Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
File:                     008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa (raw, json)
Hash identifier:          HYxErhUjY8OLzZGfJp8btuHB4ua7VC12EoN21zLiCHg=
Subject key identifier:   92:4D:BB:A5:92:1D:1B:4B:B0:2B:9D:E7:3E:C8:5A:5D:52:AB:A8:77
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858474B1B4E0D40F161E0C6A7C180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     16509
IP address blocks:        170.114.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:4e:0d:40:f1:61:e0:c6:a7:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=d5373ad3-68ca-45c8-99dd-798c2c84b2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:fa:db:1a:91:90:1c:0c:e2:4e:25:09:30:
                    5d:0f:d8:91:08:53:ee:50:1c:47:a6:0e:d8:e5:7e:
                    02:98:2e:7d:db:49:ef:b1:14:f8:5e:c0:d9:d1:31:
                    00:2a:5a:74:21:02:a4:ff:b9:b6:0b:ba:00:03:b8:
                    b1:b0:24:28:3f:9b:95:d4:c2:8b:11:4c:18:19:bf:
                    31:de:b0:a6:20:1b:1a:cd:b8:a8:ac:c3:f7:ec:e7:
                    f3:23:23:1a:76:9d:bd:5a:ba:a4:f4:f2:ef:33:a2:
                    75:e8:c7:94:c7:a0:09:78:36:3d:11:25:19:90:0f:
                    24:c5:36:73:43:45:79:84:5e:cf:3b:d5:19:86:d0:
                    51:9b:99:39:e6:65:2d:40:18:9a:3b:01:f9:b6:c0:
                    20:9a:54:9d:a1:af:0a:98:18:ef:4a:cd:02:55:dc:
                    a6:c3:9f:80:bf:62:98:23:9f:fa:e4:ba:72:7a:63:
                    09:0c:e5:92:0e:d4:18:38:06:fa:d1:0e:03:21:d6:
                    58:00:31:2a:d1:fc:0a:77:ba:36:80:1b:02:62:42:
                    dc:fd:e4:0c:d9:a1:a1:94:ab:a4:38:71:e9:cf:79:
                    ea:0c:d7:b2:ca:f1:43:99:58:21:6f:31:6e:57:13:
                    7b:1b:ed:16:b0:f9:83:35:96:c7:2e:09:57:cd:21:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:BB:A5:92:1D:1B:4B:B0:2B:9D:E7:3E:C8:5A:5D:52:AB:A8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/008ecab5-1d8d-3d77-88c0-4d4d9d70afe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f2:0b:94:2d:45:d7:92:e8:38:63:93:f8:a0:3b:e9:4f:01:
         42:97:d8:59:05:a7:32:66:c2:bc:91:1e:c1:02:08:bf:14:97:
         71:89:6e:a2:8b:2e:13:a5:c9:94:f6:af:56:35:49:d2:70:40:
         4e:fe:40:d3:08:18:09:ba:d0:41:8e:38:27:bc:7f:b5:9e:fd:
         be:fe:fa:d7:24:92:2f:57:53:17:a0:3b:a2:95:8d:7f:d8:15:
         db:97:b1:ea:54:db:69:e2:33:29:b9:dd:82:11:6b:6c:72:0c:
         e2:00:dc:42:ac:13:fc:46:13:7d:b0:75:c8:83:57:68:ff:1a:
         af:14:12:63:0f:85:18:c4:5e:c2:09:e1:66:3f:36:84:b7:5b:
         41:18:d9:11:45:0e:b6:7a:8e:16:13:eb:a9:b0:53:28:c9:69:
         7c:f3:b1:4e:59:3e:b2:0c:fc:3e:6c:d4:37:dc:9e:69:5e:ae:
         90:38:03:bb:84:6e:ba:24:ba:b5:49:44:7f:83:fc:a5:73:75:
         c5:1a:df:fd:2f:00:1b:66:f3:d6:b5:74:18:fe:d0:0a:88:aa:
         5c:80:8f:04:4c:79:26:ec:69:db:c1:5c:a2:7c:5f:6e:9a:fd:
         0d:94:e0:d0:8b:94:52:7d:fa:f5:77:81:8d:b5:6a:05:75:78:
         72:f4:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org