Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
File:                     26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa (raw, json)
Hash identifier:          3v2V9Yj/CLaBkvMoZTfozv5kHv0o11kh9SfSqKtYU5E=
Subject key identifier:   AB:A4:E9:6A:2A:C9:AF:37:F7:C7:56:CF:AE:D4:BC:8C:E7:83:7E:44
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502FAC72B52C5478168538C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa
Signing time:             Mon 23 Sep 2024 20:40:40 +0000
ROA not before:           Mon 23 Sep 2024 20:40:40 +0000
ROA not after:            Sun 22 Dec 2024 21:40:40 +0000
asID:                     54113
IP address blocks:        131.125.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:ac:72:b5:2c:54:78:16:85:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:40:40 2024 GMT
            Not After : Dec 22 21:40:40 2024 GMT
        Subject: CN=e837160c-6714-49eb-93ef-1ee5ae4711dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:6c:b0:f4:e0:5b:91:16:05:e2:5b:00:6f:
                    4f:51:03:cc:c1:bc:01:00:91:e5:bb:41:c1:e4:07:
                    ee:3d:a2:22:b5:99:89:db:b2:80:61:09:a0:9e:38:
                    ec:37:53:dd:68:eb:22:fd:a0:d9:83:b4:03:1e:66:
                    ae:31:77:63:c1:81:24:9b:3a:3e:44:13:75:52:60:
                    ef:67:fb:ca:45:62:19:ec:aa:1b:6e:b9:97:70:5b:
                    fb:6d:7a:15:5d:4a:5c:ee:ad:b8:d3:7c:d9:0d:c8:
                    62:d2:f0:05:74:17:59:69:44:64:0b:fe:cd:f4:ab:
                    f1:3c:9a:70:24:d7:0d:a9:ff:2c:5c:75:80:e2:bf:
                    02:d2:13:27:cb:6d:77:55:44:01:8e:65:f0:b0:09:
                    d7:a3:6e:77:cd:52:78:82:8f:d1:84:af:1d:24:02:
                    26:c9:23:5e:8f:40:ed:c2:0c:41:b2:18:b7:f5:25:
                    f2:0f:68:36:66:ac:a4:73:de:fc:90:f8:87:2f:98:
                    87:03:76:9d:bb:d9:92:0f:e7:33:9d:b9:0c:47:6b:
                    37:0e:6c:92:fa:67:c1:be:b0:2b:47:1f:ad:29:d3:
                    46:e6:77:9c:58:c5:d9:25:8d:f5:7d:62:fb:93:3a:
                    73:81:47:89:97:a4:69:aa:b8:bd:20:5d:75:8f:b4:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A4:E9:6A:2A:C9:AF:37:F7:C7:56:CF:AE:D4:BC:8C:E7:83:7E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/26c72069-5bc3-367d-9f38-fb7a5b95c6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:ae:5a:3f:d5:8f:7f:ef:07:45:dd:f4:9e:77:79:6b:8d:
         11:30:77:3b:eb:4f:bd:ad:f5:d7:b8:65:e3:2f:f8:53:fe:73:
         84:2b:88:cf:db:5b:24:4a:b6:7e:3b:b6:6e:41:85:48:d1:77:
         27:93:77:02:2e:5d:34:41:67:ed:2f:c8:a1:be:0e:81:c7:0b:
         8b:c4:af:5e:21:ff:f3:b8:31:80:33:39:5c:20:07:20:d2:a5:
         af:2a:4e:2a:84:69:f2:32:6d:0f:26:35:6e:10:57:ad:71:20:
         27:cc:9b:8b:1d:8d:b5:bd:b6:98:a3:f4:b2:8a:36:a9:e9:85:
         de:0d:dd:5a:10:18:0a:3f:29:4c:a4:cc:ea:72:a4:2d:7d:79:
         80:7c:e9:58:00:0a:e4:da:19:0e:c1:67:7c:bd:57:f7:de:ac:
         c8:65:74:50:36:77:6c:c0:6d:0e:4b:c1:f7:35:55:7e:06:65:
         9e:b9:f3:09:c2:08:67:1b:14:52:ec:ea:03:c3:cf:4a:dc:ea:
         82:63:48:bc:09:0b:0e:7b:6a:49:26:b9:16:43:54:7e:8e:db:
         fe:11:ae:a2:e1:36:8f:f5:d6:95:c9:7b:7f:b5:73:c3:73:af:
         5f:56:01:77:0a:33:84:10:7c:7b:fa:d4:17:8d:63:49:cc:27:
         58:62:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:46 2024 by rpki-client on console-fra.rpki-client.org