Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa
File:                     b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa (raw, json)
Hash identifier:          lOFg9cNC7Vo15n/YEmqE2xJJ638sG4SpWMdj6ddJuGs=
Subject key identifier:   9F:4D:17:DD:F1:0E:5F:F1:53:04:77:51:75:63:62:BF:9E:2A:98:DD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285847299B2EB35E0FEDA950104F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     26683
IP address blocks:        204.252.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:2e:b3:5e:0f:ed:a9:50:10:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=32dfc3c5-9a7d-4451-b55b-2ab69fe83fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:7b:1a:d3:30:c3:d9:63:8b:7e:29:d0:05:
                    71:dc:a4:78:17:17:87:e7:a0:7d:88:bf:05:f2:a0:
                    cc:98:11:30:ca:cf:00:85:54:c0:b0:e6:a3:42:3b:
                    18:5b:0f:41:44:98:c6:5a:af:63:00:66:1d:43:f0:
                    0f:ba:c7:74:3c:72:52:92:2f:39:0c:e2:4a:ef:9d:
                    e6:41:5d:21:75:85:7f:1e:1d:be:30:38:84:6e:77:
                    8b:ad:a9:70:19:36:e3:1e:40:ed:a9:bf:e5:31:ee:
                    7c:ff:26:35:11:ac:78:f5:bc:5c:98:c4:71:7f:70:
                    8e:44:78:09:a7:f8:f6:73:f3:38:b4:47:41:59:20:
                    f0:9a:a4:ba:cf:80:d3:4d:ce:81:b6:e8:1b:e9:46:
                    2a:0a:20:0e:99:43:cb:81:06:b3:80:77:56:ac:c9:
                    8c:f0:ba:4e:87:cf:8b:6d:85:23:03:7e:d7:e4:01:
                    1c:53:2b:2e:01:32:c4:02:aa:9c:cf:af:fe:76:80:
                    46:6a:fa:5d:b1:22:9d:84:af:7d:d8:bb:61:b2:8d:
                    42:6d:e8:c4:59:e2:02:68:27:b2:ec:f0:fb:4a:34:
                    c5:05:66:f2:3a:fd:77:fc:de:3f:33:48:32:40:5a:
                    5f:ad:21:b2:de:82:2b:28:f8:5e:63:de:52:db:4e:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:17:DD:F1:0E:5F:F1:53:04:77:51:75:63:62:BF:9E:2A:98:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.252.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:e4:e3:85:3f:ce:31:6d:7d:2e:12:18:6b:da:b1:bd:41:
         76:11:b4:f4:32:d9:87:21:a8:d4:f6:83:1d:1b:6a:ba:e4:c3:
         d1:7a:6b:fa:ba:fb:49:bd:20:00:90:d3:66:7c:c1:eb:81:38:
         f9:a2:45:12:74:7a:dd:31:26:7b:1d:14:9e:45:c8:98:94:ae:
         02:40:7a:d0:22:84:59:ac:ca:c6:e5:6b:b0:7b:4d:0d:aa:66:
         69:b9:e7:7e:01:c8:9f:2f:90:83:06:1e:1f:5d:6c:0b:24:fa:
         2d:4d:96:1c:ab:f5:45:ba:e2:74:45:ca:e2:09:3f:36:d7:33:
         53:ee:21:f4:6b:e0:5a:e9:18:5f:8b:b6:c0:2b:07:b1:d9:3c:
         58:fd:af:ae:49:84:92:65:31:dc:e5:b0:c1:33:f5:20:3f:22:
         0b:da:b0:97:1a:6c:9c:c1:10:7b:66:49:4d:5c:62:8c:6b:eb:
         0e:36:b5:95:71:a4:09:15:d2:7b:1d:4f:ad:2e:13:d6:80:ff:
         2b:86:c7:7b:2a:34:e5:23:73:33:51:9e:c9:8d:fe:7f:b7:f1:
         43:b2:2c:b9:2c:37:a3:fe:0c:48:c9:b8:13:3f:e4:64:75:f5:
         8a:21:dd:ba:c1:90:a6:41:21:d4:94:c4:92:c3:01:1a:7f:f3:
         fb:ac:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:46 2024 by rpki-client on console-ams.rpki-client.org