Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
File:                     9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa (raw, json)
Hash identifier:          h/xlJ/x9KTogbRoqu7a38FJSuNkthq/jC655LhKzrcA=
Subject key identifier:   FE:68:75:90:EC:AD:85:CB:0C:F6:4E:C8:13:8D:F5:15:C2:4C:ED:3C
Certificate issuer:       /CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
Certificate serial:       010D0C9F43285847924BDD1FEE54F44A51C7EF00
Authority key identifier: DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     26914
IP address blocks:        166.93.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:dd:1f:ee:54:f4:4a:51:c7:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7053ab-0736-43bb-bdfc-0169ae90b80d
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=c26cb93b-04bb-4912-b193-3490a0f202be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:4d:85:fe:58:a7:75:fc:18:e0:0c:3a:5a:
                    71:10:b1:67:66:9c:cf:9e:43:8b:c7:e3:88:3a:7d:
                    70:5b:c0:84:87:a4:a1:7c:c6:43:e1:af:8d:76:47:
                    0a:82:a7:66:63:a6:d9:07:05:b1:f0:98:55:3e:80:
                    9f:f3:39:3d:96:63:74:6b:52:11:7c:bf:b1:05:cc:
                    aa:92:20:9b:cc:8b:57:31:f5:c8:20:54:f3:8b:e7:
                    0b:2d:36:0d:f9:bd:b9:53:c3:ae:e3:ec:68:c3:fc:
                    3e:8c:59:37:f7:78:4b:88:e0:a4:22:23:89:5b:97:
                    55:99:11:85:b8:1c:a9:1e:ba:e8:b1:73:59:62:cf:
                    17:9c:d3:e1:b9:15:61:38:77:ae:1f:8c:93:b8:e3:
                    f2:af:ec:41:fd:c1:cf:98:18:4f:6a:33:c4:7c:16:
                    35:28:0d:2b:cf:69:9f:02:97:ee:3c:71:2e:bf:5a:
                    04:90:45:94:70:95:54:5d:e8:52:61:55:2a:84:63:
                    ef:5b:fa:70:d3:d6:a9:67:61:3f:dd:e0:cf:c7:dd:
                    ae:6f:00:45:8d:45:bb:70:fd:68:12:8d:3c:a9:82:
                    ce:65:69:44:5c:4a:e2:61:56:2c:4f:ca:35:57:6e:
                    ad:33:1b:e7:2e:6b:2f:9a:0e:97:4a:85:80:ef:b2:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:68:75:90:EC:AD:85:CB:0C:F6:4E:C8:13:8D:F5:15:C2:4C:ED:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/9f31b181-b0fd-348a-be60-f42ecd0d2be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d/ec7053ab-0736-43bb-bdfc-0169ae90b80d.crl

            X509v3 Authority Key Identifier:
                keyid:DE:97:2E:6E:DF:CF:BD:C8:6B:0B:7C:4E:AB:3A:52:1B:65:EE:95:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ec7053ab-0736-43bb-bdfc-0169ae90b80d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.93.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:56:c0:77:f5:80:d2:91:da:7b:49:d4:51:dc:4a:5a:75:b8:
         3e:c1:80:a7:d2:f3:31:29:3c:cf:7c:2c:4f:97:56:ae:0d:f3:
         3e:9c:5c:57:74:29:dd:d0:12:7b:16:3c:ac:98:2e:a9:25:71:
         e7:72:6c:27:39:0b:b7:67:2b:1e:00:a7:38:b1:75:27:a4:86:
         7c:c2:e8:6a:7a:df:ce:27:b5:92:c2:e6:49:2e:bd:65:ed:e2:
         9a:7a:be:79:7c:94:82:44:7f:29:94:5e:51:0f:63:11:c6:4a:
         73:d4:16:a2:7b:21:46:d9:aa:90:0a:76:24:71:cd:e0:05:ea:
         a6:b1:00:52:61:26:2c:ff:3b:3c:55:11:fb:39:ee:be:88:0a:
         8c:57:df:09:07:5e:8f:7e:15:d0:ae:95:0b:4b:52:3f:ff:17:
         3a:90:11:c1:e0:b2:3c:a6:49:8e:d3:95:f8:6c:e2:04:41:18:
         da:33:62:0b:50:7f:2c:97:04:1e:b7:07:ab:79:b3:8b:a8:04:
         94:2c:07:25:0e:7c:f8:3c:1c:44:cb:40:9a:b1:76:74:b5:cf:
         25:56:e5:49:c2:1b:0e:a3:e9:30:ca:dc:fa:46:db:51:a4:a0:
         b8:bf:02:0a:57:b9:56:dd:1f:2e:f7:d5:a1:de:79:7e:dc:f6:
         3f:a1:0d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:46 2024 by rpki-client on console-fra.rpki-client.org