Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa
File:                     cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa (raw, json)
Hash identifier:          WVs24jgNqpdIxPPaoeXrQR7ebrzxzq/UiapPT/MIwgo=
Subject key identifier:   D0:E1:7B:01:6E:95:EE:E4:DB:50:4D:9A:BF:F3:20:23:5D:E4:50:48
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F432858477230EFA1F3E5B9447F64CEA0
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     2152
IP address blocks:        137.164.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ef:a1:f3:e5:b9:44:7f:64:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=fb8f39ae-04bc-480d-a6b8-9afc4fd6fbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:41:b5:9b:44:5a:bd:69:cd:9d:c1:e3:98:
                    0c:06:38:98:26:b8:7a:78:1b:16:7c:00:90:49:a0:
                    49:d2:9f:93:4c:62:64:91:2b:d5:75:22:dd:c9:75:
                    e0:3f:67:0b:2d:5c:0c:c2:f2:89:8d:62:8a:8e:6a:
                    67:fb:96:6a:2d:0b:6f:22:83:16:14:e1:75:41:0a:
                    32:84:0b:91:dc:3b:8d:f8:bb:ce:19:17:fc:ae:d3:
                    50:68:3e:5c:3a:a6:c7:7b:4a:29:8b:d2:29:97:34:
                    f2:fa:a3:40:e1:b7:19:da:b7:03:79:92:0d:17:e3:
                    2a:c9:9b:6c:c3:ff:6a:35:74:7f:ed:67:7d:b5:0b:
                    86:b5:56:07:74:25:f8:94:35:cd:ba:b9:fb:e3:e3:
                    76:9a:1e:d2:41:65:f8:cb:b9:3b:10:4e:a2:65:f0:
                    84:0d:f5:5c:fc:d3:9d:74:05:fa:4e:f5:6d:1d:46:
                    ee:15:30:c9:8e:b1:2b:d4:08:b9:02:3a:5a:cc:df:
                    44:27:07:0b:70:67:0e:6a:be:17:fd:d8:10:12:f5:
                    6c:e8:60:58:b4:52:1d:83:03:90:25:52:cd:78:81:
                    52:b2:49:1d:09:39:0e:1d:4b:62:1f:f3:9b:ad:4b:
                    01:19:d7:4c:e8:20:b4:ac:66:52:4c:df:7a:a9:aa:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E1:7B:01:6E:95:EE:E4:DB:50:4D:9A:BF:F3:20:23:5D:E4:50:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a2:8a:a4:59:02:eb:a7:13:4b:16:3d:f6:f5:20:fc:bc:bd:
         f3:2b:e9:8c:f4:8c:2b:41:07:12:cd:a1:2a:f7:69:b7:25:e9:
         2a:85:af:2b:67:ee:d2:f9:c6:1c:3a:ef:a7:d2:3e:19:f0:38:
         ab:10:71:37:da:c6:58:3d:d0:89:44:8c:16:cf:cf:01:04:d3:
         1d:1c:e0:76:e7:92:c7:0c:45:e2:3d:33:79:28:10:e5:c2:2d:
         cc:6e:79:7a:e5:0f:f6:26:e3:af:76:7d:d8:0b:5b:77:f9:96:
         05:ea:8c:2b:e0:e1:32:eb:9d:5b:2d:28:8b:0e:39:15:ed:1d:
         7a:22:4f:6e:fd:01:57:2b:4c:8d:0b:f4:67:f4:e7:9f:79:82:
         7a:31:09:a5:de:2e:46:ff:6a:8c:2a:e8:1b:d8:5b:50:19:51:
         83:51:99:71:e1:ed:7c:09:1b:8e:bf:d5:0a:aa:52:03:3e:73:
         d2:75:1f:35:a2:0c:f8:71:a3:c0:37:9a:cf:69:ff:4d:91:98:
         23:5c:39:08:9a:7e:90:8e:4e:d1:b6:75:2e:6d:27:6e:82:4c:
         ab:4f:8e:d2:1d:02:47:2d:08:fc:c7:50:a6:9f:88:99:2c:6f:
         6d:cd:4f:89:87:c7:5d:56:bd:50:9d:ad:6c:58:5c:03:c5:92:
         3c:33:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:36 2024 by rpki-client on console-ams.rpki-client.org