Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa
File:                     2479096b-5c85-35f4-8ada-f5674035fc6e.roa (raw, json)
Hash identifier:          yVETMOaaPrnRi1l6pATwHQDHz+OWy1e3e0er+ibcDPA=
Subject key identifier:   31:D2:9C:BA:C2:ED:CA:80:0E:BB:63:CF:29:A0:3C:8E:3C:44:C2:17
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502F29382481F92126898828
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa
Signing time:             Mon 23 Sep 2024 20:39:38 +0000
ROA not before:           Mon 23 Sep 2024 20:39:38 +0000
ROA not after:            Sun 22 Dec 2024 21:39:38 +0000
asID:                     54113
IP address blocks:        131.125.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:29:38:24:81:f9:21:26:89:88:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:39:38 2024 GMT
            Not After : Dec 22 21:39:38 2024 GMT
        Subject: CN=c50a7e85-366c-4906-9e3b-633da5095599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:28:57:d6:e7:d8:ed:b4:00:31:cb:64:1c:
                    3b:75:7d:a2:e5:91:bc:d1:32:b9:5c:8a:d5:32:17:
                    3f:94:c8:97:e3:9d:43:51:9c:d6:b8:21:99:0e:2b:
                    a6:c5:1b:66:ca:d3:ad:6c:0e:85:99:41:7c:be:e3:
                    19:d4:a7:98:26:9e:13:4b:06:1b:1c:03:a2:00:2e:
                    27:22:5b:c2:dd:ae:de:ba:5d:f7:15:6e:be:10:90:
                    30:14:43:33:e7:d6:9c:55:a6:b2:23:6e:64:47:1b:
                    49:34:59:9f:31:50:4d:21:49:80:b9:f1:fd:a1:6b:
                    83:6a:ed:ae:ec:56:9e:4f:fc:92:71:2f:b3:ea:5c:
                    e8:0c:72:d9:45:21:fa:23:89:de:f6:68:e5:56:33:
                    b4:b9:35:2b:17:a5:eb:ad:1e:35:86:3f:a1:4a:7d:
                    0a:07:9d:e2:44:a1:bf:6e:34:46:7b:02:2f:18:53:
                    45:f2:ff:5d:55:cc:6f:33:57:cf:15:5a:f6:4e:2f:
                    f0:dc:29:7e:c3:0f:7e:ed:b2:60:dc:0b:ee:36:d1:
                    0d:a8:1e:da:91:52:91:6e:61:ee:e0:34:1f:23:d2:
                    84:3a:ca:ed:b7:d7:10:9d:b4:4c:65:92:87:04:3f:
                    3e:02:a8:02:70:62:47:6d:20:ad:12:3d:93:99:33:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:9C:BA:C2:ED:CA:80:0E:BB:63:CF:29:A0:3C:8E:3C:44:C2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:46:8d:80:85:a2:1e:3a:aa:f8:6d:ad:fd:f6:17:76:04:
         4b:e4:4b:50:70:70:82:ec:29:58:8a:58:c7:86:1e:7d:38:6f:
         fa:2b:09:53:29:7c:6a:d8:d7:3d:8d:03:7b:60:ab:fa:4e:8a:
         1d:45:3f:59:ef:a2:c9:9d:a6:3e:25:ce:af:8c:51:a7:61:59:
         dd:fa:ed:9e:33:a0:94:a6:e6:78:b2:43:8b:ef:83:ed:07:48:
         b8:45:ab:f8:f4:be:76:18:1a:f3:d8:03:d4:48:df:f6:fb:74:
         25:d2:1a:7c:4d:e7:8b:05:a2:13:79:1f:25:b5:f0:7d:04:3a:
         16:3e:79:f9:28:d8:0c:c1:69:0c:a8:c7:30:52:98:6f:05:8d:
         64:89:83:b7:5c:d9:d4:32:d3:97:96:df:55:73:19:81:97:1d:
         a0:15:93:45:e0:63:d3:54:2b:2b:47:ae:a7:b4:45:3a:f6:66:
         57:b5:02:3b:9d:9a:89:7a:f3:45:fd:39:6d:fb:06:cb:4d:b3:
         bb:ad:11:ea:55:8d:75:50:50:76:93:25:1e:8c:76:01:c9:15:
         36:26:2d:0c:d7:24:a1:de:2e:66:d0:78:f6:e3:f5:bf:61:23:
         06:59:19:14:fb:42:8a:9d:ab:24:d5:6d:90:6c:9b:ce:47:ac:
         e0:6d:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:11 2024 by rpki-client on console-ams.rpki-client.org