Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7186ba78-7616-300e-9874-c40c5454e841.roa
File:                     7186ba78-7616-300e-9874-c40c5454e841.roa (raw, json)
Hash identifier:          pGIlFvTDYGT5bONTPl3WeQEwym/xD0lq0kME2dcCZKI=
Subject key identifier:   95:3B:76:94:4F:B9:B3:DD:BF:CA:56:A8:E1:04:A6:DE:CF:C7:03:24
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285846758A097F09FFAA2B356A3380
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7186ba78-7616-300e-9874-c40c5454e841.roa
Signing time:             Sun 07 Jul 2024 13:00:33 +0000
ROA not before:           Sun 07 Jul 2024 13:00:33 +0000
ROA not after:            Sat 05 Oct 2024 13:00:33 +0000
asID:                     1239
IP address blocks:        63.161.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:75:8a:09:7f:09:ff:aa:2b:35:6a:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jul  7 13:00:33 2024 GMT
            Not After : Oct  5 13:00:33 2024 GMT
        Subject: CN=d462622c-76c9-4fb6-b7a5-0e51de144e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:ca:6c:5d:a2:72:b9:89:e7:e4:85:a3:6c:
                    c7:61:5a:5c:b7:41:19:51:35:41:0c:49:35:d9:48:
                    8d:01:75:fb:de:fb:51:00:b0:63:c5:e2:1b:72:9b:
                    31:17:fa:b0:f2:e2:7b:f9:6c:dc:f5:fa:17:ca:ba:
                    b3:86:a2:63:82:6f:a2:b2:8e:ea:1a:7d:9f:e2:ed:
                    94:fe:0d:58:6b:69:1d:c4:d2:3e:f2:c6:1d:c7:7e:
                    23:3f:08:ef:5c:21:83:cb:f5:9e:2b:39:f1:d7:e9:
                    5e:ec:2e:21:05:a6:4f:a8:64:d9:a5:63:48:92:fb:
                    53:3b:d5:58:e4:56:da:e7:f7:ab:45:ec:95:ad:59:
                    26:9e:fa:d8:83:20:45:c4:1c:d7:58:24:6b:e8:eb:
                    3a:3e:a1:79:0d:e2:e0:1f:26:21:1b:6b:72:03:59:
                    75:b0:0c:52:22:07:09:f3:75:dc:71:d4:85:bc:33:
                    93:5d:4b:8b:ff:71:ca:22:91:dd:f7:aa:68:bf:de:
                    bc:46:88:32:0e:b0:5c:94:49:e0:ff:60:06:a5:b3:
                    73:ac:34:87:1d:8f:a0:63:5b:25:9e:af:4d:05:a4:
                    0a:53:70:44:ec:07:b1:0b:07:0e:6c:b6:0b:ec:66:
                    d4:8e:43:a6:1f:ee:7a:eb:aa:bd:24:ad:02:fc:06:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3B:76:94:4F:B9:B3:DD:BF:CA:56:A8:E1:04:A6:DE:CF:C7:03:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7186ba78-7616-300e-9874-c40c5454e841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:23:e0:b6:16:bf:d0:45:83:34:ad:5a:90:21:d7:29:cf:ae:
         db:7f:cc:d0:1d:0c:a7:e9:8a:3e:42:6a:37:d6:2b:09:a0:8d:
         f3:3e:07:d7:62:20:02:e6:21:07:95:b7:93:76:9f:f3:46:5a:
         bf:1e:47:e8:2b:4f:b8:7d:b6:30:4d:f0:c6:4f:f7:21:f9:9a:
         29:6e:9b:a3:ca:39:c3:0b:d8:e5:20:f0:1c:b7:64:4c:8c:8e:
         73:89:be:25:af:17:5c:de:52:da:f8:74:a3:43:17:b0:73:c0:
         7a:25:fb:fc:83:d5:97:cd:e6:78:6a:61:ee:7e:8a:a3:0b:5c:
         ed:6f:2e:d0:2f:a5:aa:ed:19:44:37:2a:77:5b:9f:43:03:1c:
         32:4c:10:38:c9:61:0e:fa:a4:48:52:c7:dc:13:1a:8b:63:df:
         60:3f:30:82:b4:d8:97:ee:99:b8:84:48:cb:9a:b6:e1:38:07:
         d8:ba:ca:42:d4:2a:74:33:2f:69:e7:94:22:db:51:7a:3b:7e:
         82:16:60:46:cb:9a:57:d3:aa:a0:8a:a9:e6:53:b1:f8:fc:08:
         a5:7d:d3:cc:31:ca:4e:53:c9:89:5a:4b:ce:fd:04:98:65:62:
         4c:44:7d:7e:38:9e:01:0a:57:b9:0c:f9:50:ce:93:5c:9c:df:
         33:14:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 15:49:26 2024 by rpki-client on console-fra.rpki-client.org