Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa
File:                     322c7c8c-acec-33d7-9ea3-07e354992704.roa (raw, json)
Hash identifier:          ST9Xk9OWDcjAHvkUBdBoGxk0Zr/TYGRV0EpLQ2PtMlU=
Subject key identifier:   8B:70:33:01:F3:29:AF:EE:34:51:AE:D2:62:1C:4F:C0:73:C0:C2:3B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847E094E548960BB2CB0F279580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     54113
IP address blocks:        157.5.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:e5:48:96:0b:b2:cb:0f:27:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=2c74a358-93eb-4f41-8cc8-9ea8debb4779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:ed:4c:4c:e2:8d:97:94:2c:bb:03:45:61:
                    cc:66:8b:17:e3:fc:93:44:9a:f0:d1:21:60:c3:1a:
                    cd:dc:2f:84:3a:00:99:24:a4:b6:c3:47:e6:38:ce:
                    93:ea:0b:79:ec:fb:c1:ef:13:da:74:00:ed:c6:ef:
                    0c:9e:3a:c9:f3:f6:3d:0a:fe:31:27:bb:9d:4b:51:
                    0a:62:10:6b:95:2b:2b:5f:0d:d3:dc:54:26:55:44:
                    e8:ad:c7:f7:d3:ad:ed:c2:5d:0c:7d:7f:2e:46:e1:
                    e5:64:81:fc:2c:25:d2:93:75:30:de:68:82:f7:09:
                    9c:7f:ae:64:95:22:ad:90:07:47:b6:cb:3a:c0:40:
                    50:0f:24:13:73:9b:1c:bb:ee:70:25:cf:f2:95:22:
                    02:75:92:56:dd:5c:cc:51:37:46:e4:5e:7d:f7:45:
                    ef:92:67:3b:d3:1d:87:5b:ff:8b:06:ed:be:34:d0:
                    4c:08:54:2b:7f:c0:46:be:05:9c:a7:b6:26:6e:2e:
                    64:94:47:ca:e9:ba:a2:a8:71:91:c0:62:4d:37:92:
                    69:b2:38:75:e6:a2:dd:d6:31:50:6e:b9:2d:55:6e:
                    f9:0d:6b:0e:ea:22:a2:41:f7:b9:f6:14:aa:3c:15:
                    e0:7a:4f:33:ca:8a:02:23:ca:00:69:3e:4a:9d:7e:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:70:33:01:F3:29:AF:EE:34:51:AE:D2:62:1C:4F:C0:73:C0:C2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:64:41:fb:b2:29:c4:90:9b:e3:ba:d1:8f:93:38:c0:25:
         f7:ff:ae:c5:aa:a0:fb:6a:19:1f:ab:15:b4:8a:03:a4:08:9e:
         2c:7d:48:11:db:8e:7f:e3:bd:b2:cf:0e:13:fe:16:b8:16:1e:
         fb:9c:98:81:7e:8e:ca:3b:67:91:90:e3:48:99:b0:c9:fa:cc:
         bb:5b:d8:4a:04:6b:96:86:78:10:5f:59:fe:4b:72:53:31:b1:
         35:ca:da:3d:d2:cf:44:45:23:5c:5f:a2:fb:c6:59:26:74:3d:
         49:02:84:ed:16:53:e0:84:b1:82:ce:de:16:6a:ff:e7:d3:26:
         2d:eb:3c:92:bd:72:e8:24:7d:f6:d8:e5:55:87:5c:31:ad:39:
         35:01:b5:83:00:4d:d2:96:ec:3f:c6:92:25:16:4f:15:f4:31:
         98:e5:c5:47:51:71:a9:e8:3c:25:b3:13:9f:5f:dc:2b:46:82:
         1c:a4:e0:71:52:c0:f8:b3:98:81:1d:9e:20:bb:b9:ab:3e:24:
         0e:b3:09:e5:e1:08:29:5b:85:ef:fe:76:3b:60:b2:be:b6:aa:
         06:61:b0:e6:c2:36:23:27:0f:48:4b:a8:f3:99:97:3c:2e:af:
         09:da:d3:15:25:22:70:d9:0d:d2:06:ca:84:4d:cb:7f:85:36:
         81:77:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:45 2024 by rpki-client on console-fra.rpki-client.org