Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
File:                     cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa (raw, json)
Hash identifier:          iGfAapX8lCxl020QtpAGSWufsC6qXX0wSeVaNJzz960=
Subject key identifier:   55:12:FF:DD:8E:F8:89:0E:84:44:02:C4:8F:F0:05:F4:81:06:59:ED
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F43285847792BAEC70DBE701FB46A2B40
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        164.153.128.0/24 maxlen: 32
                          164.153.129.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ae:c7:0d:be:70:1f:b4:6a:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=c487126f-b013-4e0d-8057-f4523449a94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:7f:d7:f2:a4:55:49:78:af:b4:99:63:c7:
                    d2:d3:bf:b2:50:88:11:74:4f:5b:bc:43:c3:dd:9e:
                    aa:94:80:c3:34:72:3a:c4:72:f2:0d:ce:b9:8f:9f:
                    25:d8:88:bd:21:75:79:e8:0a:d1:f4:a5:12:44:e3:
                    7c:72:38:e7:c8:85:38:bc:29:7e:dc:92:3d:5e:89:
                    5a:16:1b:7b:33:23:57:13:bc:26:ca:7f:95:f5:e9:
                    81:2d:ad:c5:00:4a:b4:aa:ed:fd:e4:42:0d:d6:18:
                    5f:6e:43:a1:2b:27:50:22:a4:d1:28:4e:a4:34:e9:
                    d4:72:38:20:d8:9c:3d:df:72:7f:5f:aa:57:50:75:
                    9f:fb:82:f1:2a:da:a6:1b:30:24:e6:99:21:88:36:
                    2a:8e:6a:ef:98:e8:c7:ba:a2:8e:93:cd:99:62:dc:
                    b1:ed:ed:4b:f5:b9:4a:64:25:2e:7a:f4:cb:5d:22:
                    c7:0b:86:5f:28:df:0e:10:84:a6:de:eb:23:18:da:
                    64:3b:4d:c5:aa:d9:86:46:09:40:44:92:7e:ed:88:
                    4a:9c:1f:07:4c:6e:38:db:3f:cd:d3:38:79:92:01:
                    2d:17:89:3b:6b:e7:73:20:fa:d9:47:d8:95:48:b9:
                    40:44:54:e9:cb:06:d7:59:72:35:6d:ac:99:bc:67:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:FF:DD:8E:F8:89:0E:84:44:02:C4:8F:F0:05:F4:81:06:59:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/cd28f1d5-cbb6-3ab6-b73a-434d505cb22e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:02:40:b5:30:61:b5:75:56:65:ac:33:09:0f:e7:09:f8:19:
         37:ff:9c:24:26:55:62:c2:f2:fd:33:9b:f0:44:6a:b7:18:2d:
         30:ba:b6:74:eb:d5:93:13:ca:3c:15:0e:e0:b4:b7:28:21:8e:
         06:07:96:d3:cb:78:61:b9:56:ca:91:dd:37:97:f4:14:65:0f:
         98:6c:8b:11:12:1a:03:c4:3e:e6:f9:79:43:04:33:8a:77:fb:
         ca:bd:47:95:d1:b7:92:2c:4d:44:3f:66:ba:47:ee:e4:83:2c:
         f0:51:6d:b0:ae:4f:20:e4:43:93:03:d5:89:ef:c8:98:16:ea:
         49:e8:64:48:06:c3:30:7e:d0:dc:a9:fe:5c:ad:26:24:69:5c:
         f9:2b:a2:1c:f4:a4:f5:ae:f4:91:f5:bb:91:57:03:76:7c:8a:
         2d:6f:72:52:5e:6d:01:15:71:1b:35:4e:65:7e:d1:2d:e2:2f:
         eb:98:60:a2:2a:fb:13:13:56:fe:79:5c:4b:cf:10:53:52:05:
         a7:1d:e3:b2:fd:f6:be:3d:6c:12:40:5c:fa:7e:87:32:d3:d8:
         ea:28:06:e0:0c:39:18:95:d0:0a:1b:1b:af:6e:32:7d:20:58:
         df:a4:dc:48:05:e1:40:7b:87:0d:30:86:b3:05:b3:a4:a5:d2:
         ca:16:98:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org