Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8acd510-db01-343d-99d4-abf1f68f953c.roa
File:                     d8acd510-db01-343d-99d4-abf1f68f953c.roa (raw, json)
Hash identifier:          JGxeGlbcLE7V4prB18mg9idndLebHt8ePKBEH94WbWE=
Subject key identifier:   D9:C5:41:85:D0:DF:DF:4F:BD:19:78:36:12:1C:A0:56:D8:4B:E3:4C
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858473A5B2CDAF0904F5D20E07680
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8acd510-db01-343d-99d4-abf1f68f953c.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     134365
IP address blocks:        107.151.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:2c:da:f0:90:4f:5d:20:e0:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=b0f2c7c6-3f62-4d3d-9f1b-daa63c99d8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:8a:63:03:7c:fb:f9:88:2d:d0:fe:3b:2f:
                    ec:e8:4d:04:93:15:d2:a5:71:e6:ae:60:58:dd:2a:
                    76:82:f5:7e:51:2b:14:b6:c3:71:f1:d0:f7:07:3a:
                    e9:30:71:48:40:29:c8:ae:eb:2a:c5:fd:3d:a2:43:
                    6f:1c:b0:7b:83:db:3e:89:b5:f8:4b:3a:03:80:42:
                    04:4d:aa:8c:9e:80:b6:e8:b4:02:d4:21:78:4e:a2:
                    0c:54:ca:b2:22:fc:ac:2c:04:80:0a:54:ba:58:d0:
                    5d:21:88:bd:09:97:53:da:36:cb:09:4d:a5:10:59:
                    d1:bc:36:f3:ad:63:7f:36:35:e8:66:38:0e:e8:6a:
                    d9:d1:3c:af:76:00:3f:b8:b2:4d:1a:38:cb:0b:47:
                    65:43:1a:a2:cb:6c:74:3e:4a:bb:3f:b0:62:b6:95:
                    55:56:68:ff:28:47:c1:17:7a:fb:f2:18:8a:0a:72:
                    e9:78:38:75:6b:8b:17:90:5a:49:76:61:19:0a:74:
                    f1:6c:65:fa:dd:c5:fd:53:49:4c:d9:ea:12:dd:4e:
                    bf:23:53:49:bb:07:65:d8:b2:33:ec:7d:47:7e:4b:
                    eb:55:97:2a:66:9f:69:da:18:f8:0a:00:0c:f7:10:
                    c8:76:25:2b:4a:2c:05:ec:ed:0a:96:60:04:cc:dc:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:41:85:D0:DF:DF:4F:BD:19:78:36:12:1C:A0:56:D8:4B:E3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d8acd510-db01-343d-99d4-abf1f68f953c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:94:dd:44:7c:c7:7e:cf:56:7e:08:ff:70:52:02:a9:88:9b:
         56:9c:f0:aa:73:57:17:9c:73:87:50:ae:89:81:1c:94:f7:cb:
         c2:d5:4e:9d:5a:2a:cc:91:5d:97:bd:9c:41:c0:8a:e2:4a:69:
         e0:50:78:c1:b9:f9:36:6c:f4:41:68:0f:b7:f1:66:15:7f:1b:
         89:e9:ac:e5:86:16:ca:34:79:86:b0:a8:25:a0:78:ba:ca:78:
         a9:fa:a4:2c:fb:17:d1:4c:8b:8b:ff:95:cf:fe:80:b5:46:b7:
         ce:84:3e:07:66:35:cd:8c:b8:28:e5:45:5a:fa:9a:5a:59:5f:
         4a:9e:43:ec:1b:40:04:e4:a6:d7:77:0b:c0:e0:15:23:3c:06:
         02:29:65:6a:23:2f:d3:d0:d4:5c:40:9b:09:2a:17:c3:85:0e:
         7f:f8:da:7d:93:e8:39:16:f6:db:69:3c:13:83:56:c8:88:d9:
         12:ec:b3:21:ac:99:ef:5a:81:10:6d:04:a5:70:f8:fa:a8:1d:
         5b:a6:aa:a6:70:01:78:c5:36:ab:4e:8c:32:c4:ed:c2:d6:56:
         9a:a4:c6:27:f2:64:52:79:62:8f:48:ea:90:39:e8:f1:15:ee:
         ce:60:83:17:e1:2b:c5:1b:88:52:4f:d4:9a:19:66:c0:85:d0:
         94:3c:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:24 2024 by rpki-client on console-ams.rpki-client.org