Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
File:                     35e18274-54dc-3145-922d-ae98be85a0d4.roa (raw, json)
Hash identifier:          vDElGo48yEsj7TDQ8EOmgtGAh+0fmRIa7fdN65H1FVk=
Subject key identifier:   C7:A4:4C:F2:77:61:39:A7:5C:16:5F:66:00:AD:BB:96:83:0F:7E:41
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858474F4B733139A80FE9EC6D1B80
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     22793
IP address blocks:        148.76.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:73:31:39:a8:0f:e9:ec:6d:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=8a8d3b41-82d0-40da-876b-1b7cdad1f290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:48:9f:07:48:ab:93:8b:fa:05:f9:d1:12:e6:
                    d3:de:c1:b6:94:a1:13:62:94:40:a1:0a:38:9c:4e:
                    0e:00:16:8b:fe:18:a1:0c:5a:5f:00:ec:03:66:c9:
                    1c:4b:c8:db:56:61:45:29:7a:d9:c9:4b:67:ea:e1:
                    e7:c7:c9:e7:b5:8b:8c:83:41:01:b3:46:65:7c:07:
                    de:21:6d:4b:de:e7:7a:1f:3b:81:b7:46:89:24:8d:
                    9b:d3:f2:f2:b8:e3:50:b6:6a:ec:ed:80:07:a5:0b:
                    82:2d:84:c1:0f:79:a2:d8:64:06:ff:a6:87:f9:ae:
                    33:75:59:fa:09:fb:e3:43:ab:a0:ba:cf:2a:d3:1e:
                    e8:fb:ed:44:5b:a3:93:a6:24:59:52:5c:55:7f:2e:
                    f4:0b:9c:c1:66:6f:95:b1:72:e1:ee:aa:c3:72:a4:
                    9e:b2:43:f3:07:bd:17:d6:e3:d1:db:9f:88:a6:93:
                    9e:31:a7:8d:d2:fb:55:43:26:50:d4:43:ce:10:bc:
                    fe:59:92:50:f0:93:46:c9:7b:6b:53:3a:d8:01:b6:
                    48:0f:af:06:8c:7c:dd:a4:af:aa:7b:3f:b4:a0:2a:
                    a5:f2:5f:87:c1:11:dd:8b:aa:87:23:7c:bf:bb:c9:
                    25:2c:7a:75:27:34:75:c2:4f:c4:b1:88:8d:b8:fc:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:4C:F2:77:61:39:A7:5C:16:5F:66:00:AD:BB:96:83:0F:7E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/35e18274-54dc-3145-922d-ae98be85a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:70:82:30:7c:3a:c0:1a:6d:06:31:7d:ab:af:86:a6:3c:f7:
         cc:ac:b1:66:2a:c5:e7:6e:f0:70:96:3d:78:47:0c:7b:6a:29:
         0c:50:ad:5f:57:ab:fd:6f:f3:4c:5a:9d:46:fe:4e:e5:92:ba:
         0d:17:78:87:ba:14:76:47:4f:35:20:fc:06:2e:a1:8f:fc:b4:
         90:58:5a:5c:81:73:58:bc:fe:75:5b:98:4b:db:0f:cb:4c:d4:
         7d:c0:fb:99:e3:1e:e8:be:9f:9d:6a:df:f6:3b:d1:1a:ed:de:
         d0:49:68:3c:30:fa:63:3c:b1:94:66:d5:4b:ea:3d:2b:e6:97:
         a6:cf:6f:84:95:a9:bc:b1:46:a7:96:8c:b1:9a:0b:ad:1f:42:
         41:45:8f:0a:54:5c:5e:41:de:c1:65:d2:02:2e:3d:b5:18:e4:
         79:a6:ac:47:4b:35:5a:1e:99:b9:c4:e2:dd:f7:ae:59:4e:22:
         1c:7a:4a:86:81:dd:22:b3:8a:c5:3a:a2:53:1e:54:55:64:be:
         66:1d:1e:f6:7f:41:3d:a0:91:80:0a:a0:c1:83:c7:af:c8:5a:
         7b:d3:ab:65:8e:59:80:cf:f8:3f:f9:2c:6d:0d:8f:73:0a:50:
         ac:f6:cd:33:5d:eb:a9:f4:b6:a3:e5:c6:2b:4d:12:18:3b:70:
         94:26:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:49 2024 by rpki-client on console-fra.rpki-client.org