Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
File:                     7de174a5-fe02-37dc-9bcb-1f777220641f.roa (raw, json)
Hash identifier:          9Praw/qVrfJKkAnBCxvD3fZdZKg/FaPADVQALb0UqOs=
Subject key identifier:   ED:B9:30:FA:95:78:40:94:9F:C0:80:20:DE:6E:7E:CD:A4:58:18:09
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502F91EABE372343BE826600
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
Signing time:             Mon 23 Sep 2024 20:40:28 +0000
ROA not before:           Mon 23 Sep 2024 20:40:28 +0000
ROA not after:            Sun 22 Dec 2024 21:40:28 +0000
asID:                     54113
IP address blocks:        131.125.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:91:ea:be:37:23:43:be:82:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:40:28 2024 GMT
            Not After : Dec 22 21:40:28 2024 GMT
        Subject: CN=3afef878-f026-4041-9521-3b71674d30b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:df:2c:48:ea:7f:b9:8b:9c:57:4c:d8:a5:
                    7d:a1:60:f5:31:cf:c8:53:8a:8e:9f:6f:c8:18:f3:
                    28:10:73:4c:c6:d1:6c:82:14:9e:fb:05:ae:c4:25:
                    54:de:da:96:20:df:7f:39:2b:04:ab:cf:c2:12:dc:
                    a6:c2:0d:33:dc:7d:a0:49:bd:77:6e:74:d1:b5:ab:
                    62:4b:e4:86:ba:9a:9d:91:1d:90:62:16:a4:97:ef:
                    59:66:0d:b3:d6:73:62:31:95:8e:15:76:81:a3:49:
                    00:ae:b9:e0:b0:69:6b:c7:96:ef:77:8c:cc:de:d2:
                    b5:95:96:8b:72:70:78:06:b1:49:61:bf:0d:ac:d0:
                    e8:65:2b:2e:f4:bb:7a:22:e8:87:0f:02:59:73:cc:
                    d7:ac:fa:eb:a4:9a:c3:15:7f:6b:ac:b3:66:5c:10:
                    b1:53:2d:dc:c8:5d:73:a2:a3:7a:f2:0b:1c:cb:91:
                    6c:8d:40:23:d8:0a:6e:c3:be:e0:0c:6a:d5:b4:5c:
                    68:f4:90:30:b9:fe:db:19:87:3c:9a:bf:1b:77:13:
                    bd:57:07:84:1b:dc:df:9a:e2:ad:6b:b9:03:a8:1f:
                    f2:e2:83:d1:d1:2f:60:10:f1:a2:a3:22:af:a5:9a:
                    92:17:63:36:f8:58:bf:eb:cb:de:d2:37:f1:67:91:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:30:FA:95:78:40:94:9F:C0:80:20:DE:6E:7E:CD:A4:58:18:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:72:62:3e:b2:b4:3f:ec:eb:d7:d8:7f:a7:0f:db:2b:e2:
         c0:ae:63:ad:8e:5c:68:e8:71:52:e6:3f:8c:20:9a:f5:d7:df:
         98:11:d6:8b:d8:ab:97:7e:58:33:3d:92:c3:67:e1:ab:69:48:
         5f:aa:fd:f6:5f:2e:0d:5f:46:68:95:ab:ed:76:73:53:c6:45:
         22:7f:aa:5f:22:a3:c5:23:f5:e4:0a:fa:cc:40:72:6b:27:7f:
         ab:99:d4:09:c3:ca:40:5c:4f:be:c1:01:3a:e2:4f:e7:56:de:
         61:4c:5a:00:0f:47:8b:a6:de:6a:48:10:2f:c4:23:74:eb:bd:
         fc:5f:f2:d5:2b:70:eb:78:31:40:bf:88:a8:bd:3b:e3:42:42:
         b1:9a:55:4b:8b:58:56:8d:44:99:5c:6e:91:19:2e:32:98:01:
         fb:86:d8:1f:4b:09:38:30:7e:26:57:0c:5d:cb:7e:80:85:ac:
         18:af:c8:4c:e2:db:e1:41:05:9f:d1:b3:d1:3e:60:ab:12:44:
         6d:38:ce:5d:6d:ca:f0:2a:51:e5:fa:6c:4e:20:ec:fd:a7:d7:
         0b:59:68:28:59:27:49:40:6b:f6:c9:18:ce:69:40:e3:a1:9f:
         06:19:37:3d:54:b8:62:87:b5:aa:70:4e:ff:b6:34:49:60:3a:
         a9:d9:ec:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:21 2024 by rpki-client on console-ams.rpki-client.org