Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
File:                     844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (raw, json)
Hash identifier:          kEZsDLAZyfzmFjg/AuutBcZs+FodRb5uwDe4hhkNdqM=
Subject key identifier:   08:B5:3C:F7:E4:9A:FA:4E:E1:A2:38:66:C6:B9:9D:FA:E7:5C:0E:D7
Certificate issuer:       /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial:       010D0C9F432858475910B9CEF1B1E0731E5A5300
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     10453
IP address blocks:        205.149.128.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b9:ce:f1:b1:e0:73:1e:5a:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=3096c638-7d52-48af-948c-46d5728a931a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fc:f3:1e:1e:63:d7:25:91:79:09:45:22:01:
                    f2:05:02:56:72:a6:69:55:30:c3:a5:c8:8f:93:53:
                    19:78:4a:e3:33:c7:ae:cf:5f:d9:12:12:f2:fd:76:
                    4f:78:63:6d:77:24:ad:ea:69:24:88:81:45:6d:33:
                    e7:e4:bb:64:cd:c2:a2:c6:73:1e:e1:51:b1:f8:3f:
                    26:e8:70:c9:74:6e:26:c9:d2:2e:7a:87:1b:f9:b5:
                    42:71:51:be:0d:fb:0f:8e:0c:57:03:9f:bb:c6:bb:
                    29:0b:bd:cb:1a:05:b8:02:74:92:3d:e6:4b:0b:20:
                    e5:41:6b:aa:65:ee:f7:21:c3:67:72:02:89:38:67:
                    ec:0b:ca:df:b2:48:e2:39:81:cd:9c:f3:26:46:ed:
                    5a:9e:09:9d:28:8e:60:76:38:81:5e:a6:ee:8d:7d:
                    c4:96:70:dd:36:8b:af:b7:a0:9d:e9:41:75:58:c5:
                    68:8e:f9:6a:f7:94:7b:e4:81:ab:df:bd:4b:c0:e3:
                    56:6f:ac:7a:99:2e:12:9a:46:e8:01:f6:9b:bf:56:
                    84:14:21:43:af:bd:6a:7c:07:92:73:f0:e0:dd:95:
                    b1:50:35:3f:17:5c:89:4f:8f:b8:41:4d:f7:a7:34:
                    59:bd:fd:4b:34:58:e0:4a:22:f7:40:af:42:83:5e:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B5:3C:F7:E4:9A:FA:4E:E1:A2:38:66:C6:B9:9D:FA:E7:5C:0E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl

            X509v3 Authority Key Identifier:
                keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.149.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:20:5a:75:e2:36:dc:2d:30:0b:8c:d6:5b:70:a6:be:a6:b6:
         0e:f3:ec:e2:c1:dd:3b:ad:0a:77:9c:31:ae:12:e7:7e:63:ad:
         fb:2e:a3:a9:f1:ef:22:2a:65:19:36:d7:32:ab:8f:24:98:7b:
         ce:9b:f5:13:49:9e:11:79:4b:f5:34:a9:37:a4:2d:92:7c:74:
         97:bc:b4:a1:a7:bb:20:ff:e9:53:52:f2:dd:92:fa:b9:bb:01:
         cd:95:03:3c:b0:b2:d7:6c:99:fe:16:63:ab:df:9d:1f:93:b0:
         93:a7:16:3e:59:82:5a:29:ff:31:e8:da:89:4f:d1:bd:95:76:
         88:16:27:6d:d1:3d:2b:3a:f3:14:11:95:9d:fb:0c:f6:7b:49:
         59:c5:0f:9d:4c:70:f9:f9:54:e2:d5:99:ac:dc:1f:1f:12:f8:
         9a:3a:0b:26:2f:e4:3c:63:3f:7a:23:fb:d8:5f:39:78:af:0b:
         6a:e1:33:fe:37:93:a5:1f:1c:f6:29:1c:02:5c:de:13:18:35:
         0a:42:62:e8:20:46:eb:a8:93:7e:4c:d3:79:2a:24:77:ff:2e:
         97:21:7b:cd:6d:6c:14:8d:d5:42:82:5a:3d:96:c8:d3:77:e9:
         96:7a:41:57:1f:c2:59:3f:6a:37:5d:ae:3b:94:86:d6:1c:55:
         62:94:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:44 2024 by rpki-client on console-ams.rpki-client.org