Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa
File:                     f3cb9022-330e-342b-b144-37ac3a7fc90d.roa (raw, json)
Hash identifier:          SMTmhpG55qudXuZtilmndrxCDR0ZaPRwhHxn0ErCbkU=
Subject key identifier:   9E:4B:8A:11:12:92:D6:3B:9E:90:C3:9E:FB:48:12:6E:B5:46:25:1E
Certificate issuer:       /CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507
Certificate serial:       010D0C9F43285847CD09F54A1EB036462A164100
Authority key identifier: 8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     271
IP address blocks:        198.162.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f5:4a:1e:b0:36:46:2a:16:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=1e8885b2-4f3f-4a92-ba93-75b6d67f08a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e7:8d:ea:61:e4:17:83:fc:9b:ca:78:8a:f7:
                    b4:0b:fb:27:16:17:b1:5b:11:07:ca:03:ca:b0:be:
                    26:0d:70:20:b0:ca:9c:a5:03:3f:47:a4:be:c9:1b:
                    70:55:b2:46:6b:6c:c2:4c:e0:97:e9:28:49:c6:d1:
                    0a:30:92:19:39:a0:48:00:25:8f:cf:84:7d:6b:a1:
                    b6:3f:10:4a:86:29:85:ea:31:8e:26:bf:7a:d7:ef:
                    76:1b:f8:d7:2e:7c:0e:7a:d4:ed:e8:a6:13:27:47:
                    9f:ca:ee:94:2e:0f:3a:1a:b7:46:4b:f0:d1:fd:28:
                    e8:26:12:8c:ab:97:ac:82:69:6f:57:51:67:43:52:
                    29:ae:77:ae:0e:e6:fd:27:57:7d:3b:bc:07:59:b2:
                    9c:99:0a:d3:d1:9f:e3:1b:b9:42:4a:c5:23:a6:53:
                    00:d6:c3:7c:a7:6d:05:4c:9e:36:4d:66:9c:e2:23:
                    be:ce:52:d5:01:84:4b:ba:9b:d1:c8:24:95:61:ef:
                    ec:fd:77:9d:f9:d6:f7:be:7e:eb:94:a5:08:aa:c4:
                    f3:be:41:bc:63:b4:b4:d2:52:36:37:22:94:c1:c8:
                    1a:f1:61:53:f2:28:24:b0:45:4d:1e:51:da:e7:52:
                    1a:87:12:1e:bd:c8:b2:65:a9:33:2f:e0:c8:5c:a7:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4B:8A:11:12:92:D6:3B:9E:90:C3:9E:FB:48:12:6E:B5:46:25:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl

            X509v3 Authority Key Identifier:
                keyid:8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.162.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:1c:9a:35:92:0b:ec:11:c9:d7:b9:e4:56:bc:0c:bb:c7:
         61:62:cb:5d:bc:76:fd:f7:d8:c3:e5:6e:5f:a8:a4:d6:36:ce:
         f5:63:bc:a0:22:02:f1:76:b1:5d:2c:74:72:56:c7:3c:b4:c0:
         37:83:e3:dc:56:ae:0b:1c:d8:58:1b:18:50:74:c4:6b:40:74:
         55:83:43:98:8e:37:80:5a:27:f2:5b:25:a3:b1:29:95:55:ab:
         8e:ef:e6:fd:dd:c1:03:8e:5c:6c:38:98:09:7b:8b:32:20:ce:
         f6:10:c5:83:17:3a:19:e1:92:0d:e8:b6:4b:8f:e3:fb:b0:80:
         9c:d7:96:cb:31:f6:6b:2c:0c:cb:44:b8:46:71:33:9a:56:5c:
         6a:cc:b7:88:f9:af:0c:0e:05:aa:28:e9:f6:6d:f1:9c:cf:d3:
         55:cd:92:cb:f1:9a:3c:64:27:01:3d:ce:cd:86:82:e2:7f:c5:
         7a:7a:90:f2:35:74:55:7b:7d:52:ed:c1:03:e4:31:55:aa:22:
         61:e4:60:aa:f7:61:0b:13:c6:12:64:07:c7:10:55:b7:25:8e:
         6e:f5:fe:f4:13:cb:7a:18:00:af:b1:b2:df:76:90:ba:21:5b:
         44:79:3b:be:c3:28:c9:ec:94:94:93:b6:9e:e9:3c:ab:95:72:
         37:0f:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org