Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
File:                     954248a7-1747-37a2-8e59-18157153fb0f.roa (raw, json)
Hash identifier:          ISrBxCs4tkBMYNghPI9vKvmsoGdlxrTb8FIhOonkHmk=
Subject key identifier:   8A:C1:0C:25:6F:E8:7B:A3:17:17:5A:21:90:D8:81:03:AA:AA:DC:4A
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858457FDDD0F5DC7F0BAE5BE1BB00
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        170.176.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:d0:f5:dc:7f:0b:ae:5b:e1:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=26c7e985-117d-4f2a-bfa1-2ddc186ce979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:49:c3:d4:0b:de:6b:c4:86:0c:25:f5:3f:
                    af:96:f2:d2:b5:9d:40:dd:6e:5e:40:7e:4c:6b:ac:
                    4f:46:41:30:80:96:7d:e5:e0:68:60:d7:3c:c7:a8:
                    09:f7:97:17:76:28:1a:01:0f:d7:71:cb:cb:6b:88:
                    cc:66:dc:85:b9:6b:bc:9a:86:3e:82:03:ca:12:9a:
                    59:ad:76:9d:75:6c:f6:7e:28:50:dc:da:58:93:c2:
                    2e:ad:8f:cf:0c:1e:cf:45:88:f9:33:59:09:95:70:
                    6d:6a:22:e1:63:97:b3:72:f6:06:eb:b2:ba:fe:f0:
                    2c:b7:0f:1e:be:68:9e:d9:d8:17:cd:f3:f9:8e:7e:
                    bc:b1:de:c8:37:aa:45:34:bb:28:af:14:db:22:0d:
                    22:bf:47:5e:d6:d5:13:da:c0:db:c5:3e:d5:fe:0b:
                    f7:9b:83:eb:17:18:c0:e5:16:ff:78:61:9a:38:1b:
                    5e:78:f1:0a:ef:00:65:f2:1f:e1:c8:2e:b6:d5:dd:
                    3c:d1:d6:26:0b:af:a4:cb:cf:71:d3:8e:aa:84:51:
                    12:05:6f:7b:69:c7:aa:7f:93:2e:63:cc:69:91:a3:
                    0f:93:a3:7a:20:01:b2:53:a2:61:36:20:ba:4f:d8:
                    f8:93:ef:26:42:a5:aa:7c:b3:74:6f:8a:0b:f3:5b:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C1:0C:25:6F:E8:7B:A3:17:17:5A:21:90:D8:81:03:AA:AA:DC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/954248a7-1747-37a2-8e59-18157153fb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:17:29:9a:6f:57:be:46:6a:e6:4f:60:0b:49:4a:8f:40:d0:
         d5:38:f1:96:cb:1f:63:8d:fe:32:47:85:3b:91:d4:9c:f9:04:
         95:22:9a:38:90:9a:bc:a9:e0:f9:3c:fb:f8:b4:fc:f2:87:30:
         83:9b:c8:f0:28:7f:3d:c5:83:d1:46:0a:a6:d6:11:55:ba:ba:
         d2:98:ab:ee:db:cc:d4:fb:04:a6:4b:ed:54:de:02:92:3d:f7:
         0f:a7:41:df:53:15:0a:98:d8:da:1a:6d:7b:d9:5b:06:52:a3:
         b1:4e:93:c8:12:2e:c0:10:bc:de:dc:f0:c8:06:3f:74:24:69:
         3a:8e:9f:46:b2:47:05:1d:d4:1e:ef:ff:e7:73:c0:64:35:97:
         61:df:f4:00:fe:2c:11:eb:b8:a0:f4:b0:61:bf:1b:1b:ca:e4:
         dc:a2:a2:57:2a:c8:e6:b2:4f:07:bb:7e:8f:b4:04:ed:06:e1:
         3e:db:e6:e2:a8:6a:cc:8d:b3:a2:36:ef:67:94:1f:44:63:97:
         42:b2:97:bc:29:49:69:03:4a:dd:f1:a2:35:b2:cf:44:d5:45:
         c9:e6:63:f9:6a:10:03:83:e5:ff:a6:27:ee:ae:0f:b0:33:94:
         70:e6:80:51:53:92:47:f1:11:28:08:41:20:2b:32:0c:00:26:
         6c:a4:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:01:28 2024 by rpki-client on console-ams.rpki-client.org