Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a9978bc7-f1a7-3ff1-9ee1-4d4eb2a15dfa.roa
File:                     a9978bc7-f1a7-3ff1-9ee1-4d4eb2a15dfa.roa (raw, json)
Hash identifier:          cJ2melS48h3Oudr9Nf4Ij3/mOpdxmsHETPubfsLUpBo=
Subject key identifier:   EA:7A:E4:99:A8:DC:CA:D5:70:E8:5D:38:28:7C:74:EF:53:CC:A7:57
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584785BBA7EADE2925B035134880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a9978bc7-f1a7-3ff1-9ee1-4d4eb2a15dfa.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     16509
IP address blocks:        170.114.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:a7:ea:de:29:25:b0:35:13:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=eb7b9c04-b651-4dd3-909b-6b71d370498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:ee:2f:a7:32:eb:9e:b3:d9:04:b2:5d:a5:
                    27:6e:94:d2:c2:7b:00:a9:0d:e4:d1:26:db:3f:c5:
                    42:1b:1f:13:74:43:00:13:8a:1c:10:65:78:11:6e:
                    de:ba:b1:0b:ee:81:42:59:8d:15:5e:cd:06:a1:43:
                    86:40:5f:a0:f5:c8:f3:0d:88:61:ba:86:c7:96:e8:
                    8a:bd:cb:c0:74:cd:4e:3a:54:7f:2d:61:68:c7:aa:
                    e0:ec:f7:75:53:2b:58:a4:36:8d:0e:f2:b4:bb:18:
                    2e:9f:fc:49:ee:81:c7:2a:22:de:47:cb:00:3a:e8:
                    31:85:85:ab:5b:32:6e:72:67:46:77:11:af:70:b6:
                    bf:a4:1b:e9:65:b5:5b:05:4e:ac:07:4c:3b:57:55:
                    9b:cd:14:0e:74:d3:54:15:4b:a7:22:c4:8b:df:e4:
                    68:9c:0b:26:82:4e:fd:9e:9a:a1:d0:f2:13:22:fb:
                    6a:43:35:33:9b:89:e4:54:fe:4e:4c:62:42:02:71:
                    ce:f4:9a:c7:3b:71:1a:71:9b:ba:1b:71:e7:35:aa:
                    66:40:50:c0:ae:dc:f8:8b:0b:a2:95:cb:e5:9b:6a:
                    9c:9c:ea:fc:91:e5:67:2e:3f:31:d6:00:c9:24:2e:
                    28:e9:69:4b:55:5e:29:f5:d3:f4:63:ea:da:a6:47:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:E4:99:A8:DC:CA:D5:70:E8:5D:38:28:7C:74:EF:53:CC:A7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a9978bc7-f1a7-3ff1-9ee1-4d4eb2a15dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:30:ff:9d:76:af:43:2e:bb:b0:59:06:13:bc:03:da:e0:d9:
         b4:66:b5:72:6b:d0:15:4f:74:44:73:59:0e:47:01:8a:0f:3a:
         b4:cc:b8:e0:91:54:53:4c:c8:86:3d:f9:1e:93:93:3b:9a:86:
         92:78:65:7d:f0:69:7c:ee:c9:99:0f:d4:a0:32:0c:e3:7d:fe:
         61:71:9a:4c:d8:1e:f5:b6:7d:e6:18:69:87:d7:fa:82:03:ba:
         55:50:21:e5:b9:47:53:68:1e:02:bb:1d:c5:1d:a1:26:e9:87:
         6f:19:91:73:96:e9:24:4e:05:be:bb:6f:87:2e:eb:62:95:e4:
         63:f3:82:76:e9:8a:9b:85:01:08:01:ff:d5:c9:dc:b3:6d:0d:
         8b:44:4c:a6:ea:21:82:8f:6d:0e:24:01:ea:50:be:8d:10:75:
         35:4a:1a:18:5b:f5:5c:c2:43:89:b8:d8:99:db:86:16:dc:eb:
         5f:c8:ec:f1:f6:68:a4:68:e5:66:f3:42:b8:67:b6:81:69:ad:
         35:84:e5:04:87:76:e9:d7:2f:6a:d9:cf:56:65:fa:35:78:f1:
         2e:99:5e:2f:46:9f:18:3f:0c:9f:46:27:ff:f3:a2:30:c4:da:
         eb:ab:ff:bf:e9:3f:b9:2a:65:cf:23:f3:2c:19:30:14:26:35:
         51:ce:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:54 2024 by rpki-client on console-ams.rpki-client.org