Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa
File:                     822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json)
Hash identifier:          Srkk/rmy6wfkmGWtfj2EFZC3lxsCXSm85vP3ayBugz4=
Subject key identifier:   54:79:96:F7:05:AD:7D:4E:04:96:B7:80:1E:83:87:9B:37:71:3D:3B
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F432858476E00FF1624FC149C837D6B00
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     611
IP address blocks:        131.202.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ff:16:24:fc:14:9c:83:7d:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=2cd6d36b-d52a-4ed3-b786-9cd761d24e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:d9:bc:35:26:c6:eb:1e:98:aa:87:8e:83:
                    92:f7:af:5a:34:96:d9:b0:82:b0:58:a0:a5:16:66:
                    be:31:39:a4:f0:ca:fc:a0:7a:86:a1:ee:2e:63:ba:
                    5f:e7:40:a3:33:a6:24:ec:40:23:b5:2c:00:6c:e2:
                    77:54:77:f0:d1:48:e1:06:87:1f:2d:40:58:d0:a0:
                    26:bd:28:d9:26:a1:63:b2:43:59:3a:f5:4f:70:b3:
                    0d:18:fe:5b:0b:ba:d5:ad:e4:e9:23:c8:e3:16:e8:
                    1a:f9:96:54:09:f9:f4:f1:61:c7:73:a7:7c:85:b2:
                    ce:4f:7c:47:38:bc:4f:a8:12:68:0c:3b:6f:4f:b5:
                    1c:fa:c4:00:f6:03:48:bc:78:79:c7:90:43:dc:86:
                    89:38:fc:ff:e3:26:ef:4d:2a:b7:64:3b:39:20:7d:
                    86:49:45:97:64:c4:13:48:dc:8b:d0:ca:a3:c9:2b:
                    44:16:89:40:b0:5f:87:07:75:3c:74:b8:f1:2d:1d:
                    60:a3:76:f0:3a:d9:11:72:16:4f:ba:ee:e3:b1:a2:
                    8e:c1:20:99:20:e0:9c:c9:68:92:f2:4a:bc:86:f4:
                    db:4d:ec:c6:f7:8f:7c:a0:cd:23:8c:95:a8:68:a9:
                    1e:1b:f7:cf:e3:f4:4c:a4:ac:bd:85:f2:34:f1:16:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:96:F7:05:AD:7D:4E:04:96:B7:80:1E:83:87:9B:37:71:3D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.202.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:98:e7:3a:36:79:1a:31:b6:e9:81:e8:d8:9d:98:12:1b:cb:
         46:22:c6:77:5d:4a:70:ef:3c:ca:77:4d:cc:45:9c:0d:23:e3:
         c5:e8:20:b1:49:64:46:a2:87:39:ac:07:0a:55:ae:e5:61:8c:
         6a:56:2a:85:cc:6e:41:0f:10:b2:fc:8d:62:89:af:53:7f:08:
         80:1f:05:cd:d9:6d:a5:bc:f1:60:a7:29:da:9f:4e:db:87:58:
         5e:6b:bf:c3:f2:89:98:6d:de:61:1e:08:26:42:c1:00:3f:3d:
         70:5d:70:f7:da:ef:92:dd:d5:b3:6e:ae:00:85:e8:20:91:c3:
         16:fc:08:c2:90:c2:8c:a6:93:90:c0:9e:c6:5a:26:cf:bf:3b:
         a0:c1:8f:76:41:66:5d:f6:8f:66:5b:d6:05:da:75:4f:24:7d:
         6c:dc:c4:80:7d:b1:5c:fe:a0:05:73:2b:f8:5d:bf:5b:e3:0c:
         73:04:95:35:8b:b0:d0:02:b4:c6:b8:36:79:33:b4:ea:8b:55:
         e1:72:6f:f0:aa:68:34:d8:cc:68:f5:41:13:de:25:ae:46:49:
         ee:c5:b4:0b:7d:2b:e6:95:95:39:c7:3a:69:29:33:1a:f9:4c:
         0a:93:f2:43:d6:48:9b:c0:5a:c1:55:e2:0c:93:46:1c:97:e4:
         91:0f:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:00 2024 by rpki-client on console-fra.rpki-client.org