Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0bd0201c-97b1-3e9f-8e95-a1a0eec11f5a.roa
File:                     0bd0201c-97b1-3e9f-8e95-a1a0eec11f5a.roa (raw, json)
Hash identifier:          sJmWqsJswS62J8vpAPRkFi4G5FQr8RqPWk8TSB3IEf8=
Subject key identifier:   CE:2B:76:B5:B7:45:8F:20:B3:73:80:6E:CD:6B:E1:EF:B9:A3:98:4D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502F8DBB8702591080F8C6C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0bd0201c-97b1-3e9f-8e95-a1a0eec11f5a.roa
Signing time:             Mon 23 Sep 2024 20:40:26 +0000
ROA not before:           Mon 23 Sep 2024 20:40:26 +0000
ROA not after:            Sun 22 Dec 2024 21:40:26 +0000
asID:                     54113
IP address blocks:        131.125.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:8d:bb:87:02:59:10:80:f8:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:40:26 2024 GMT
            Not After : Dec 22 21:40:26 2024 GMT
        Subject: CN=b0efeb4f-f464-406d-b65c-4f8a5f2597db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:ad:2a:0c:24:c9:69:a2:9d:1d:2f:f5:7c:
                    3a:9e:15:a1:0e:62:56:51:90:4f:66:50:73:82:22:
                    a3:8e:d9:a7:c7:03:5a:f1:f0:dc:73:73:d9:43:b0:
                    56:2c:d0:e0:a9:a7:c0:27:3f:30:7c:46:d4:c0:b0:
                    ac:56:70:43:47:e9:77:74:c0:4e:b3:7c:8e:6b:3b:
                    85:cc:fb:7f:81:51:74:27:a9:0f:54:db:46:4f:22:
                    1d:de:75:c1:4f:3d:75:09:d7:5e:98:68:0a:99:07:
                    ca:41:26:9a:f3:5d:e9:55:2c:d6:5b:24:15:dc:6d:
                    33:ab:a3:2a:6d:15:03:13:2b:eb:ba:12:86:ec:0d:
                    5c:b1:65:24:aa:58:c9:ef:a2:eb:07:20:3c:dc:25:
                    85:d6:f8:7b:d8:09:01:49:b3:d3:7e:5e:b5:59:03:
                    49:e6:25:93:bb:4d:8b:ce:e2:d3:63:17:81:42:48:
                    56:a3:ab:03:49:46:ce:de:f4:88:e2:0b:9f:d1:e7:
                    ae:2a:aa:1f:8d:9d:e9:01:e8:98:9d:30:1a:8f:c1:
                    aa:5b:1c:d3:f7:08:96:45:8a:f7:c4:20:eb:d2:9a:
                    2a:e5:66:07:94:d4:19:07:29:1f:05:95:7e:f6:3e:
                    36:c7:37:4c:bf:ae:b7:e5:80:02:24:89:95:51:f4:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:76:B5:B7:45:8F:20:B3:73:80:6E:CD:6B:E1:EF:B9:A3:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0bd0201c-97b1-3e9f-8e95-a1a0eec11f5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:28:85:be:43:8c:dd:e4:c7:ab:2c:94:fe:9d:ed:0b:17:ea:
         1c:50:7c:03:92:a2:18:ca:fe:e7:90:a9:70:17:8d:43:71:9e:
         29:fe:90:91:cc:dd:95:58:2d:7c:31:d7:35:da:b8:0c:c7:06:
         8e:49:d5:b0:90:a1:90:ec:d0:cb:df:b3:58:7a:52:8f:c6:0b:
         4a:cb:22:44:ed:cf:b3:e5:42:07:55:29:8a:8e:ac:00:ce:1d:
         bc:21:20:b1:ba:8b:e8:18:ed:e9:5a:d2:0c:09:48:4f:31:da:
         6e:53:d0:9b:77:5e:46:c5:97:a9:a8:05:74:af:90:7f:04:dd:
         9a:16:55:34:25:99:78:1e:a3:a5:18:bc:6e:68:77:d5:57:62:
         37:41:60:a9:01:04:2e:a2:ae:12:f7:62:3f:a7:f3:63:b3:87:
         1d:d0:e0:cb:0e:1b:df:98:d5:a9:09:e7:9e:10:77:a0:e0:17:
         a5:55:de:1b:cf:df:0c:7f:a5:cb:07:9f:13:3d:76:51:66:a3:
         33:c1:7d:2a:1a:98:d2:f3:9f:35:ef:67:69:0c:4f:78:a7:40:
         5b:b1:e1:9a:08:13:ac:17:93:ef:45:aa:83:00:e8:2c:e4:24:
         8c:91:1d:de:42:d8:49:0b:2a:3d:e8:a9:de:15:a1:33:87:07:
         57:e3:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:45 2024 by rpki-client on console-fra.rpki-client.org