Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa
File:                     5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa (raw, json)
Hash identifier:          ZbdvNQEBNw51sDdQq45xe5cLCN4wIJJtWCksK9M49yg=
Subject key identifier:   23:EC:61:AC:7B:02:B0:5B:C8:93:F0:1F:0B:B6:8D:96:A9:2C:8C:2A
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858472F307690569014F6E8D5C280
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        170.176.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:76:90:56:90:14:f6:e8:d5:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=2f2800dd-8628-4a34-9f90-2d0b7520173b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:74:f6:ae:5f:ee:98:dd:7d:8a:86:08:ab:4c:
                    d5:f2:74:c1:85:c0:74:37:b6:b8:a3:6a:21:ca:b1:
                    0e:60:59:97:0e:b7:9a:50:2d:e2:99:4a:81:8e:e1:
                    48:af:56:5e:9a:dd:16:37:67:d9:f2:d9:7a:f8:60:
                    42:a4:73:b4:80:db:0c:ec:aa:39:83:73:94:fb:63:
                    c3:e2:cf:2c:93:39:df:14:2b:c6:bf:b4:11:59:7c:
                    2f:b2:be:44:b6:b0:f9:27:0f:41:47:59:64:bc:d5:
                    ca:38:7c:38:9d:2b:e1:d5:b8:78:22:8e:0a:57:e6:
                    5a:6a:4e:a4:78:0a:2d:b8:15:d6:2b:e2:dd:f7:24:
                    b4:e4:3b:30:18:a8:22:c5:f9:73:ee:87:79:74:97:
                    18:4f:11:25:a3:76:94:f5:a5:f0:e1:da:f6:da:87:
                    88:d3:c5:82:43:29:e2:5a:50:47:db:5b:ad:2f:41:
                    e4:6c:14:08:cd:6d:cf:b0:79:f7:f5:e7:79:8c:32:
                    65:8b:f4:93:4a:c9:6e:51:2e:c2:bd:69:fe:ec:fb:
                    32:66:88:47:72:8f:09:4a:9e:28:2d:36:bc:81:13:
                    c2:56:09:43:94:65:4e:ac:ce:f3:44:c8:a7:93:97:
                    17:cc:53:82:8a:35:13:15:fb:0b:76:65:f9:65:a0:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EC:61:AC:7B:02:B0:5B:C8:93:F0:1F:0B:B6:8D:96:A9:2C:8C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5537a5d8-b701-3f7a-846f-a3abc4709ea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:d0:35:6c:18:07:c7:89:69:1c:7d:23:aa:40:e9:29:e4:
         26:8f:70:78:dd:f6:3f:02:07:ea:61:f8:44:47:ad:eb:d8:eb:
         f9:8d:4b:c2:3e:30:db:27:07:14:fa:c8:01:45:01:8b:c6:9c:
         cc:ad:39:7f:58:b5:f3:4c:59:60:e8:d9:de:4e:d2:06:bb:10:
         00:b6:6f:cd:a6:8e:d5:5a:af:09:28:32:39:12:6a:05:a8:b7:
         33:d1:58:84:a9:5f:ec:17:e0:9a:b8:42:1a:3a:b2:de:5f:66:
         90:9f:d9:52:66:1c:99:b1:a9:2e:ff:85:a6:f6:62:18:a0:a3:
         a0:d4:08:64:ec:22:f3:cd:5e:f6:a4:db:25:93:89:78:6b:6a:
         d2:b8:94:ee:66:f5:3b:b8:76:44:3b:2a:18:28:25:ae:c4:46:
         12:ac:64:1c:41:c4:10:36:73:57:4d:62:17:6f:ab:cf:63:1e:
         c2:c7:7b:79:1a:36:da:0b:ae:7c:21:63:ff:cf:b5:21:66:99:
         3f:59:30:10:ff:3a:2f:c8:eb:b2:0e:b8:3e:89:1a:2a:06:9e:
         32:0c:65:43:9d:14:e9:6c:84:2c:53:80:9d:39:81:ff:fe:cb:
         5e:b9:bd:46:5f:43:ed:2a:70:ce:1a:ef:bc:3d:46:e3:ea:f3:
         08:ff:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org