:0e:84:ac:3a:df:df:62:21:c0:5e:71:0e:2a:ae:53:
         6e:31:16:02:e1:dc:5d:86:fc:2f:42:1d:08:68:7d:6c:70:b5:
         74:b6:9f:4e:c1:aa:b8:6f:30:9e:4a:a4:9b:5f:08:7a:5d:68:
         f4:37:cb:e5:31:dc:cf:56:19:26:bc:39:d4:a4:a6:65:fb:97:
         83:c5:6b:ce:a7:a5:5b:fd:97:f3:29:7f:58:a0:67:38:5c:73:
         61:e3:41:a3:97:ec:c5:fd:3a:3d:4a:2c:84:f0:01:ed:af:e3:
         29:c0:7e:a7:91:c9:de:a3:e3:68:71:80:64:40:1d:41:c3:69:
         ae:46:f1:52:33:c3:90:68:9b:f8:d8:57:34:08:1d:b2:af:9e:
         76:7e:14:85:14:11:5f:40:27:d7:1e:0a:fd:f2:87:cf:9e:01:
         b7:ed:41:3c:6d:5d:28:54:a4:70:a4:42:21:c8:f0:3c:f1:10:
         51:f1:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:10:17 2024 by rpki-client on console-ams.rpki-client.org