Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa
File:                     d274a1a4-4284-3ce0-a276-785c1add14e8.roa (raw, json)
Hash identifier:          ME4oHw6gPbJ1oV7ayBPgwNxct7eZ2FOnoP3z6wuTgiM=
Subject key identifier:   5A:59:63:03:78:A5:C1:7C:4B:3F:38:99:A8:A8:53:0B:5D:39:9B:78
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847A30BE9D784D3C431A87C0530
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        170.114.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:e9:d7:84:d3:c4:31:a8:7c:05:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=fedb4648-92bc-41c4-b0a6-e085f3a74a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:ff:90:46:48:d9:99:ae:de:4f:9a:c5:0b:
                    8e:17:fd:5c:2f:d1:d9:44:bf:3e:96:84:35:97:82:
                    68:77:2a:31:e9:0e:05:50:04:4a:8c:61:4b:ca:46:
                    1a:d7:68:95:b0:25:e1:a4:2d:e0:f1:f8:a3:8a:45:
                    f2:a6:c0:8b:f0:a7:2e:bb:33:de:b2:70:e0:f2:00:
                    cc:94:1e:9d:fb:15:b3:e2:0a:c2:29:d4:dc:85:5f:
                    f8:cd:a2:c7:e2:7b:02:8c:f1:32:25:bc:76:1d:17:
                    77:94:91:40:1c:93:77:cb:69:6b:b7:4a:fc:95:52:
                    9c:e2:4d:eb:5e:6e:1a:7c:e2:5b:dc:97:5f:d0:1b:
                    ba:a4:14:93:5a:35:a0:5f:98:89:86:1c:ea:d5:a4:
                    5d:6c:05:94:aa:50:54:95:de:08:ec:8b:05:a9:9f:
                    94:78:60:15:02:11:8a:8e:1a:b0:f3:fa:6e:fc:13:
                    5c:80:76:b0:b5:0b:c1:95:5d:02:2a:18:2b:6c:fd:
                    9d:11:29:e5:68:1a:78:f6:24:71:c4:66:12:3b:05:
                    08:2a:62:34:cb:36:f3:0a:83:50:e3:06:a6:ff:ac:
                    a6:2a:af:28:9b:13:e4:56:8b:69:61:56:be:d4:8a:
                    fe:94:6e:c2:cb:99:1a:15:8c:69:4d:fd:37:d8:a6:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:59:63:03:78:A5:C1:7C:4B:3F:38:99:A8:A8:53:0B:5D:39:9B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d274a1a4-4284-3ce0-a276-785c1add14e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:17:e2:08:43:4e:b8:81:f6:ad:b3:76:43:7d:e4:03:04:cc:
         eb:06:01:6f:ac:96:e6:af:30:1e:a4:9a:7d:26:ee:14:14:97:
         0e:e1:3b:cd:7e:72:48:5e:8c:98:eb:c1:b1:a8:bb:a9:ac:32:
         3b:f1:3b:5d:91:31:45:8f:fc:15:3b:4c:75:3b:75:21:ad:b5:
         b8:be:6b:00:18:05:b2:49:42:2f:8b:71:1d:0f:a2:11:d9:31:
         77:29:2d:06:27:e6:bf:3e:97:f7:bb:a0:31:6c:7c:2f:a0:55:
         ba:05:46:4b:77:f7:73:53:d4:bf:00:b3:51:0a:81:a5:42:b4:
         da:59:1b:39:22:99:15:58:f6:0b:c9:ee:24:81:8e:83:8f:7a:
         6c:55:7d:81:24:f8:b4:94:99:da:dd:b4:3a:56:bf:c7:94:ba:
         12:cb:3b:15:10:76:e0:90:3e:91:39:e5:e3:0a:27:fb:a8:94:
         e8:42:fe:3a:ff:47:75:be:72:e6:8b:81:80:e4:34:ca:de:12:
         11:a3:bb:5a:26:0b:9a:1e:e4:c6:98:6d:c1:38:ad:95:74:94:
         8f:85:67:99:f2:4a:6b:8d:67:8e:4c:b2:7c:a2:ea:2a:38:b8:
         e9:48:76:87:f5:e6:83:33:b2:6e:63:54:a3:d5:b3:ba:5a:5f:
         c4:a1:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:55 2024 by rpki-client on console-ams.rpki-client.org