Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/fc00524e-0e9c-302c-9aaa-7a929dfaaaf1.roa
File:                     fc00524e-0e9c-302c-9aaa-7a929dfaaaf1.roa (raw, json)
Hash identifier:          a9JBalsld+LrCezUj117a1GIOfsdMRusTRckaTWNu/A=
Subject key identifier:   FD:74:9A:F6:1B:6B:6E:D6:94:A3:E1:9F:99:78:40:28:AD:E7:04:B7
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F432858473FF0A9D1150D2E89DF2E9640
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/fc00524e-0e9c-302c-9aaa-7a929dfaaaf1.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     14618
IP address blocks:        155.226.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a9:d1:15:0d:2e:89:df:2e:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=d80ae752-5512-4fff-bf59-f3f25d1175d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:c1:32:6c:a3:3a:4b:25:3a:05:1b:f8:69:
                    68:eb:41:5c:ba:9b:a9:03:fe:bc:38:78:08:3e:39:
                    72:b6:5b:ba:2e:ae:96:9f:39:9d:d1:1f:f9:15:98:
                    ba:92:ce:3c:f8:a3:a8:d2:3a:16:c7:b3:41:03:c2:
                    44:59:4b:72:9e:0a:55:ed:e2:e8:71:d7:27:99:7f:
                    f1:81:1f:b8:0e:e1:f2:2d:8b:c0:17:bd:0d:fa:76:
                    7e:f4:89:58:45:ef:1d:27:37:c6:66:99:67:b8:4c:
                    eb:23:be:51:41:5d:36:5c:9b:0e:2a:c0:a0:21:2f:
                    a8:f6:d9:1a:af:01:c0:d0:d5:4d:95:9f:55:da:91:
                    3b:78:12:0d:fc:68:71:3c:3e:b5:bb:8f:17:56:2d:
                    11:9f:b4:80:fe:b2:f9:c0:7b:20:c9:a2:ee:b2:91:
                    0e:10:3e:ca:d7:a6:d3:fc:04:24:81:d3:4c:29:a0:
                    ed:18:b3:c2:74:9d:01:69:62:59:8d:77:cc:ed:e5:
                    d6:c8:5f:8e:d2:f6:3b:02:ee:c6:47:d0:60:69:82:
                    a3:f8:2e:88:e7:0c:5e:44:af:1e:08:91:fc:98:d6:
                    36:bb:5e:4a:74:8c:a0:74:be:35:c5:8d:62:2c:42:
                    88:02:18:e5:b9:88:07:16:76:47:31:e6:a2:a8:57:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:74:9A:F6:1B:6B:6E:D6:94:A3:E1:9F:99:78:40:28:AD:E7:04:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/fc00524e-0e9c-302c-9aaa-7a929dfaaaf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.226.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:0e:26:e4:c5:b1:12:2f:7d:a5:68:75:db:2c:54:53:27:69:
         bb:eb:b9:7c:ee:a2:7a:18:3d:61:93:d4:ef:a2:70:0b:cd:12:
         c9:a4:7a:0d:fd:6c:dd:f3:bd:ab:7f:56:fe:11:6c:34:92:db:
         30:30:3a:55:3b:41:e5:e8:b0:23:25:01:a1:76:24:be:55:3e:
         32:2d:53:af:20:bd:49:6d:eb:e5:82:e7:b2:e7:b4:4d:6c:c5:
         4c:0b:a3:f7:d2:5c:f0:f5:7f:86:a2:d6:93:af:0c:29:69:44:
         00:92:64:5b:fb:72:fa:e9:1d:ba:7c:ae:50:07:3f:41:b4:af:
         82:37:0b:a5:2d:7c:67:77:be:da:05:21:00:6a:da:06:88:59:
         58:74:77:6c:a8:0c:cc:34:9d:b2:e3:3e:a1:bf:14:01:cf:d6:
         e2:60:f4:be:ab:c3:57:43:45:bf:73:58:9b:49:d1:e3:d1:97:
         07:00:b4:03:70:ae:b2:69:fa:00:40:33:6e:17:3c:9f:ec:6e:
         89:1b:18:bd:b9:f2:94:b7:0c:c1:c6:ec:ed:58:a1:37:41:a2:
         e4:b1:b8:2c:ef:7d:fa:24:13:a9:70:04:30:bb:08:13:94:b7:
         fa:93:31:b2:17:70:1d:74:6a:6e:2b:79:30:a1:20:47:4c:b0:
         77:47:b0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:36:11 2024 by rpki-client on console-fra.rpki-client.org