Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
File:                     c75bc20f-6532-3c41-9539-e3da4d4b642a.roa (raw, json)
Hash identifier:          9053iW3PFjDLsyTvk0EDbjO2xKYjgm/is56i+FqmXAE=
Subject key identifier:   D3:91:47:A0:CF:DB:A6:44:37:9B:77:0D:C9:68:06:33:69:D1:C8:A4
Certificate issuer:       /CN=e41130c1-4af1-4678-90df-9d7c854ceb98
Certificate serial:       010D0C9F43285847CD09F56EF00F25A9F45CED10
Authority key identifier: DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     19431
IP address blocks:        158.51.236.0/22 maxlen: 24
                          2605:9340::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:f5:6e:f0:0f:25:a9:f4:5c:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41130c1-4af1-4678-90df-9d7c854ceb98
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=780dc00b-0938-4954-9c87-16a3688ff45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:52:14:8a:2c:83:9d:18:f8:b3:1d:5d:28:
                    81:d3:af:35:22:c5:31:29:83:fc:cb:17:6b:dc:9e:
                    b9:43:19:c9:b5:c6:d9:83:27:6e:0f:49:22:2a:d7:
                    3f:22:13:ff:7c:7a:d5:63:b7:5e:ae:81:78:72:1f:
                    df:ff:91:3a:e3:0c:2c:8e:39:cb:f8:57:6e:42:07:
                    17:e9:7b:8f:06:a1:84:61:58:cc:64:30:18:aa:51:
                    9d:bf:14:6f:86:c8:42:a6:d4:4b:da:97:50:75:f6:
                    cb:a8:4f:b5:1f:c1:97:f7:4d:f6:ab:47:9b:df:c5:
                    5c:f7:a9:db:ba:0b:40:f7:10:c3:aa:e8:9e:0f:57:
                    69:e3:29:23:26:9e:a0:36:c6:f5:7f:a1:2e:d4:7a:
                    e1:d9:b5:75:37:df:1e:32:63:49:a7:8f:9b:92:6f:
                    e9:0a:af:76:79:9f:a3:0d:66:d0:60:2c:90:0b:57:
                    ce:6e:0d:01:ae:11:b7:2f:cd:c1:a7:93:c6:cc:f5:
                    81:9d:c0:c9:30:13:7a:fb:cf:1b:aa:48:3a:9a:cd:
                    af:d4:47:43:8a:97:6b:47:eb:a5:3f:dd:dc:1c:76:
                    6a:20:de:44:18:7a:59:14:33:b3:bd:8e:b7:78:16:
                    83:f0:49:b1:51:09:14:32:93:80:b1:e8:d4:97:59:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:47:A0:CF:DB:A6:44:37:9B:77:0D:C9:68:06:33:69:D1:C8:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/c75bc20f-6532-3c41-9539-e3da4d4b642a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98/e41130c1-4af1-4678-90df-9d7c854ceb98.crl

            X509v3 Authority Key Identifier:
                keyid:DF:24:BF:B9:B1:E3:38:17:32:1C:79:8B:22:FE:17:99:A6:0B:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e41130c1-4af1-4678-90df-9d7c854ceb98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.236.0/22
                IPv6:
                  2605:9340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:da:73:6f:4f:ec:f1:fe:b1:e0:c0:23:f1:76:2a:09:c2:
         91:2d:16:ca:ce:da:2e:30:65:c0:03:af:db:88:6e:9e:fd:73:
         6f:cc:8a:d1:d3:a1:03:c2:fb:b0:2a:20:f2:fc:c9:79:6a:98:
         5f:2d:e9:82:ca:69:5a:fc:e2:8c:61:bd:4b:f2:6e:31:d3:38:
         16:b9:37:e9:68:b4:9e:f1:bd:0f:3b:9a:36:e3:b8:be:c9:25:
         58:dc:67:1c:e7:7f:1b:0d:90:74:e0:8d:ec:49:19:32:1a:82:
         98:64:93:44:ed:38:41:b3:e7:e7:cb:c0:64:28:ad:65:e1:a2:
         bf:28:7a:1b:4f:74:62:4b:0a:f5:61:a3:8c:f0:74:56:8a:56:
         89:55:da:20:60:83:ef:ca:9e:1a:79:4f:f1:70:84:a8:50:81:
         60:28:80:b6:cb:b8:65:62:29:be:9f:0a:30:99:8c:2a:c9:ee:
         9d:72:08:fa:7b:5b:66:fe:b3:49:33:cf:4c:4d:6b:44:c3:95:
         b2:ee:a2:21:6b:2a:67:c9:af:3b:de:ad:2c:3e:86:80:c1:05:
         48:0e:4a:b3:53:c6:09:eb:c6:77:70:00:84:7b:da:6d:99:e7:
         e2:93:de:3d:31:1b:35:56:43:e9:57:9a:9e:fe:d8:6d:6b:83:
         9a:8c:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org