Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105ae2c3-0460-3d91-a18b-8064952e2f8e.roa
File:                     105ae2c3-0460-3d91-a18b-8064952e2f8e.roa (raw, json)
Hash identifier:          kN92f5PNgGeBUkSB0eBLf9R9/wtGwVZwx+3hOi57lYk=
Subject key identifier:   72:82:CF:B2:41:6C:0B:C1:C2:B9:4A:E8:B2:F2:6D:33:42:96:2D:DB
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858472E02FCE8B28B374698B81800
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105ae2c3-0460-3d91-a18b-8064952e2f8e.roa
Signing time:             Wed 11 Sep 2024 14:53:09 +0000
ROA not before:           Wed 11 Sep 2024 14:53:09 +0000
ROA not after:            Tue 10 Dec 2024 15:53:09 +0000
asID:                     203
IP address blocks:        192.46.122.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2e:02:fc:e8:b2:8b:37:46:98:b8:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 11 14:53:09 2024 GMT
            Not After : Dec 10 15:53:09 2024 GMT
        Subject: CN=42788b46-a0d8-4278-9c8b-3e2a29d3f56e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:22:45:64:76:88:32:12:c3:7d:c3:ba:2f:
                    ae:c8:1c:84:b4:80:ed:fc:95:0b:8e:59:3a:40:a9:
                    b3:53:18:24:5f:6b:18:4e:fc:fb:6e:7b:6e:b3:43:
                    06:33:3b:b4:bb:31:e7:c2:02:f7:36:42:e4:b8:b1:
                    10:f1:b3:e8:80:cb:b4:dd:9c:ae:4e:94:2a:be:89:
                    bf:d8:85:00:9a:8c:24:c3:26:e1:fd:ac:b3:3f:7b:
                    88:49:c7:f5:e5:5d:68:31:ac:93:80:b4:65:f5:47:
                    d3:c6:94:ec:e7:53:69:71:6d:ce:88:84:48:fd:6b:
                    c2:4b:e1:2c:72:5e:7f:ad:68:d4:47:2a:5a:d7:7f:
                    42:96:10:02:20:ed:8f:ac:50:bf:5c:18:26:ae:61:
                    33:a9:8b:2c:7c:e9:d6:29:af:31:ea:d9:91:78:59:
                    69:15:1c:47:ab:a4:c9:f4:a6:fa:01:b7:7f:06:1c:
                    04:94:0b:76:5e:7c:b1:0b:16:40:ef:21:0d:76:fe:
                    b0:6e:bf:a0:14:38:ec:29:22:46:72:33:1d:c1:50:
                    b1:6b:68:29:33:6a:4b:73:d5:4a:cf:99:f0:35:db:
                    52:0e:14:a2:6c:4f:d7:c5:42:a3:c9:40:a2:e1:f2:
                    68:41:9b:51:d8:25:41:67:fc:76:5a:84:60:af:2e:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:CF:B2:41:6C:0B:C1:C2:B9:4A:E8:B2:F2:6D:33:42:96:2D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/105ae2c3-0460-3d91-a18b-8064952e2f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.46.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:39:a4:33:4f:05:02:0e:3f:7f:1a:d1:89:76:63:af:94:63:
         56:66:7c:d1:d9:fa:21:2f:1a:7a:d8:d0:cd:e8:58:aa:45:bb:
         6e:c0:b6:c0:6a:74:37:80:d6:71:27:67:ac:3e:03:c5:39:8c:
         6a:1d:c9:86:01:14:9d:b5:b3:66:6b:a4:36:cf:e8:9e:6b:1f:
         34:67:46:fe:30:8b:d0:c8:d3:4e:67:1c:9a:4e:ee:96:34:ef:
         cc:d6:0f:21:6c:69:18:92:ea:74:70:fe:5e:5a:e2:5f:ff:b6:
         71:21:9d:1f:49:bc:4e:62:69:a2:c9:24:f2:f2:01:39:62:20:
         7b:a2:62:6d:ec:a8:a3:0c:97:47:bd:3a:5a:fa:1e:16:c8:30:
         ea:dd:44:84:12:90:6d:aa:da:b9:c0:dc:a8:ba:c9:94:03:31:
         09:82:f6:48:16:23:96:8c:34:a9:cc:27:a4:21:f2:01:e4:14:
         82:d7:f0:7b:44:ef:84:f7:f3:29:16:ff:84:dd:04:7b:9e:99:
         64:cb:16:5b:7e:e5:5a:74:8a:2f:95:a3:4f:22:95:9b:de:dd:
         7f:e0:76:29:f4:6f:31:aa:f0:26:c4:d3:fa:e0:98:95:e6:6d:
         f8:ec:da:e3:3e:5b:4e:9f:9e:97:f7:9b:7c:c6:6e:52:62:3d:
         ca:8a:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 01:34:50 2024 by rpki-client on console-fra.rpki-client.org