Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa
File:                     1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa (raw, json)
Hash identifier:          xsQgBN4S6P0J5TyNgoWYW6IOmQBu6VJIcHRxRI9P4mE=
Subject key identifier:   EF:C2:8A:F3:70:94:D2:44:58:2B:B3:44:7E:BA:2F:16:BD:2B:1E:4C
Certificate issuer:       /CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
Certificate serial:       010D0C9F43285847802655AE275AFBEE6CCAB4A0
Authority key identifier: E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     1638
IP address blocks:        146.88.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:55:ae:27:5a:fb:ee:6c:ca:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e61fabb-95c6-4ab3-a1ec-b077e850f010
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=380bc24f-47e4-409c-a0ee-643c3aca4e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:17:2a:80:a8:ac:f6:01:4f:51:2c:94:3c:
                    27:c9:eb:8c:9e:c7:e0:43:3f:72:a0:2b:45:00:d8:
                    fd:88:1d:90:9f:dc:8c:8e:a2:dc:55:f5:45:59:21:
                    c1:55:a6:09:61:26:32:bb:43:2d:9d:32:53:f5:7b:
                    9e:aa:6f:ce:10:65:75:0b:0b:4e:28:45:a5:87:c9:
                    8d:bf:fa:3a:05:23:c6:a3:a7:31:3f:0f:9d:a0:c6:
                    18:0e:5d:d1:e4:13:67:1e:e5:75:9f:5a:ba:2e:2d:
                    7a:db:fc:2e:8c:08:2f:d5:de:54:b9:22:d4:be:5f:
                    35:b5:9b:f8:6e:ab:9a:3f:84:56:f1:b2:c7:5e:22:
                    02:3a:5c:49:3a:f7:bf:49:30:79:a0:73:ec:58:2f:
                    1a:d7:3a:ff:19:01:de:e5:0a:58:31:e3:ff:57:d4:
                    ae:8f:b5:e0:2f:59:1d:f4:1f:3a:55:91:2c:ea:45:
                    e1:47:f7:5f:73:cf:54:38:81:22:c3:e1:7c:f8:64:
                    24:b5:f8:f6:9c:30:6f:9c:d9:e4:e8:00:7d:e4:a9:
                    0d:19:58:e9:66:46:79:65:d0:3b:0d:75:8a:dd:e7:
                    5e:30:54:6f:51:32:0f:46:c9:a0:1c:84:97:c7:e9:
                    4b:0c:d4:9d:cb:1b:cc:61:4e:e6:e5:82:ac:71:be:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C2:8A:F3:70:94:D2:44:58:2B:B3:44:7E:BA:2F:16:BD:2B:1E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/1b54e1e8-75c0-3c07-9c59-87d1bdb83852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010/7e61fabb-95c6-4ab3-a1ec-b077e850f010.crl

            X509v3 Authority Key Identifier:
                keyid:E8:97:9D:55:E3:53:AB:EF:00:F2:13:00:A9:2D:D2:DA:F3:14:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e61fabb-95c6-4ab3-a1ec-b077e850f010.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:08:27:64:cb:ea:8e:41:1e:b8:e2:d1:bd:e4:c8:a0:bf:
         40:2e:87:75:55:cd:9b:ee:83:43:75:61:05:a3:52:6a:65:e9:
         e1:c4:c8:4e:76:cc:8d:3c:81:b9:e2:3b:3e:60:01:54:cc:d2:
         b2:ef:74:fa:af:8a:a3:ca:56:82:29:a4:24:17:c1:e8:7e:05:
         7b:d6:20:05:66:32:70:73:02:01:91:d6:64:4b:45:60:60:3f:
         50:5f:76:59:92:f1:42:20:9d:59:1d:38:f0:5d:47:c4:0e:b4:
         3b:97:e7:7b:5c:2d:f5:c2:cb:d9:9b:94:d8:1b:23:45:c3:ed:
         4d:ec:2b:59:1d:72:5f:d2:0f:03:e5:95:bc:1f:ec:e5:56:01:
         80:8c:ae:18:9e:f2:9a:5f:46:f7:62:16:b6:47:9d:4c:e3:40:
         17:48:2f:68:25:68:90:9b:28:fa:9c:12:63:5b:d4:06:70:7a:
         d0:15:7a:45:06:13:e7:f9:39:47:47:f1:d3:c2:89:c9:e0:22:
         f7:8e:70:c1:a8:bb:fd:89:cf:45:07:9f:63:40:4f:f3:2f:82:
         28:6f:49:44:8e:cb:58:9a:60:16:35:26:80:9a:c6:2d:b1:5f:
         dc:ec:ed:9e:6d:53:8a:ee:4b:61:d4:1b:ac:cc:36:7d:c8:7a:
         cf:7e:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:22 2024 by rpki-client on console-fra.rpki-client.org