Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
File:                     1764c104-a616-3deb-af04-69c6cae09b7e.roa (raw, json)
Hash identifier:          wLdYEya5k0U/SLVZhEvWn59qKse9tGOuktjNE45/j2I=
Subject key identifier:   CF:C3:E5:86:92:CC:71:56:B1:78:13:CC:8E:73:EF:E4:E9:84:48:8B
Certificate issuer:       /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial:       010D0C9F43285847B696BDA0B3F6B986CF18E600
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     31898
IP address blocks:        153.84.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bd:a0:b3:f6:b9:86:cf:18:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=479a4507-7594-4748-8db7-39a067006dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:b0:47:e0:a6:fc:58:cd:b4:f5:c3:83:1b:
                    61:b2:07:a4:68:58:2f:9e:9e:96:a4:3e:79:38:39:
                    09:e0:52:8b:8c:16:25:be:a5:56:21:73:ee:06:86:
                    00:e7:df:62:70:4e:56:45:ee:68:48:c0:8a:c9:33:
                    5e:15:97:a3:05:cf:c1:8f:cd:b4:ed:1f:d4:39:87:
                    79:ba:e9:45:b5:25:87:77:22:97:15:b6:d8:4f:ae:
                    0a:55:4c:7e:19:68:55:de:1b:71:61:f5:20:a9:83:
                    aa:da:c8:a8:1d:d9:20:9a:a6:9f:c5:08:19:5c:fd:
                    85:96:dc:c5:4e:5c:64:a2:6d:55:34:28:9f:66:52:
                    4a:65:8a:ce:1f:92:f6:b2:44:05:16:de:d0:0f:06:
                    60:e4:4b:29:a2:8a:b5:30:1c:c1:12:83:29:51:26:
                    f4:c7:95:a0:f3:f1:b2:aa:a9:ea:91:f2:a3:9d:09:
                    93:22:d6:42:2d:d4:0b:65:26:41:54:e0:5b:73:40:
                    60:01:ac:a1:20:3e:dc:04:7f:90:b1:22:e9:64:41:
                    c9:2f:91:02:3f:22:17:b4:bf:1d:92:f9:55:db:ed:
                    41:db:61:69:8f:ed:32:0d:ab:6c:04:22:13:36:6f:
                    cd:d7:9a:09:6f:f7:fd:1d:47:e4:20:28:fd:a2:a1:
                    af:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C3:E5:86:92:CC:71:56:B1:78:13:CC:8E:73:EF:E4:E9:84:48:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.84.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:4e:d4:4b:df:bd:1a:5b:d7:e7:38:92:8f:ac:44:c5:6a:
         74:87:3c:b8:e9:bb:9f:dd:82:4f:51:fd:aa:a1:1d:b4:43:6e:
         4c:48:b8:6e:e4:2a:a7:cd:f6:56:93:44:ec:9d:f3:5d:85:fa:
         0a:06:e6:70:51:04:01:29:e1:1e:1c:27:18:7a:25:66:f5:1f:
         45:dc:2b:e8:9b:56:7e:fc:aa:c5:a0:1e:bb:79:fe:6c:c1:c1:
         fb:37:ed:1d:50:77:42:89:f4:b1:67:47:ff:3e:0a:81:1f:5a:
         5e:fe:05:c8:0d:d2:55:c9:9d:39:8d:ac:b5:17:4c:02:fc:63:
         a0:6a:04:af:11:25:2f:61:89:b9:22:47:2c:5c:f5:6a:9c:7e:
         ad:17:ae:d7:57:36:4b:cf:10:df:19:66:12:53:3d:b9:04:2b:
         e4:82:06:6c:54:3e:6a:20:36:d0:50:60:09:95:27:49:28:16:
         92:f6:f6:ea:3b:08:c2:e4:10:2e:21:ee:58:47:57:d8:63:69:
         2c:43:84:08:86:4b:b7:33:37:8e:f0:6a:e9:81:c1:22:57:9a:
         96:48:da:94:05:a5:0d:70:f0:20:19:be:a2:43:80:36:e2:b8:
         cf:0f:97:1f:fb:bd:b3:f2:46:95:fa:ea:80:c1:f9:b1:84:7e:
         cd:51:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:23 2024 by rpki-client on console-ams.rpki-client.org