Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa
File:                     f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa (raw, json)
Hash identifier:          i4t2cT9yazeEaWbUy2aEgaK2YcU660jUD2e92/2B5cM=
Subject key identifier:   09:5C:E2:C1:2B:66:9E:D4:2B:09:3A:1D:6E:26:1A:7A:64:2B:CD:42
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847502F6DF437B088F93F5C5FC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa
Signing time:             Mon 23 Sep 2024 20:40:11 +0000
ROA not before:           Mon 23 Sep 2024 20:40:11 +0000
ROA not after:            Sun 22 Dec 2024 21:40:11 +0000
asID:                     54113
IP address blocks:        131.125.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:2f:6d:f4:37:b0:88:f9:3f:5c:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Sep 23 20:40:11 2024 GMT
            Not After : Dec 22 21:40:11 2024 GMT
        Subject: CN=cab0945a-7953-4000-bf80-7c40c10e74f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:0e:0f:a6:6f:7b:98:57:23:51:f4:fc:a6:
                    de:12:de:10:b9:00:5b:05:99:a9:ec:95:5a:d7:62:
                    79:e6:f3:9d:5e:e0:5b:6a:4c:5a:92:05:4d:4f:88:
                    78:d6:9b:78:48:c9:ed:58:4a:b3:da:17:c0:97:d8:
                    2c:39:dd:54:1e:35:97:4e:29:4c:51:7e:13:6a:ed:
                    82:58:6f:de:93:c7:21:63:45:4f:c1:32:9a:ea:dd:
                    95:82:a7:de:26:e3:96:74:8e:c0:61:e5:a4:64:71:
                    cb:d4:f2:d5:76:26:98:fe:a9:de:da:f2:9b:28:40:
                    a2:c2:8a:e1:17:ad:8d:5c:b8:5c:02:f6:3b:55:a7:
                    db:cb:2b:91:fe:f1:ec:d2:1b:39:01:a3:86:62:5a:
                    d6:04:51:1d:22:74:09:74:23:f5:c7:78:d3:6b:9b:
                    68:ff:99:32:2e:53:03:75:5a:9c:ff:33:f5:a7:64:
                    44:f8:1f:13:c5:e1:53:db:96:bc:8c:df:6f:2b:b6:
                    8b:86:cf:62:65:64:c6:5e:19:46:c5:4b:94:66:a3:
                    da:37:52:b4:55:2a:3d:39:02:8f:9f:ff:a8:ce:d8:
                    5e:4b:cc:ee:13:bc:38:84:b2:84:44:a7:93:c3:87:
                    42:3e:af:83:23:2f:76:a4:b2:f5:b0:d4:27:82:05:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:E2:C1:2B:66:9E:D4:2B:09:3A:1D:6E:26:1A:7A:64:2B:CD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1adbdb1-0e03-3adf-97dd-b1103f2a4271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:70:2a:66:3c:04:9c:dd:0d:41:f6:c0:c5:f2:5d:81:2b:1f:
         b0:34:a5:07:b7:67:0e:b7:7d:4b:49:11:1d:c2:7f:59:4c:21:
         a9:d7:75:82:20:ad:34:e8:e5:58:7b:1e:da:25:e0:2c:da:a2:
         65:53:3e:d1:5e:bb:a2:8f:a3:9d:7e:af:24:1d:17:d0:3b:f3:
         46:4e:04:8c:49:3b:a6:61:e6:e5:ba:49:87:c5:03:e0:84:09:
         ca:e8:76:e5:ca:5c:84:1c:a3:a7:18:5a:eb:dc:97:77:0d:3d:
         f4:91:a2:84:b1:d5:bb:2f:9e:a7:91:85:9a:59:2a:31:a9:50:
         21:19:8a:78:ff:c2:c3:f3:4f:50:33:28:dd:bd:8d:fb:30:85:
         28:93:31:12:dd:93:3c:2c:32:d8:32:dc:70:cc:19:73:77:d3:
         3b:07:90:94:d7:eb:ea:f8:2a:08:54:0c:1f:2b:82:a0:f5:24:
         02:40:20:74:ba:09:58:36:b6:28:54:49:64:9d:dc:fc:d0:72:
         b9:77:8c:69:d3:96:ac:d2:b7:6f:f2:51:62:db:56:78:ec:52:
         a3:92:01:89:ce:80:6d:57:7e:02:54:9e:a1:52:86:44:2d:41:
         86:b6:ae:6b:43:d1:3f:51:73:93:12:d6:7f:7f:3f:d5:e9:60:
         81:43:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:51 2024 by rpki-client on console-fra.rpki-client.org