Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e0c9fd-005c-3895-9aa2-32e2a4d03fdb.roa
File:                     40e0c9fd-005c-3895-9aa2-32e2a4d03fdb.roa (raw, json)
Hash identifier:          ObwqDmxdaVKUoxj4/urjPrL7DjtDhbpbi76s0sQjGOQ=
Subject key identifier:   52:C4:ED:0B:9A:85:1B:80:78:50:49:67:EA:92:25:08:C0:BB:23:84
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858474420AF048FE3F8B95A10AC80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e0c9fd-005c-3895-9aa2-32e2a4d03fdb.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        134.224.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:af:04:8f:e3:f8:b9:5a:10:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=22a2f08f-b3e6-46e1-b720-874c018e6cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:59:7f:17:9a:f0:ed:13:30:e1:8b:a3:6d:
                    05:d0:dd:2c:21:cd:ef:2f:93:f4:71:5e:38:8f:c2:
                    19:b4:ac:28:6b:3f:79:e8:ba:8d:3e:3d:82:2f:7c:
                    20:c8:2c:0b:05:2e:e8:05:0b:ee:00:f2:7e:0e:85:
                    f4:50:02:6a:e5:31:33:8b:c4:12:24:db:92:e4:1e:
                    89:60:e7:11:e3:1d:5b:e4:89:09:60:53:9d:fe:59:
                    dd:bc:4e:85:e8:3f:28:c3:40:ae:3e:1d:f2:f6:cc:
                    f6:38:00:ef:17:79:7d:51:77:32:f6:48:79:37:64:
                    9c:85:7d:82:bd:a2:77:0b:11:22:f1:29:5c:8f:fe:
                    80:f6:e6:e1:75:4d:0d:52:26:29:15:1e:43:0d:0f:
                    e7:dd:a5:fe:cb:e5:cd:66:25:99:e1:b4:69:3c:22:
                    76:87:17:c3:7d:e8:48:39:ff:3b:4a:bc:0e:fe:4e:
                    12:49:26:29:66:ce:77:da:8a:63:50:59:d2:3d:b4:
                    fb:72:8c:32:2d:aa:e8:c3:3f:9f:c7:ac:00:83:b0:
                    a5:47:c2:62:2e:d3:42:da:e3:f1:87:a0:80:5a:db:
                    c4:2b:34:a6:a6:80:28:f7:d4:60:18:82:be:e6:95:
                    f2:54:ba:a8:f1:5c:0b:3c:57:f2:59:1e:c9:af:4d:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C4:ED:0B:9A:85:1B:80:78:50:49:67:EA:92:25:08:C0:BB:23:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e0c9fd-005c-3895-9aa2-32e2a4d03fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:24:26:bc:cc:cb:fc:eb:42:2c:87:c7:af:62:58:86:7d:
         33:b4:bb:50:1d:07:aa:01:ec:74:97:a3:f5:4c:05:02:3e:35:
         f4:e9:3e:43:e8:35:e5:c1:df:6d:09:53:ca:80:1e:b9:75:eb:
         ac:e7:67:0c:a3:90:4e:42:de:25:66:7f:97:30:78:88:be:ed:
         17:b5:d4:f3:b7:c1:b4:99:ea:64:f9:d2:be:8e:05:60:ce:44:
         c6:53:9b:73:c3:01:9c:ed:01:f5:62:a4:38:ea:fb:e7:32:43:
         1f:fb:14:35:90:da:3c:fb:6c:d7:f9:7c:19:ed:1c:a3:49:d9:
         f3:aa:80:af:8b:bc:4e:de:ab:9d:22:f3:ae:24:a5:75:59:00:
         ba:a3:91:16:cd:bb:ea:54:16:a2:b9:b0:db:4c:5b:ad:f2:ca:
         29:46:56:55:9f:93:de:f4:47:46:ee:a8:08:e4:b4:b9:98:2a:
         61:39:2a:de:4c:7e:12:ff:09:3d:e0:86:83:de:ee:5b:eb:f6:
         31:50:a6:14:7e:6d:b4:cd:96:20:97:69:d3:0b:a6:fd:fb:e7:
         90:b9:9e:36:98:28:c1:16:98:83:05:99:03:99:35:53:9e:6c:
         44:1a:93:14:94:2b:fc:20:5a:f3:c0:de:9f:5e:a5:29:1a:44:
         d6:9e:0e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:26 2024 by rpki-client on console-fra.rpki-client.org