Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa
File:                     e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa (raw, json)
Hash identifier:          CJ4f1PT1dCy4/IGycMSMXiEx6c1bMsYftVEE+KIMJuY=
Subject key identifier:   60:82:3E:74:FC:81:0F:7A:D9:80:B5:F8:63:23:A8:50:E8:AA:4F:C0
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584726D08573B472583A9CB49600
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     14340
IP address blocks:        13.109.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:85:73:b4:72:58:3a:9c:b4:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=8b3bbe2e-82be-4614-a46f-90cc2fda0bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:a6:34:9a:ab:07:c0:90:78:71:36:a0:f2:
                    02:8b:ab:5f:64:d8:ad:b1:89:28:15:63:d6:cb:6e:
                    dd:49:32:70:14:5b:ae:b4:8f:28:05:8d:b4:67:df:
                    15:86:5b:ff:24:68:f1:3a:d3:64:d2:23:cf:0a:17:
                    da:38:f0:f0:dc:9f:7c:56:87:bc:85:46:0b:a0:3f:
                    62:1b:9b:66:d5:6e:38:4f:b2:24:41:f3:fa:f0:bc:
                    9e:42:fd:cb:c1:b2:d5:f4:43:75:8f:db:80:53:24:
                    f5:28:10:01:21:ff:7e:5f:5d:f3:54:fd:8a:5a:30:
                    74:f6:3e:44:d1:1e:78:fd:01:31:bc:8a:88:ef:27:
                    01:74:20:ef:f4:3f:05:73:3a:3a:b7:fd:73:e8:d2:
                    f6:c7:3e:c7:f6:40:88:35:8d:a9:5b:fb:9f:a6:23:
                    5e:e6:75:1c:30:0d:39:44:64:cd:36:a1:c6:5f:88:
                    45:e5:13:ca:0f:00:65:10:2b:33:49:32:bc:7c:bf:
                    d2:0b:28:97:9e:18:42:9b:ed:ed:6e:4f:0e:57:95:
                    fd:75:0c:9a:05:f5:5e:7c:b7:21:82:19:9c:e3:45:
                    ea:93:a5:a6:bc:1c:9e:de:9f:d8:26:43:22:4b:1b:
                    89:47:bb:0f:0a:06:e6:ea:9c:d9:67:b2:27:2f:45:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:3E:74:FC:81:0F:7A:D9:80:B5:F8:63:23:A8:50:E8:AA:4F:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e10beb9f-dd1d-33a5-b2ab-4440c6699254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.109.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e3:33:85:42:ac:24:c0:ea:78:a4:33:f5:82:30:e9:0a:c4:
         4c:28:cf:f4:c7:54:16:fc:75:3a:a4:35:04:2c:7b:7e:b2:c6:
         44:a6:2d:20:ee:98:cc:7a:bc:97:df:24:3a:cb:ed:cc:c2:62:
         2b:91:ba:34:87:77:8c:c9:57:90:23:e3:1f:85:0f:e4:8d:fd:
         f4:82:6f:01:d4:29:80:1f:e9:7c:de:aa:32:8c:a0:e1:77:8b:
         ab:1c:bc:59:a5:80:53:da:b4:f3:bb:e3:66:48:89:b4:3e:af:
         54:9d:1c:eb:67:ae:f8:42:34:71:6a:22:9f:fc:89:b1:42:9e:
         6b:c5:bd:99:90:59:49:82:9e:fd:00:bf:36:b2:fd:c9:2c:08:
         a4:4b:a0:d1:fa:9b:74:e0:12:0a:dd:09:cf:57:b1:14:a8:be:
         91:db:7b:71:9a:07:79:11:44:e8:69:8f:49:50:32:f5:78:a4:
         64:7e:8b:8a:3b:53:3e:0b:8a:79:23:32:51:f8:e2:6b:2f:d6:
         2d:2b:e3:8a:4d:47:0e:be:08:c8:0e:0a:16:dc:6b:b4:ab:27:
         3e:11:ca:26:fa:0c:4e:4c:ae:c0:9c:b4:03:b1:a8:78:e1:af:
         e1:95:f2:e9:1f:7d:9f:63:6a:87:59:92:e4:72:03:48:58:d9:
         71:c6:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:11 2024 by rpki-client on console-fra.rpki-client.org