Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa
File:                     2586d268-42c8-33c6-ab61-506e6c71e55f.roa (raw, json)
Hash identifier:          YuOcmj0dX6M8zWzNMY2ixlFtE39riXwBrxXb7GLr5+U=
Subject key identifier:   20:5B:FE:C1:2A:C5:C0:A5:AF:B2:B5:D1:E6:45:F2:B4:44:0B:25:A7
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858474850A48B606E964ED8463908
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     16509
IP address blocks:        134.224.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:a4:8b:60:6e:96:4e:d8:46:39:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=6900fbf0-e614-4701-b954-3cbb4a114e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:89:71:78:c3:a4:7a:e9:22:ab:cb:a6:f1:
                    bd:d0:9a:8c:a8:00:4c:a6:e7:d7:c2:67:27:7d:4f:
                    f7:dc:0b:8e:68:72:f7:ca:b9:1a:ec:ff:c6:fe:d9:
                    91:03:1d:00:d3:09:f4:74:20:e1:b9:a9:4b:88:3b:
                    29:d0:6c:c9:25:ce:c2:ae:78:62:86:44:da:18:d4:
                    37:10:fc:f2:d9:a3:6c:98:e0:74:ce:65:90:b7:1a:
                    48:c5:d1:47:59:5a:cd:77:88:b4:d6:3b:b3:d8:aa:
                    64:88:65:76:44:06:63:7c:ad:b9:03:e1:4d:6f:6b:
                    ab:e1:c7:db:cd:7f:0d:1c:59:4d:53:e0:4e:70:a5:
                    c2:6c:6d:d3:6d:96:70:19:dc:77:63:2f:c1:ad:0d:
                    87:85:dd:e0:74:0f:e9:0c:b9:67:52:6c:8b:94:14:
                    19:e0:13:83:cb:55:87:69:e3:18:f6:9f:d8:33:23:
                    40:ef:89:1f:46:28:d1:e8:4d:e6:ac:07:16:37:60:
                    52:64:c4:d8:8c:2a:9a:d0:91:18:77:ba:05:0d:81:
                    c6:39:d7:b2:5a:8d:63:64:cf:77:59:22:42:78:3e:
                    44:41:35:73:cd:c8:98:53:e2:b2:65:04:6b:e6:a9:
                    7d:12:33:1d:13:74:b0:90:e7:3a:5a:a8:b5:fc:ec:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5B:FE:C1:2A:C5:C0:A5:AF:B2:B5:D1:E6:45:F2:B4:44:0B:25:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2586d268-42c8-33c6-ab61-506e6c71e55f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:36:d4:05:ed:16:40:93:05:a5:41:0e:8e:46:65:54:a3:
         96:b6:b4:58:6e:c4:d3:c6:3c:59:f5:42:93:ab:13:bc:5a:55:
         cc:19:14:6f:4e:c1:bd:43:26:60:c2:c3:57:a8:df:f8:4f:90:
         69:38:10:b1:6c:f2:5f:b3:9a:ac:d4:b1:b7:f6:f5:30:d5:a6:
         7b:52:a7:c1:ec:23:4c:26:96:aa:74:f1:e2:0c:03:9c:24:5a:
         e4:da:a9:ea:f5:b5:a4:80:2b:2d:19:cc:fe:81:fc:b6:96:fe:
         06:6a:65:ab:78:9f:99:d4:8d:95:d7:82:5f:74:9f:50:5a:88:
         52:59:23:4e:e8:9b:a9:13:09:8f:96:fc:62:5c:06:8c:40:a7:
         50:46:4c:54:04:a0:bb:60:2d:80:d2:fd:a6:db:d5:d9:52:77:
         b5:41:4a:b4:d0:bc:0d:d8:0b:12:bc:f5:15:48:b0:cd:38:3e:
         6f:16:81:75:e8:2c:a7:3b:64:3a:0e:aa:a5:e3:08:c3:19:17:
         fe:e0:b2:e8:03:d8:c4:b5:d6:e8:6a:59:0a:6b:07:69:36:4c:
         50:15:da:a4:0d:20:75:cb:8c:b8:78:5b:22:bb:ed:6f:38:40:
         27:7f:56:ee:9a:86:eb:65:8a:14:69:bd:4a:5c:b9:bb:8b:65:
         a2:af:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:25 2024 by rpki-client on console-fra.rpki-client.org