Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa
File:                     de79c89f-87a4-34a1-a272-c3b158ebe10c.roa (raw, json)
Hash identifier:          fwuD9nVL5Orc6PE7lPEffKXw8wvAxrWNHw8RKR1cw9w=
Subject key identifier:   A2:0B:34:57:2D:CC:10:7F:4F:6D:CE:42:A3:F2:52:63:37:20:6B:44
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858475EA62ECDB1D64AA5B857EA80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     20940
IP address blocks:        165.254.119.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2e:cd:b1:d6:4a:a5:b8:57:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=d21043f0-5b2c-424b-8eb7-5b0cff71a3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:b0:f5:41:91:c9:6e:3e:87:75:e5:ac:02:
                    63:ed:b4:7b:24:09:af:07:ac:99:08:54:80:d3:11:
                    29:8a:30:ce:ea:22:84:b7:dd:cf:6b:e9:c8:6b:8e:
                    3d:01:14:7d:8f:83:cc:31:c6:b7:4e:ba:61:3e:f9:
                    6b:ac:72:86:e3:c4:c2:23:e6:82:5d:aa:c2:ec:3c:
                    1b:dd:6a:bf:bb:27:03:b9:d7:c1:6f:86:c9:42:22:
                    cf:f0:5f:be:aa:d3:2b:e3:18:74:68:5e:8c:b4:16:
                    31:93:58:29:93:5f:1c:5f:69:d6:e2:92:80:e1:61:
                    42:64:bc:62:b6:41:94:4a:77:0c:41:fa:9e:ed:f6:
                    8b:e6:65:b6:ce:5f:27:b2:3c:35:52:93:5e:d0:89:
                    7c:3a:ad:f7:5e:ac:4d:dc:fa:e9:06:80:50:f4:0e:
                    19:36:e2:92:e6:b0:0e:9e:b4:c6:62:8b:dd:4a:29:
                    9e:cd:5d:01:a6:66:18:22:59:7e:06:3a:75:95:06:
                    95:52:78:a5:41:70:a1:14:a8:34:9c:14:1d:24:1e:
                    87:19:84:b1:29:0b:76:db:19:15:1f:28:12:85:1a:
                    35:bd:b8:76:62:ff:91:02:ff:9e:fd:1d:c6:df:f8:
                    ed:2c:cb:ba:51:a0:a9:55:31:20:fb:8b:6e:33:f0:
                    6e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0B:34:57:2D:CC:10:7F:4F:6D:CE:42:A3:F2:52:63:37:20:6B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/de79c89f-87a4-34a1-a272-c3b158ebe10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.119.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:20:2c:ac:4f:3b:ef:63:de:aa:b7:60:ae:c1:95:f9:e7:33:
         c7:b8:70:99:89:c2:ed:ea:34:66:49:51:61:56:4d:41:c9:e3:
         9a:54:38:78:77:da:1f:4b:4e:8e:fd:0c:3f:87:e2:72:19:d3:
         f6:6e:6c:f6:d3:0d:f3:ab:15:ef:04:ce:98:db:68:b1:5c:c7:
         67:73:39:cf:57:04:66:c4:32:8c:57:c2:0f:cd:d5:98:8a:2f:
         91:a4:46:38:9a:09:bd:3f:df:4a:e8:10:eb:d7:0e:ee:12:b6:
         f0:f3:0d:ee:22:43:26:f0:d9:13:f3:b1:e3:30:68:43:81:63:
         9a:2d:61:a6:e4:06:ee:3a:67:54:62:c9:cc:89:b5:cd:75:f8:
         0a:db:fc:31:18:fb:78:1e:42:de:83:a0:0e:81:ca:f4:7b:9a:
         f0:b3:1c:98:0e:86:94:9b:07:28:1f:18:3b:c8:68:b2:12:4e:
         fc:34:8e:be:4c:ac:55:c9:42:f0:9e:9f:3d:0b:53:b8:71:23:
         e9:69:9f:c2:f5:4e:ec:b4:a9:4e:96:fa:71:e5:22:f2:7d:08:
         4c:85:fa:a1:e2:2e:6b:14:4d:a8:51:f3:eb:45:be:b4:3c:ed:
         87:cf:df:5d:91:9b:70:bc:44:7e:17:29:aa:b8:ff:39:40:d4:
         09:29:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:08 2024 by rpki-client on console-fra.rpki-client.org