Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
File:                     ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa (raw, json)
Hash identifier:          Do/a56Sj5UW97fsHwPQl/EMWSwJ2Y6gF6clu886sj50=
Subject key identifier:   65:47:F9:E5:FE:E5:D2:28:11:10:57:81:8E:92:DC:55:AE:A2:8B:98
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584765A0EA2CC1242F7780A35F00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14061
IP address blocks:        157.245.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ea:2c:c1:24:2f:77:80:a3:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=165a6ca7-5851-453a-8936-0358f57ce00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:5f:a7:5e:65:a3:ad:be:50:5b:6d:cf:bc:
                    97:6e:38:dd:2a:12:e3:b0:0e:6e:82:5f:ff:94:3f:
                    ba:39:a5:66:48:9f:4b:7a:29:b7:ad:fb:32:58:e0:
                    a4:7c:27:ce:d4:a3:e0:36:ff:30:93:25:e2:0e:e5:
                    19:eb:9b:58:05:30:ed:13:33:9c:ff:61:aa:45:f2:
                    b2:0b:ad:27:cf:fb:f5:6c:4d:b3:46:33:a6:f2:14:
                    0f:aa:ce:b9:64:19:1d:45:0d:8b:46:ed:a5:28:37:
                    de:f5:ee:4a:99:01:bd:5b:03:c7:43:c5:0a:e9:a2:
                    cc:25:44:66:0e:dc:a0:0d:a9:6b:c7:34:09:e9:a8:
                    65:f5:47:3e:5c:f7:48:34:34:c5:bc:f4:f1:6a:ab:
                    34:ef:cd:20:29:93:26:c9:41:56:e1:78:9a:7c:f6:
                    0e:0d:13:f3:1b:bc:69:17:ec:19:3c:98:07:30:c9:
                    01:5c:31:2c:aa:8d:e0:40:39:74:71:42:04:4c:ee:
                    5c:8a:4b:bc:52:34:24:bb:c3:05:a1:ef:59:79:19:
                    5b:d7:46:c8:c0:d9:7e:be:00:50:17:5f:4a:86:9d:
                    8b:25:fc:51:a4:3c:cf:26:e5:5c:2e:c2:d6:a3:6b:
                    df:46:22:54:5b:5b:24:bb:d0:ec:7f:a1:b4:6d:bf:
                    d3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:47:F9:E5:FE:E5:D2:28:11:10:57:81:8E:92:DC:55:AE:A2:8B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ea0d9e27-ca72-3c32-aa06-fd6a11460215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.245.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:07:92:4b:44:c1:55:04:82:05:c8:4b:67:e8:cd:47:65:
         9b:df:34:98:52:6b:b6:c6:ed:d3:c7:62:9d:b1:53:f1:d9:99:
         f4:a8:e6:a2:7e:1c:89:f7:ac:94:56:a7:59:09:f8:3a:b1:71:
         48:11:be:21:8b:7e:c1:ba:2e:61:33:83:03:cf:bd:ae:70:cd:
         81:a4:32:a6:5e:de:c9:66:0c:c2:a8:f6:28:80:7b:0a:0f:68:
         3f:44:4b:89:3e:e9:18:4e:7e:0d:9d:95:83:05:f2:b3:7f:7e:
         9b:0f:13:59:ba:e2:f7:fc:f4:98:82:71:aa:92:cc:7d:e5:ac:
         80:02:3b:ec:f9:3e:c0:cc:83:38:8d:92:02:b8:d2:7d:e4:e9:
         82:22:64:9f:1a:d8:e9:80:01:19:64:05:2d:72:55:a7:ae:8a:
         1b:b7:10:94:72:44:c5:83:b9:be:17:c1:0d:83:0e:07:72:0b:
         ae:9d:44:36:8b:62:cc:46:20:40:65:04:e5:33:17:43:ae:71:
         f8:82:f6:22:5d:2c:63:6a:e8:b2:b2:f5:e1:d1:2c:99:af:c6:
         b3:a0:28:3b:c4:93:fb:56:ac:d7:9f:c6:68:dd:25:92:02:74:
         04:9f:f9:73:b0:cb:0e:13:c5:35:02:dc:53:40:fc:6c:2a:ac:
         f9:75:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:59 2024 by rpki-client on console-fra.rpki-client.org