Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
File:                     df7c5515-0486-333e-8c0d-4be1af31b67f.roa (raw, json)
Hash identifier:          DxcNh7Ybyw0xAyX3bngaJ265WQwLXGHseyqPo3xWXNc=
Subject key identifier:   DD:61:C5:6C:FA:F7:3C:34:DE:AE:40:27:9A:A7:75:45:E9:A5:7D:1C
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285847EE8A2CBA59A96E0DA4040700
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     31898
IP address blocks:        170.114.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2c:ba:59:a9:6e:0d:a4:04:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=3215f81f-cbaa-42ed-a162-709d3abdd488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:83:db:83:84:34:3d:03:10:6f:15:22:9c:
                    b2:0b:bb:c5:80:e4:62:51:d1:ab:04:9c:f3:1b:fd:
                    be:2b:67:9c:ca:1d:4f:e1:7e:c8:bd:82:46:7c:c4:
                    b2:dd:0e:0f:59:1f:70:56:32:bc:90:d4:87:f2:bd:
                    66:ad:ce:ae:f0:29:68:c4:36:92:51:d9:1d:4b:f2:
                    55:8c:53:9c:72:d6:8b:e2:d2:8f:32:fe:f9:07:d1:
                    0b:bb:ab:31:fe:52:d8:5a:85:6c:ab:af:d1:34:b5:
                    d9:7b:e5:7f:9d:55:b3:d0:8c:8a:6c:0e:21:26:58:
                    e1:4f:9c:e1:1f:bb:ef:a3:6c:a9:30:77:33:48:0c:
                    22:aa:07:cd:d0:59:c6:c2:c3:05:d9:00:94:51:c4:
                    30:98:10:b7:2f:85:c0:e2:89:6e:bf:cc:17:dd:94:
                    fd:d3:10:b9:3d:0d:42:cc:b0:c9:93:db:5f:bd:54:
                    89:99:1a:79:ec:e0:dc:76:93:64:b5:9d:72:26:ab:
                    f6:64:17:61:1e:64:30:bc:24:8a:e1:67:86:d7:78:
                    68:43:c9:88:2c:70:55:2b:d6:63:c5:b6:db:35:83:
                    6a:c2:44:2f:40:50:4b:02:13:e1:05:35:fc:2a:c7:
                    3a:11:c9:c9:cd:cf:3e:e1:ce:a9:92:e8:d0:a1:f1:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:C5:6C:FA:F7:3C:34:DE:AE:40:27:9A:A7:75:45:E9:A5:7D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:44:e0:3d:c7:66:c7:ae:8c:c3:2a:bb:8c:90:a0:85:74:2f:
         71:68:ec:47:63:fe:78:1f:09:8c:e3:8f:ee:4b:4a:eb:48:da:
         3f:80:cd:85:4f:ec:41:38:50:7a:14:e5:3d:2b:c0:c6:a2:cb:
         ae:19:9c:a4:7f:b6:09:49:1d:b6:8b:2c:d7:ee:01:36:79:05:
         2d:01:ae:d4:d5:5f:cb:97:23:5a:bd:83:91:28:57:d5:b3:46:
         44:d0:40:3e:3f:64:5a:27:67:8e:fc:ae:1a:fe:ce:37:6d:20:
         a7:9f:e4:08:ac:8a:06:9e:11:5b:3a:3a:51:c8:9d:bf:34:6b:
         9c:91:01:93:56:ff:b4:18:99:1a:3c:7a:c3:6f:e5:81:ad:45:
         97:47:9b:25:1c:3a:dc:1c:bf:64:3c:1f:08:c6:94:60:c6:84:
         ae:f6:7d:ca:6f:8e:4d:2b:9a:e4:1d:7c:f4:d2:7b:b3:0c:68:
         0e:87:a4:6c:1b:10:25:90:c7:0b:31:8e:5f:61:a0:00:5f:ec:
         f3:a8:91:7b:f3:e5:c0:7c:15:05:a5:b3:8c:09:12:2e:8a:3f:
         53:44:62:37:4b:e2:86:95:03:22:e0:0c:f9:7f:4e:e4:01:e0:
         94:0c:e3:57:4c:b9:a8:21:93:22:d8:0a:16:d8:32:e3:1a:a0:
         13:a0:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:51 2024 by rpki-client on console-fra.rpki-client.org