Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
File:                     1ba6c63c-750e-35ff-b1ce-055d22298e22.roa (raw, json)
Hash identifier:          TAO/0VJ/TM/Q30IQ5TX0uG3j8pYjd11boWvKyB8BC/s=
Subject key identifier:   BA:C1:0C:74:21:8F:94:4A:8E:5E:E3:0F:69:6A:79:CD:BA:6A:8D:D1
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F43285847B3CC061E7D4956155A707B4A
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     395201
IP address blocks:        134.65.192.0/23 maxlen: 23
                          164.152.160.0/23 maxlen: 23
                          169.155.44.0/23 maxlen: 23
                          169.155.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:06:1e:7d:49:56:15:5a:70:7b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=7d746e52-d920-4942-811b-d59daba2698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d9:cf:e8:88:ce:53:c4:f1:d7:39:25:eb:6b:
                    70:79:54:1a:47:c4:37:8a:fe:10:b0:9e:49:06:1d:
                    9c:77:db:ce:3e:9c:73:cf:b9:5e:5b:3d:9e:f6:8f:
                    5c:fc:68:37:04:c5:cb:85:ca:d2:21:6b:0e:ce:a8:
                    23:a2:cb:ec:e4:a1:e4:ca:3c:df:91:9e:99:f4:64:
                    01:ff:b8:ad:a0:55:b0:8a:23:73:46:d9:9e:89:d1:
                    c1:e9:6f:60:da:d2:21:d5:44:08:5d:72:b4:f9:f9:
                    7b:84:6f:25:ac:7e:7a:4a:4f:7c:cf:50:2a:09:4a:
                    90:07:6a:0c:53:8a:d8:96:6f:2f:5c:31:6a:6f:a0:
                    93:6d:97:7b:a1:88:77:39:21:da:61:28:04:4b:40:
                    13:69:85:6b:49:03:ea:84:7a:89:49:48:61:6e:fb:
                    26:7b:9e:a1:97:e0:28:dc:66:ce:45:6b:a2:68:fd:
                    3d:ef:f0:70:3a:14:c7:ed:5b:bd:3c:ec:f8:1e:3c:
                    f4:c1:03:91:50:a5:84:e2:f1:70:c3:4e:fd:ae:ea:
                    e7:14:16:65:4c:95:68:a7:12:3e:a2:24:b2:95:e6:
                    2c:cc:22:ab:ca:6d:00:81:52:d3:90:f0:ae:e7:ef:
                    d6:21:87:9c:1f:c3:d3:54:d0:c8:cc:c3:9e:3a:ca:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:0C:74:21:8F:94:4A:8E:5E:E3:0F:69:6A:79:CD:BA:6A:8D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/1ba6c63c-750e-35ff-b1ce-055d22298e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.192.0/23
                  164.152.160.0/23
                  169.155.44.0/23
                  169.155.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:c6:7c:96:a3:33:ac:1f:ef:2e:02:94:46:2d:6e:60:d2:
         85:b0:5a:91:f0:79:15:10:c5:18:52:12:24:30:35:d3:f4:31:
         9a:74:f6:9c:e4:e5:ce:c8:e9:2b:8e:49:42:8a:3a:36:ad:54:
         fb:07:60:0a:65:37:7e:4b:9d:80:55:9b:21:55:ff:df:9d:8a:
         e9:9e:c9:6f:a8:a4:de:09:81:62:d3:ba:b2:b2:5d:79:1b:7e:
         77:56:5c:cc:07:ce:5e:f3:c4:48:ee:1b:51:6f:71:8b:52:96:
         55:8f:b6:f6:16:7a:57:08:64:e3:fd:87:09:92:20:0a:58:c8:
         2c:39:70:4c:cc:17:cc:45:ad:d8:44:b2:60:8b:27:89:2f:28:
         64:28:f5:c3:ef:c1:84:6d:86:7f:fd:f7:fd:aa:21:d0:b5:bf:
         d8:4d:e4:8b:09:ab:49:93:0e:36:05:e9:5d:98:8b:c8:4e:b2:
         62:93:10:fe:ee:fd:37:8c:a2:73:24:35:51:8b:ec:99:16:32:
         ba:74:ef:96:94:87:01:a2:22:c2:e0:ed:84:1a:fa:c9:d9:0a:
         43:ec:97:69:d6:bd:8f:6d:a1:f7:09:09:8e:8f:2d:ac:7d:e2:
         06:d6:a9:00:24:a2:37:ba:ae:60:e4:47:13:17:80:00:61:b0:
         9b:27:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org