Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa
File:                     ee631945-7dbf-3f5f-9e76-e701856b60a2.roa (raw, json)
Hash identifier:          EI+dAY24zuYytbEP+PK8CEJqMVIsjcVMZlNGyV0nBfE=
Subject key identifier:   B9:90:C6:36:89:FA:28:A2:BB:FD:9F:EE:33:2B:8E:1A:0F:CC:4A:0A
Certificate issuer:       /CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
Certificate serial:       010D0C9F432858476E00FBB7AFC4367AD9119000
Authority key identifier: 38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     393316
IP address blocks:        141.193.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fb:b7:af:c4:36:7a:d9:11:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e97ec8-c881-45aa-ac49-25ee21a93a5f
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=cf1f5f94-b856-4aea-89a6-c45fa1470003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:4f:33:a1:fd:4d:88:ca:41:d8:7c:78:78:
                    39:a1:95:90:b4:b8:b9:b7:d1:bd:ac:b7:07:08:d3:
                    4c:ee:de:0f:f5:1f:ad:19:94:0a:b5:b0:d6:a0:3d:
                    a4:44:76:6e:02:02:ce:82:7c:0f:69:81:48:a7:86:
                    44:75:81:99:46:c5:98:e0:72:5a:7f:88:06:b2:59:
                    73:07:46:5d:94:93:27:f8:f7:a8:ff:a1:61:6a:f0:
                    24:96:d1:d2:9c:7a:3c:6a:31:9d:5f:01:88:08:04:
                    d5:51:23:8f:0f:6f:f2:86:eb:0f:c7:b2:a6:3d:f0:
                    e0:e8:10:1a:bd:64:49:a6:70:86:18:25:e0:cd:c1:
                    ad:52:ff:36:e1:21:3e:a0:2f:20:05:0d:2d:aa:e5:
                    19:78:07:85:c0:74:85:df:07:70:3a:15:8a:66:9d:
                    c5:3a:f2:8f:08:70:c6:a7:75:8e:c3:99:72:72:90:
                    4a:a4:e0:e3:88:84:13:a0:d6:08:77:31:a3:d2:56:
                    82:40:b1:59:c1:fe:34:b4:94:a5:a4:f1:6d:66:90:
                    40:3f:48:ab:31:31:92:31:f5:a9:a6:cb:62:15:a7:
                    ab:32:96:38:ec:2a:cb:a5:44:53:2a:1e:73:0d:0f:
                    a2:d2:d2:ec:c5:01:bd:ba:52:16:2c:4a:47:42:48:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:C6:36:89:FA:28:A2:BB:FD:9F:EE:33:2B:8E:1A:0F:CC:4A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/ee631945-7dbf-3f5f-9e76-e701856b60a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.crl

            X509v3 Authority Key Identifier:
                keyid:38:7B:12:B7:DF:0C:3F:9F:52:FE:6B:0D:E3:B5:DB:70:DE:BF:97:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d0e97ec8-c881-45aa-ac49-25ee21a93a5f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:5b:97:6b:fa:f5:3a:66:54:f8:2a:d7:0c:35:78:9d:29:
         59:a0:7f:5e:57:65:4e:3c:0a:b7:df:57:55:66:37:cb:1a:f5:
         7a:4d:bd:bb:99:3f:b3:17:59:de:71:72:ea:bc:8d:6a:ca:79:
         9a:eb:27:b3:ab:49:6b:c2:6f:f9:e6:d3:32:af:69:9a:31:a6:
         80:15:47:be:7a:82:1d:59:67:4c:35:0f:e1:07:8d:5c:d3:50:
         ed:d9:5b:78:ba:0d:6e:ee:06:20:ec:92:80:60:f3:e1:02:b7:
         69:84:c9:ac:05:f4:18:cb:36:ab:ef:97:16:1f:0c:4a:38:d1:
         ae:e2:05:cb:0f:46:1a:43:37:6d:27:68:9a:b9:1d:9f:50:3c:
         ea:df:fb:38:d2:35:36:72:3b:9c:5e:ab:e9:18:ee:b0:09:3f:
         8f:1e:4d:43:86:c2:fe:3b:04:e4:3f:64:7d:0f:0f:27:50:24:
         e2:18:14:2a:35:cb:da:89:ac:8a:b7:cc:19:1e:a0:99:fc:e7:
         41:83:87:68:53:90:a2:60:b5:f3:f0:0d:ec:b9:03:58:01:c4:
         64:99:db:b0:49:5f:58:fd:20:dd:e4:73:40:3f:85:fa:d5:59:
         6c:c0:68:d6:a2:a3:20:48:9e:d1:08:80:fe:ee:a9:56:5f:f5:
         e3:8d:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:26 2024 by rpki-client on console-fra.rpki-client.org