Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa
File:                     e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa (raw, json)
Hash identifier:          Pd5sPbe2kPbZQ+lamghBi1TRWJhGKcLTyadnpWU74wQ=
Subject key identifier:   A4:63:57:0F:90:93:0C:71:1B:A3:D8:60:EA:4A:6D:F9:E7:0B:AD:06
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F43285847213B0E64E9BA930807FD5C80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     33442
IP address blocks:        157.235.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0e:64:e9:ba:93:08:07:fd:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=08450ec7-193c-4abd-b0bd-27c38bb74831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:d0:13:91:5e:b5:a0:ed:50:a7:e9:18:bd:
                    43:19:1d:a9:d7:f6:84:f9:d5:cf:9f:9c:94:18:2d:
                    59:64:25:37:19:f7:3d:55:8b:58:c8:c6:55:48:11:
                    d6:cd:b0:24:60:26:1d:36:4d:87:f6:ee:51:9f:d4:
                    f1:a6:cd:b4:cc:ba:07:09:ea:39:28:e9:fd:09:c9:
                    bf:91:70:ca:18:26:10:57:c9:76:61:86:36:71:a0:
                    b4:bc:7b:c5:f2:a6:81:02:c6:fb:3d:aa:00:58:4f:
                    b1:7f:e7:c2:2f:d0:45:ea:44:5f:5b:6b:fc:d7:d4:
                    78:2e:87:3f:53:15:8d:3d:f6:96:8c:27:4b:50:08:
                    fc:0d:0d:e9:9d:8b:b6:4e:f4:d2:6c:0a:58:1d:ee:
                    82:a4:a7:b4:8d:63:05:ef:5a:d4:c4:e1:c5:b8:10:
                    b6:9b:c6:ce:6a:34:89:df:f6:f1:1e:36:a1:f3:0f:
                    39:55:5f:fc:d7:d5:f1:ce:38:cb:1a:c7:42:4d:b7:
                    c0:14:8b:7c:e4:99:c9:21:43:79:24:e6:df:19:83:
                    f5:e4:74:25:5d:e5:33:80:54:0e:5e:d9:8d:bf:4c:
                    77:21:73:0c:76:01:10:f8:e2:cf:64:8a:22:c8:1a:
                    95:45:3b:70:43:ce:97:3b:cc:bd:73:6e:78:bc:1d:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:63:57:0F:90:93:0C:71:1B:A3:D8:60:EA:4A:6D:F9:E7:0B:AD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/e7d534ad-631d-36e0-a910-7fdf9bac8a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.235.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:50:f2:64:35:41:0b:91:59:6c:04:bf:10:ed:f0:0a:dd:
         be:45:4f:ae:1c:a4:b0:09:85:4d:bf:cb:7c:e2:09:8a:71:b2:
         73:2f:1f:47:22:76:27:39:80:fd:36:76:4d:db:8a:2e:10:e9:
         24:1a:bd:6b:28:bb:34:b2:b4:73:ad:9a:84:f7:2b:d9:5b:b4:
         27:d7:da:ed:c9:2b:ca:06:f8:2a:91:07:ff:50:fb:f4:81:38:
         e9:d4:2c:85:f9:76:6b:b5:87:a5:d6:f4:d9:2f:74:bd:d7:b9:
         d9:dd:e8:74:f5:d9:97:2e:67:74:a8:7c:43:89:34:43:c9:6e:
         22:37:59:5d:e4:56:48:f8:ed:e3:2d:65:52:5e:b3:1c:34:ed:
         e4:5f:b7:bf:e9:ae:df:1b:e3:cf:e8:b3:52:50:cc:b6:79:ad:
         bf:a7:a5:32:b7:8d:9e:f9:8e:81:d9:9d:7b:b2:68:c2:b4:fb:
         47:b4:db:ff:3f:24:47:dd:ee:b5:a8:40:26:6f:df:f8:ed:57:
         c2:3a:98:8d:42:a8:b3:d4:6b:f1:19:c5:85:3b:4a:6b:e5:44:
         fc:f2:dc:1f:7f:ce:fb:96:a9:bb:6c:0f:87:6d:3f:48:a1:4d:
         b1:36:ef:67:58:5a:cf:25:33:9c:c5:95:7d:3a:3d:9a:7c:78:
         56:91:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:17 2024 by rpki-client on console-fra.rpki-client.org