Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa
File:                     95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa (raw, json)
Hash identifier:          AyoVLqA08p1bqnPqG26H9VABUTVWISsadTHNblsBWis=
Subject key identifier:   4E:CF:B1:41:EE:65:68:D5:5D:08:FA:ED:C6:05:44:8D:7D:29:C3:45
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858477660F7E8044CE21513D34100
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        170.176.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f7:e8:04:4c:e2:15:13:d3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=567e77b4-5375-490c-bc35-7d6a3776db18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:5b:16:5d:85:55:0f:6a:71:d5:31:2f:b0:
                    96:32:5a:d6:8d:f3:e2:6c:d4:c8:c7:2e:91:b5:09:
                    88:13:11:5c:fb:d1:35:c1:45:6a:d4:88:4f:f4:e3:
                    70:03:c3:73:a3:74:1e:81:ae:bf:23:e0:12:3e:52:
                    a5:69:45:1e:be:67:48:56:cd:22:c2:3a:bf:af:54:
                    44:0a:fe:37:8d:ae:1b:c0:07:f6:66:2b:94:1e:29:
                    8f:4a:d6:49:88:ce:97:fd:4d:b3:a6:54:ff:66:8e:
                    60:61:77:e3:b0:5b:24:d0:e9:a6:55:a9:8c:9b:fd:
                    e4:b6:5c:a0:75:a2:34:bc:93:e5:a3:bc:af:52:0c:
                    34:da:51:12:15:8a:ab:f4:7c:4e:15:a7:6b:7e:70:
                    5c:a3:ac:cd:7d:04:df:1a:ef:38:55:28:81:0f:e9:
                    75:ef:b1:71:ab:28:fd:65:2d:41:2c:67:91:81:2b:
                    5f:ca:fd:e0:51:88:46:7d:9b:31:7a:a4:e5:fd:b0:
                    29:7f:57:30:9b:8e:64:c2:36:9e:dd:3f:c0:d1:39:
                    74:2e:25:6c:de:c2:1e:67:66:4e:e1:db:d9:31:29:
                    f7:bb:07:a7:f0:8b:00:5c:c8:21:51:0d:b9:da:da:
                    1b:11:2f:d4:9b:15:78:ff:18:88:95:8e:d8:20:cc:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:B1:41:EE:65:68:D5:5D:08:FA:ED:C6:05:44:8D:7D:29:C3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/95fc2f52-bf9f-3360-9990-f97b1cc4863a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:e9:49:e2:1d:7f:70:64:a3:08:af:22:01:00:8b:f4:c5:
         90:cd:db:1a:21:ae:29:65:74:3b:a8:7d:6b:d0:cc:2d:23:8e:
         78:be:91:d2:9b:d8:b9:e5:4b:cb:2a:cc:67:f9:9f:fb:eb:ca:
         cc:8d:bd:1f:90:25:a9:29:11:57:78:d8:bf:b7:b5:c7:ce:b0:
         e8:be:2f:11:47:8b:32:d6:4e:8a:00:b0:08:90:4f:b1:9f:98:
         66:95:8d:3d:28:ce:4d:0a:ce:7f:5f:0b:83:2e:ac:a9:26:54:
         a7:b6:6b:f6:d0:9e:ff:80:5e:60:a6:b9:a8:6b:0d:bc:b4:3f:
         93:2f:7d:aa:b2:b9:a2:2a:db:a5:23:55:60:d3:2e:c7:a1:4d:
         bd:db:73:e1:c7:89:d4:77:6d:d2:03:48:b0:35:aa:d7:7d:88:
         9c:9b:77:82:3a:b6:f8:52:26:3e:26:4d:75:b8:51:04:0b:06:
         c6:28:a6:aa:4f:2a:1c:04:15:70:3d:3e:82:60:78:7f:19:5d:
         0f:94:bf:4e:e4:97:bd:69:91:f7:42:15:11:f5:bd:1c:fc:2e:
         61:f9:24:88:26:42:9c:72:16:16:b4:61:1d:57:5d:c9:4c:c6:
         c5:21:0b:3f:0c:8d:47:82:81:31:26:bc:83:a6:aa:82:7f:5e:
         ea:8b:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org