Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa
File:                     ac787570-7438-30a0-8827-f1ac45858139.roa (raw, json)
Hash identifier:          YvFRmZvrvL+J4KQF+brIV46Yzbuy3pmavT14RG4SrI4=
Subject key identifier:   FB:41:96:6A:48:85:5A:D1:30:75:51:8A:A7:CA:2C:37:D2:3C:C4:A6
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584733609EEBC10A43EECE8DB840
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        144.81.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9e:eb:c1:0a:43:ee:ce:8d:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=4a593bdf-c4cb-4f56-883c-ab33fb19ece1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f4:92:30:17:32:1a:7e:b2:fa:0f:40:63:6b:
                    02:7a:0b:1c:20:e5:d8:18:0a:ee:80:71:99:a1:85:
                    24:13:c8:28:8a:a9:dc:c7:7a:a6:7f:5b:59:c2:f8:
                    0b:08:75:e4:d4:1d:cd:ea:b6:14:af:86:2a:e8:66:
                    68:4d:a2:fb:22:34:0a:8f:af:09:7e:44:dd:ea:ae:
                    2c:b7:a6:17:6c:a4:bb:f2:8d:17:27:e4:31:ef:97:
                    2d:8f:f5:23:dc:6a:a1:6d:b4:d5:bd:83:64:45:86:
                    cc:9b:a9:ea:c9:66:83:8a:dd:c2:53:56:28:de:07:
                    44:e4:07:3b:18:fb:27:1e:53:65:c8:de:d7:5f:58:
                    8a:2c:5c:b2:34:55:13:5f:ed:38:7b:6d:c5:2e:f4:
                    94:f9:ca:56:c3:4e:9c:f2:b1:08:6a:25:82:08:57:
                    2e:f3:e1:08:92:93:f3:d4:4b:4b:5b:49:5b:4d:4b:
                    f0:7e:77:3a:96:d2:a3:8d:3f:24:93:3b:ac:3f:d9:
                    77:4d:ea:a1:4b:31:63:67:34:fd:0d:c3:3d:12:96:
                    96:a0:6e:c4:a3:2a:2a:89:28:1f:4b:31:18:74:b2:
                    5b:64:42:60:a2:6a:a9:a1:39:82:c7:f9:f6:c5:dd:
                    af:df:5c:d4:c3:a9:5d:08:19:fc:7b:4f:92:f7:c4:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:41:96:6A:48:85:5A:D1:30:75:51:8A:A7:CA:2C:37:D2:3C:C4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/ac787570-7438-30a0-8827-f1ac45858139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:34:4c:c7:07:b2:a8:a0:59:2c:ad:f5:df:b6:c9:3e:8d:
         26:ec:2b:40:a8:af:9c:01:39:92:aa:ac:27:a9:8e:00:bd:99:
         d5:d5:94:e8:29:d2:ad:3b:15:8a:9a:ab:22:15:81:b0:5a:a1:
         2f:d0:0c:09:02:f8:40:91:52:3a:ae:79:dd:5a:a0:a3:42:c4:
         a2:e1:e5:b5:1a:bd:0f:b6:9a:8f:59:24:87:14:11:08:dd:1b:
         ba:f7:a7:2a:3e:31:8c:f2:95:a8:be:38:f4:25:a1:13:48:33:
         a9:6b:1c:74:b0:54:f3:a5:a0:5b:0d:a1:dc:e4:ab:0f:47:5b:
         dd:12:dc:1e:88:d0:d8:73:90:10:5a:83:9c:43:9d:b0:10:13:
         73:e4:10:26:c4:2b:be:d9:84:04:4b:67:d3:bc:38:b5:f3:d1:
         0d:fb:d4:8b:c2:f5:94:92:35:a7:1d:cd:23:b7:64:5d:96:ca:
         0e:22:8e:fb:80:3f:4d:4c:ac:92:f9:12:5f:a0:aa:30:4c:d2:
         f8:b7:2f:33:9c:f8:c7:74:da:89:62:0a:64:33:06:a1:83:88:
         33:95:59:27:72:55:bd:11:be:00:d1:ee:40:1e:10:cb:1c:d1:
         33:1b:d0:56:12:d1:d1:c1:eb:7e:e0:35:ab:c7:e9:6d:33:04:
         a5:5b:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:16 2024 by rpki-client on console-ams.rpki-client.org