Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/11b4cea2-6972-3cfb-886c-ff058ddece44.roa
File:                     11b4cea2-6972-3cfb-886c-ff058ddece44.roa (raw, json)
Hash identifier:          NDCtZ5ECEjGVbzC8uKLvnOO21bWnlRV2zdN+e57tmmY=
Subject key identifier:   EF:64:C9:F8:AF:6B:91:5C:D2:3C:15:0B:C5:BB:84:20:C9:56:2B:99
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858473A5B7BF26FE5BE7F47FA5400
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/11b4cea2-6972-3cfb-886c-ff058ddece44.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     16509
IP address blocks:        134.224.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:7b:f2:6f:e5:be:7f:47:fa:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=0d4530d7-f089-40ce-89e9-798624e6d46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:f9:ba:d0:25:7d:66:8f:d5:1a:19:c4:af:
                    c7:d9:20:4a:0a:f0:31:66:cb:af:f1:fa:c6:62:0c:
                    eb:0f:6a:79:d4:2d:85:f4:bf:53:81:00:88:b6:e8:
                    0a:87:38:34:ff:c1:90:d1:cb:8d:e7:fc:58:58:4f:
                    19:31:68:f2:c8:44:fb:4d:5b:e9:09:34:d3:07:37:
                    7f:f3:49:e5:3e:5d:bc:3c:da:2b:69:17:40:33:71:
                    67:47:14:bc:67:37:53:55:4b:79:7d:62:6a:4d:01:
                    e2:bf:64:ab:e5:72:31:b7:a3:06:29:06:3e:72:b2:
                    85:5a:7c:61:55:97:26:7f:31:cb:0e:72:dd:c8:5d:
                    d2:2c:90:f5:18:6d:59:ef:58:c6:21:b2:11:62:71:
                    60:88:40:40:a5:ee:23:41:64:5e:bd:a4:ac:a0:20:
                    14:3d:12:67:28:fa:fa:02:d2:61:1d:f1:41:b1:57:
                    6d:ae:2c:45:38:d9:38:c1:d4:19:ac:34:65:83:f8:
                    e3:0d:85:a5:c0:2e:20:e9:ba:fc:9b:32:d8:f5:84:
                    83:4a:be:8b:9a:fd:24:34:6f:af:78:1c:e9:09:ad:
                    19:a1:aa:9e:a2:e0:0f:f0:b0:25:82:eb:ff:7f:3c:
                    aa:d4:94:1d:cf:27:23:ed:00:ac:38:d9:9f:06:70:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:C9:F8:AF:6B:91:5C:D2:3C:15:0B:C5:BB:84:20:C9:56:2B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/11b4cea2-6972-3cfb-886c-ff058ddece44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:b8:be:54:d0:c5:18:d1:63:01:3b:25:7f:e1:2d:e5:e1:
         a2:2b:63:05:3d:b9:07:1b:02:e3:92:06:52:5b:3d:e7:23:b4:
         ce:49:97:31:a3:02:b1:8c:5c:ec:98:e2:4e:af:3a:e0:a3:60:
         cb:60:fb:24:7a:fd:6c:97:09:e0:e3:44:be:93:39:45:b4:fa:
         8f:e6:a9:ad:bb:b2:f2:85:7e:85:f1:f0:55:c6:56:65:eb:a5:
         c1:a0:3f:98:83:a1:f2:06:75:ee:b0:f6:d3:b8:d0:54:af:e1:
         d7:33:c3:2a:2c:ae:e5:eb:d0:13:63:da:0a:9c:53:de:66:2d:
         25:dd:d9:a1:df:b3:c3:4b:71:fb:a1:7a:f9:75:51:32:8e:c1:
         a9:33:9d:b9:62:3b:9a:dd:94:da:0a:51:15:6d:2e:38:15:c2:
         31:e9:33:57:88:5f:c1:13:98:d8:31:59:1d:4d:11:d1:94:83:
         b9:86:18:93:54:37:8c:68:c9:10:47:53:d9:d3:f7:6f:3d:1c:
         1d:0b:51:85:ec:a0:88:3b:be:ad:06:02:08:9d:62:cf:96:e6:
         66:b0:d6:8d:93:46:38:de:66:39:04:38:31:75:15:09:25:ab:
         6c:10:a5:c6:36:36:5e:96:5f:41:15:d5:3f:7d:c3:b7:99:ad:
         53:a6:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org