Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa
File:                     de36c969-26a6-3a23-8675-3c257b34ddbc.roa (raw, json)
Hash identifier:          znJsPzx0qJl2k2aLFuIuqGEsbOBYQL0Pll6PlY4rsvA=
Subject key identifier:   E7:00:EC:58:13:88:15:43:55:51:3E:F3:DF:04:E8:70:B5:0B:6D:15
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F432858424E609490A644B1317AE3D4A0
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa
Signing time:             Wed 21 Jun 2023 12:00:00 +0000
ROA not before:           Wed 21 Jun 2023 12:00:00 +0000
ROA not after:            Sat 09 Aug 2025 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.20.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:60:94:90:a6:44:b1:31:7a:e3:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jun 21 12:00:00 2023 GMT
            Not After : Aug  9 04:00:00 2025 GMT
        Subject: CN=94a9adfc-1b8f-4145-8287-2320b7211c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3c:8f:83:f4:1d:0b:9c:5a:fd:63:6a:4a:73:
                    56:8d:98:b3:ea:a4:cc:34:aa:5f:aa:c7:9f:ae:5c:
                    5e:04:67:e9:69:fe:b0:5e:c6:43:34:7b:83:59:ce:
                    c5:7e:77:81:43:c1:7d:cf:31:9f:8b:77:f6:a5:28:
                    57:5c:a6:14:00:e3:f2:c0:6f:cf:b0:0c:dd:67:a7:
                    1d:a9:c2:6c:c9:cd:50:ed:a5:3b:f1:e4:49:34:ab:
                    b5:69:36:bf:49:e4:bd:48:37:a8:2b:3c:81:1f:c2:
                    ba:41:a6:d5:44:95:66:8d:b7:06:25:66:20:c2:a8:
                    f4:30:fd:37:f1:4e:04:00:51:d3:fa:92:05:1a:e9:
                    41:aa:95:ec:dd:3e:97:62:68:48:e7:e6:c7:37:e5:
                    e6:fa:68:49:7d:98:c9:36:eb:07:05:21:69:93:67:
                    42:50:72:fd:9c:5e:6e:65:2e:1b:11:80:67:82:93:
                    70:90:73:b6:fa:13:0f:d5:a9:71:4f:73:df:b4:e8:
                    5f:c2:2a:50:75:84:04:64:bf:d8:77:42:af:d8:1f:
                    1d:17:68:f8:cd:f5:10:55:7f:1c:c1:12:6e:7b:87:
                    71:4b:fa:3b:56:67:db:ba:35:95:f8:fe:6e:44:e0:
                    3f:3a:6b:24:57:60:bc:e2:6b:1b:e8:03:5f:2a:b4:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:00:EC:58:13:88:15:43:55:51:3E:F3:DF:04:E8:70:B5:0B:6D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/de36c969-26a6-3a23-8675-3c257b34ddbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:d6:1e:80:52:4a:39:33:0b:e6:8c:1b:cc:e6:49:2a:35:
         78:64:10:de:cd:55:83:28:0b:8a:9c:73:19:10:f9:af:cd:26:
         a1:8f:2a:f2:d4:ce:59:61:9f:28:cb:a9:fb:fc:75:bd:13:c0:
         b5:d5:9d:40:c9:3d:be:d5:ce:64:60:de:d2:3b:85:1b:ea:b8:
         1f:97:88:7f:fd:2e:b7:9c:14:c3:0f:9d:da:4c:6c:33:7c:de:
         2d:59:dc:99:8c:d2:d2:5e:7b:11:1b:02:06:db:d2:0e:59:f9:
         06:df:2b:7d:04:63:e7:67:bc:a6:31:7e:03:a7:dc:47:76:e3:
         ec:68:62:6a:81:e5:7e:65:3e:2c:71:a3:b5:92:96:0b:aa:49:
         0b:64:58:4b:b9:d8:6e:a3:9b:75:9e:a5:be:52:4a:2d:ab:6e:
         68:a7:0f:0e:20:d2:c5:5d:0d:cf:ce:9e:ca:64:ca:23:4a:4c:
         33:60:4c:1c:f9:5f:b4:f9:dd:da:3b:4e:0d:b4:d5:27:c9:8b:
         8a:4b:05:ef:33:df:25:ba:16:05:e6:b5:74:9a:ba:c9:67:d6:
         11:ac:87:52:76:c4:7c:bc:76:90:d2:3b:14:c6:f0:2f:a6:4d:
         67:d3:40:7f:3a:b2:73:0d:49:ba:7d:21:13:28:75:00:9e:9b:
         30:d4:d0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:04:28 2024 by rpki-client on console-ams.rpki-client.org