Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
File:                     06ec3548-40e7-370d-bd70-b74b5c67021e.roa (raw, json)
Hash identifier:          MPxNAZ4ggyiUX86cfba0wX5av6CYRyfHqm/PYUAQNKs=
Subject key identifier:   F8:56:D3:89:48:9C:BC:DC:A2:E0:66:AC:DD:0D:DB:0B:7F:59:AB:60
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F43285845A15DFAA52D574DF3FEA4BA00
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        170.176.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fa:a5:2d:57:4d:f3:fe:a4:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=9a1e7187-6353-4051-96e7-fc3d483b9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:5a:b5:d5:92:6b:3d:4a:c4:76:4a:1a:4c:
                    31:9f:14:67:ae:21:3a:48:3c:09:3c:ff:f6:79:63:
                    69:23:fa:a5:c6:15:ba:15:0e:35:ed:28:24:68:5d:
                    e6:e5:68:e5:65:a5:23:4e:0f:5e:82:ea:2e:00:c5:
                    0b:b9:cd:08:44:56:a1:fa:a5:a8:4a:44:4c:ca:8b:
                    f7:ce:d5:f8:20:49:c7:52:56:54:ad:18:ab:7c:ca:
                    5d:27:2b:bb:d9:43:8e:34:3b:7e:ba:5b:b0:07:8b:
                    3f:b9:ea:be:ba:79:9e:fc:35:d4:00:22:a3:79:8d:
                    db:a4:ac:e3:d9:c6:09:75:2c:07:94:1a:ea:b3:b9:
                    df:38:43:64:b4:a8:8f:29:60:47:31:50:24:3e:23:
                    05:8c:21:5d:50:60:b3:90:63:64:a6:e0:2e:f2:c2:
                    97:61:17:d3:92:f3:c4:d7:f8:d1:a2:79:dc:ec:16:
                    04:3a:f1:bf:c7:39:28:40:db:3b:5d:47:28:ff:51:
                    f7:19:5a:a6:28:78:d7:70:ba:01:5e:43:04:ab:08:
                    06:b1:4e:6f:7a:10:81:f6:d5:e8:59:5c:68:2b:c6:
                    d6:6b:80:45:11:d5:3d:01:66:60:f0:58:a1:78:0f:
                    e9:ba:e0:14:48:b9:e3:9e:70:f3:52:36:11:cc:97:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:D3:89:48:9C:BC:DC:A2:E0:66:AC:DD:0D:DB:0B:7F:59:AB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/06ec3548-40e7-370d-bd70-b74b5c67021e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:ff:af:2d:04:bf:50:3d:b5:c1:fe:c7:24:c6:36:76:03:
         57:a1:0d:f4:f5:75:2f:84:b4:df:f0:28:b4:17:0b:00:81:13:
         ac:de:bc:fa:f8:ce:a6:48:ed:7a:f6:0c:98:fa:c8:df:92:32:
         3b:a0:30:f5:76:6f:1d:8d:0f:4e:f5:df:44:c1:3a:51:9e:ee:
         74:a0:bb:9c:48:31:7b:19:ff:55:ee:c7:f9:03:24:e1:64:34:
         18:f0:71:03:30:aa:bb:3a:27:95:a6:eb:6a:ab:57:04:bc:ca:
         3a:e9:92:1e:de:1b:3d:c0:3c:50:6a:b4:86:fc:a6:05:ed:79:
         bb:8b:9b:cf:8f:96:b1:00:c9:9c:f0:ba:b4:9a:fb:1e:98:4c:
         f6:bf:7b:23:fb:45:9c:57:3a:f2:4a:f0:81:f8:3a:3d:0d:1a:
         52:bf:22:d7:c4:12:25:d4:63:b5:b9:7e:6e:de:eb:b7:51:61:
         6a:15:e7:bd:1c:95:f1:3b:48:7b:95:17:5a:f5:47:e1:62:24:
         2f:42:48:fa:c4:5f:d7:c8:29:c5:02:c0:59:eb:85:82:e4:26:
         e8:6d:b8:ad:db:f8:04:5d:de:21:75:55:5d:3a:42:e1:de:4f:
         4e:41:3f:70:ff:a6:fc:71:b5:a4:21:fc:3b:57:f2:71:e7:78:
         c1:a6:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:30:36 2024 by rpki-client on console-fra.rpki-client.org