Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/349b1d45-a2ca-3643-bc35-0026d413ba63.roa
File:                     349b1d45-a2ca-3643-bc35-0026d413ba63.roa (raw, json)
Hash identifier:          y9P0IsdBB/Xp6fPi2GxvETQEw6R9bfnkTVyCKTuBoOU=
Subject key identifier:   10:4B:4B:DC:B4:1E:C6:C0:0B:09:F5:93:84:70:75:CF:A2:61:25:A0
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858475BDB6658894BE89997F16C00
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/349b1d45-a2ca-3643-bc35-0026d413ba63.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        134.224.158.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:66:58:89:4b:e8:99:97:f1:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=106275b0-5791-4734-b37e-5beb74153e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:5f:6f:43:29:e5:ad:b7:06:36:09:3f:0f:
                    8f:9e:8c:71:ca:03:20:b0:db:71:4a:b2:75:51:16:
                    10:23:0d:e6:58:f6:49:54:40:e8:1e:1d:a9:35:2f:
                    ad:5d:bf:33:10:65:65:b6:01:d9:34:2a:37:b3:92:
                    2d:e7:ed:71:46:44:ad:57:7c:40:1c:03:83:79:bf:
                    4f:0d:69:13:76:59:f5:eb:3a:6a:5e:d8:8b:6d:b0:
                    a4:da:82:64:ed:25:ef:55:aa:c2:4f:0b:74:a3:b0:
                    29:43:61:74:62:6d:2d:b2:bd:06:de:9c:d3:d9:29:
                    d9:c2:90:0e:23:b5:88:40:a0:73:d9:af:20:21:90:
                    98:2f:f3:2b:6b:a0:91:24:68:44:6b:bf:01:e9:b0:
                    63:e9:ed:21:91:72:f7:14:60:d2:99:75:f5:3a:a7:
                    c8:4f:e9:75:87:90:16:b6:ba:bf:67:fe:c3:21:ee:
                    89:4b:93:7b:42:03:be:1e:23:10:a8:5a:c7:60:93:
                    9b:7b:ad:9f:a0:24:d2:ab:31:78:c0:d0:70:99:27:
                    58:63:ef:49:1e:6f:a2:c7:f1:62:f4:52:70:f9:24:
                    80:3f:16:b6:89:48:58:10:a0:d7:7b:26:ad:b0:3d:
                    30:a0:97:61:48:38:d8:2c:21:19:e8:5f:e6:8f:44:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4B:4B:DC:B4:1E:C6:C0:0B:09:F5:93:84:70:75:CF:A2:61:25:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/349b1d45-a2ca-3643-bc35-0026d413ba63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:48:d7:1d:ed:7b:7c:6b:55:b7:58:f5:66:fb:26:c7:da:10:
         a3:54:64:e1:49:f1:a3:df:21:e4:6d:bf:dd:27:e9:41:98:a7:
         e4:66:79:06:23:af:f0:d8:dd:32:7d:d1:11:18:d7:53:61:2a:
         3f:7e:61:85:28:cc:af:e4:35:2e:cf:40:4a:fd:8f:f6:f8:3a:
         03:51:18:8c:cf:0b:73:9f:17:f3:b2:b6:f4:41:df:7a:78:ca:
         77:dd:74:78:aa:7a:01:6d:71:3c:c0:12:d1:c4:97:21:b5:2e:
         fa:7b:55:ca:c1:83:61:5e:31:d5:80:5c:22:11:6a:19:54:a3:
         8b:b7:67:04:db:a3:ab:fc:0c:49:2d:c6:71:78:ea:3e:ef:38:
         9b:a7:8c:b3:bf:c4:d4:44:79:9d:2c:22:d3:8d:b2:00:5b:f7:
         99:5d:68:11:11:70:fe:75:81:b8:33:63:27:f6:29:be:fd:b8:
         f3:d4:15:da:1d:c1:d9:9d:0e:0b:58:28:93:bb:8f:bb:1d:62:
         48:07:51:20:d2:ed:8c:b9:0f:cd:41:86:6c:96:a1:31:f3:18:
         a7:24:b2:82:f5:55:d4:13:c9:3b:31:c1:ce:8c:79:6d:d3:a5:
         0a:20:4a:da:9a:e0:c1:fa:d9:a0:19:d3:36:ef:73:7b:dc:ea:
         c2:8a:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:24 2024 by rpki-client on console-ams.rpki-client.org