Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa
File:                     e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa (raw, json)
Hash identifier:          F3tl/OfYr9X5Gm/SCM2taLO/Rolh07qkRO/4ilBrYgQ=
Subject key identifier:   6D:DE:56:07:D2:95:8C:A6:8A:FC:2F:1D:C0:33:A7:87:51:B4:4B:A0
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F43285847933FED51EC320EC483DE7580
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa
Signing time:             Thu 17 Oct 2024 21:12:35 +0000
ROA not before:           Thu 17 Oct 2024 21:12:35 +0000
ROA not after:            Wed 15 Jan 2025 22:12:35 +0000
asID:                     2152
IP address blocks:        137.164.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:3f:ed:51:ec:32:0e:c4:83:de:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Oct 17 21:12:35 2024 GMT
            Not After : Jan 15 22:12:35 2025 GMT
        Subject: CN=0ebc10f2-f750-42c7-8897-a2e3c1890e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:b9:88:c6:d3:fb:40:5f:e2:95:d1:9b:5d:
                    5c:75:e5:96:95:0e:9b:d9:e1:f1:b2:28:f3:cf:c6:
                    80:27:5c:9e:f0:e6:ff:bd:bb:4f:d9:dd:71:ef:22:
                    99:57:c2:b3:a3:09:e5:c9:1e:64:25:bb:81:e1:8e:
                    6c:f2:9c:76:44:25:15:fc:fe:e2:57:de:dd:66:cf:
                    36:d1:4e:52:d4:78:c3:76:29:53:0e:75:07:fc:95:
                    67:70:12:97:6e:81:0f:d0:c6:10:62:52:25:00:d7:
                    b3:3c:2b:d0:b6:c1:f4:17:6f:f7:55:00:ab:0c:1b:
                    9b:7e:89:fa:df:a3:96:10:32:f7:d9:e0:68:90:c3:
                    0b:29:f0:d7:5a:6c:56:92:4f:26:e4:02:9e:50:ae:
                    ab:71:d1:cd:52:b1:46:27:93:a9:67:23:36:1e:d8:
                    cd:df:07:cb:06:50:7a:d9:b8:e2:03:f6:b2:52:a3:
                    ff:4c:c2:d1:82:35:b8:5f:6c:58:7b:64:59:51:11:
                    90:62:2b:aa:b5:e1:67:a7:a8:3b:e3:2a:8b:6d:92:
                    f4:19:1e:52:e4:fe:c2:4e:2b:21:75:28:24:9b:f9:
                    96:5e:77:af:b1:22:08:2f:1a:b3:47:46:5d:a4:89:
                    80:27:02:bf:11:ea:a7:9f:1e:5e:6e:4d:d0:5c:47:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:56:07:D2:95:8C:A6:8A:FC:2F:1D:C0:33:A7:87:51:B4:4B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/e5e52231-1ced-356d-b75e-ca2baaaf9d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:c8:58:14:1f:e7:ae:a1:b1:b9:10:9d:e3:4e:b3:33:87:
         a7:c7:c9:f5:8a:e3:b7:c5:27:c7:9a:4e:9b:67:a8:fb:79:0c:
         b9:fe:f2:68:2c:b9:4f:70:9b:2c:54:c4:75:2a:90:3b:ff:fd:
         6f:5d:a9:4d:4c:0d:23:69:64:a7:08:b6:1d:0e:5c:03:6b:25:
         2d:c0:11:f9:7c:47:02:1d:a6:84:2d:cb:41:92:a2:32:3f:44:
         3e:46:86:c9:e6:8f:cb:f8:d6:de:49:ff:7d:bf:71:fa:bf:fe:
         dd:d4:7e:18:1e:5b:6c:e9:e2:ba:29:6f:a8:ce:25:cd:00:bb:
         76:cd:79:89:3e:c3:8a:a5:ed:d9:af:e3:06:9e:21:c7:47:5a:
         ea:22:ed:f7:a6:4c:6c:db:84:ef:82:24:c2:02:90:c9:c9:af:
         c5:06:06:cd:00:bd:a1:cc:7a:b7:e1:19:6b:1f:63:44:a5:ca:
         1b:e9:17:d9:34:be:fa:86:c3:0e:8d:0a:1e:eb:df:81:e5:90:
         38:b3:d7:52:7e:10:4f:d1:d0:2b:37:bc:32:c3:dc:f4:5e:80:
         66:e3:95:26:16:16:b8:bb:14:5e:94:29:ff:fb:86:c5:dc:06:
         16:b9:98:5c:6c:b5:3a:36:b2:1f:31:f6:97:44:9d:e5:07:f6:
         58:7e:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:08 2024 by rpki-client on console-fra.rpki-client.org