Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa
File:                     19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa (raw, json)
Hash identifier:          +aJmWts0uGG+tVtXoKOnTZdOVHL7mgbEyc1lOWc5yvA=
Subject key identifier:   9A:F5:57:1B:0C:B9:BD:37:48:0C:B5:74:02:3B:AE:F1:29:C6:1F:F2
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F43285847EBBF7D0B3BBB8C416553A980
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     10996
IP address blocks:        192.154.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7d:0b:3b:bb:8c:41:65:53:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=bd7e147d-ee0f-40a9-bcd6-02cf347cbd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:85:1a:08:e2:d5:83:8f:78:38:40:28:3c:c9:
                    d5:d4:e0:35:23:a8:e7:37:bb:06:05:e8:68:ca:f5:
                    ef:66:52:cc:ea:ff:ad:24:a6:e6:59:2f:fa:d1:74:
                    11:84:cb:2b:87:b5:a9:fd:cd:3e:44:ef:54:1a:f5:
                    8c:9c:5a:de:c6:14:28:eb:b3:d0:4f:0c:32:85:7b:
                    6b:ef:bc:21:bb:47:4f:18:ab:eb:67:47:db:5d:a1:
                    57:bf:22:38:16:64:d7:b8:f4:30:d2:ea:51:fa:6d:
                    7d:7d:52:c8:33:34:6e:b2:2c:0e:3d:e1:47:b4:c8:
                    35:61:b6:a6:87:a1:90:7f:4f:fa:ca:69:13:00:71:
                    d6:24:34:5a:56:a1:37:be:32:22:31:c1:f2:2a:05:
                    cc:55:dc:3e:c1:db:bf:cc:1b:7d:4e:d1:91:fd:09:
                    00:b4:e7:44:ac:ed:5a:8c:d2:67:5a:bb:79:73:57:
                    54:5d:34:c5:f8:d4:1e:40:90:8d:da:72:a8:4c:06:
                    82:3e:a3:f9:57:b0:a9:90:a6:b1:70:69:1c:e4:cd:
                    6a:a1:51:db:a7:30:7f:cd:c0:22:10:75:6f:ad:6a:
                    aa:1c:a6:88:67:0e:f7:c2:39:51:f0:67:43:7b:a5:
                    e6:df:5c:f5:33:33:4f:ea:a2:b8:5d:f0:4f:d5:9a:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F5:57:1B:0C:B9:BD:37:48:0C:B5:74:02:3B:AE:F1:29:C6:1F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/19b3bbdf-2adb-32bd-806c-06bb730da9ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:67:22:5a:78:87:a8:8b:de:77:4a:07:9b:e1:12:47:13:
         92:c2:a7:9d:44:36:d6:4a:0e:7d:e3:39:3d:aa:e5:3f:a4:19:
         d8:dd:2c:78:bd:8f:6c:56:93:7d:cd:ac:23:28:15:f2:5a:8c:
         f2:33:40:ba:a7:f2:3d:f7:f1:c4:be:71:48:b5:bb:4d:43:c5:
         68:5a:da:6c:18:89:9c:53:9e:dc:7b:91:7e:62:66:45:4b:82:
         49:da:63:27:da:3b:e4:8f:99:20:ad:a2:7f:40:cb:1a:2f:96:
         bf:f8:c6:88:9e:a1:7a:88:9f:e9:8e:f9:8c:22:29:c3:f5:33:
         ac:ad:7f:15:b4:33:5c:ce:ef:39:29:43:d4:02:74:ec:97:d6:
         55:3e:93:4c:12:18:04:04:56:b5:47:da:5a:7a:65:c7:49:dd:
         e4:ab:79:8f:b9:91:cf:37:f6:f9:c6:c9:06:3e:ff:59:22:5c:
         76:76:e1:65:97:e3:f2:9b:99:20:b4:78:05:da:c9:57:94:1d:
         1a:f7:ed:bc:f3:04:b8:a5:c9:66:f4:95:6b:b6:ab:a8:78:77:
         d5:43:56:65:d9:5e:27:47:59:ec:8f:bf:95:fc:bb:60:3c:99:
         55:bf:0b:83:56:cf:03:0b:06:a0:02:70:12:2d:02:09:09:75:
         c1:1b:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:23 2024 by rpki-client on console-fra.rpki-client.org