Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6cd3878f-906d-3755-a44e-8dceaa9541d3.roa
File:                     6cd3878f-906d-3755-a44e-8dceaa9541d3.roa (raw, json)
Hash identifier:          SK2T32TgwJHNiICIVDLddu3u2y5YqMbYXk6BT1tV/c8=
Subject key identifier:   CC:5A:AE:10:75:0D:45:90:41:9B:C5:31:00:96:2A:75:8E:20:61:80
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858479946706EFF902328EFA8C480
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6cd3878f-906d-3755-a44e-8dceaa9541d3.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     31898
IP address blocks:        170.114.85.0/24 maxlen: 24
                          170.114.86.0/23 maxlen: 23
                          170.114.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:70:6e:ff:90:23:28:ef:a8:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=cb8a56d8-b70b-461a-973b-f787510eb293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:30:96:3f:96:ba:89:b9:6a:95:10:84:63:
                    d5:f1:a3:5e:20:03:fc:28:c1:4b:87:50:a0:1e:d4:
                    d4:4f:19:f1:3a:02:86:26:34:4e:77:46:44:dd:c0:
                    16:53:f2:d5:ea:dd:0e:04:14:aa:7b:c8:be:f4:bb:
                    5c:c7:3a:2f:d1:e2:7e:c4:59:a6:a9:80:1e:28:13:
                    31:20:f6:1e:bb:0f:0f:e3:01:16:42:95:78:8c:e6:
                    7d:31:30:8d:31:2a:fe:18:e0:5e:3d:37:c2:7f:f7:
                    0d:d1:d6:80:c4:05:ef:54:7e:61:c7:f3:2b:e1:46:
                    7d:19:07:4a:2c:87:ee:a1:9c:8f:a0:16:db:0e:c0:
                    19:91:8f:41:16:4e:b8:f2:c8:db:07:de:c9:7d:8e:
                    79:fb:31:5e:f5:b7:44:ba:de:93:39:1d:be:88:c1:
                    5a:09:8a:8a:b2:d8:82:ab:03:a2:6b:29:a0:08:08:
                    80:9e:53:f2:e2:f1:ad:c2:1b:b2:b5:fb:e1:51:bc:
                    ec:22:22:e7:8a:3e:6c:b4:f7:bf:9e:c1:72:c5:39:
                    e1:8e:f0:0b:27:2f:cb:6a:8a:c3:75:05:2a:12:ba:
                    ed:0e:99:60:12:64:4d:6b:49:e3:c9:53:d1:f5:4a:
                    7f:5e:c1:7c:aa:c9:be:e1:ff:4e:a5:b9:2d:f1:f4:
                    ba:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5A:AE:10:75:0D:45:90:41:9B:C5:31:00:96:2A:75:8E:20:61:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/6cd3878f-906d-3755-a44e-8dceaa9541d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.85.0-170.114.88.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:74:49:ef:96:48:46:11:2e:0a:d0:8c:e7:aa:79:4c:b2:
         a6:ed:1c:1b:11:58:6a:3a:3f:bb:71:e5:9f:dd:a4:3e:24:06:
         55:88:ec:fc:74:2f:4d:be:10:c2:df:48:2a:bc:a2:f6:11:28:
         b7:3f:6c:63:b2:06:c1:3b:15:1d:03:50:99:20:ca:4e:f9:a9:
         7e:38:3c:99:9b:db:1b:ef:ee:21:74:a4:2f:56:e1:2d:de:f8:
         77:08:69:f1:6d:c3:d9:7e:6c:d8:06:a2:83:a5:6e:14:e5:2d:
         9e:e5:59:2e:4a:ab:56:e9:70:43:21:39:fd:cd:37:3d:b1:fa:
         89:2b:1e:ec:22:c8:fc:10:5a:bd:c6:d2:3a:60:4e:4c:df:2b:
         b5:0c:55:37:3e:36:de:3a:c5:a6:56:47:b5:6e:c6:af:cd:5d:
         b2:b5:af:49:c9:17:5b:10:bc:33:fe:9e:9b:b2:86:b4:9b:14:
         0c:83:31:51:4d:e0:23:78:c1:34:39:90:47:5e:e9:36:30:43:
         cd:4b:1a:e6:69:30:a7:9c:25:43:61:22:8f:92:b5:72:97:fa:
         30:cd:35:f8:6f:5f:4a:65:fe:12:76:72:cd:ce:1c:45:9c:d4:
         ec:77:43:8e:fa:8a:3f:4f:9f:33:86:af:af:64:77:a4:19:72:
         69:5f:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:50 2024 by rpki-client on console-fra.rpki-client.org