Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
File:                     f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json)
Hash identifier:          YrzTSM9tO8zjl10KVnAWHVjphsEmjQlFhtxdc68itgg=
Subject key identifier:   9B:02:B7:E7:44:20:90:20:34:02:18:DF:91:06:A4:84:50:25:A2:19
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858476ECB3A4255E6B2B02EF3CA00
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
Signing time:             Fri 04 Oct 2024 19:48:21 +0000
ROA not before:           Fri 04 Oct 2024 19:48:21 +0000
ROA not after:            Thu 02 Jan 2025 20:48:21 +0000
asID:                     16679
IP address blocks:        152.157.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:cb:3a:42:55:e6:b2:b0:2e:f3:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Oct  4 19:48:21 2024 GMT
            Not After : Jan  2 20:48:21 2025 GMT
        Subject: CN=50f55dd7-cb48-4fb4-bb7a-361e8f19e35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:4c:5f:fb:b1:31:ea:31:32:49:31:5f:f0:
                    30:b3:42:cf:7c:f5:7f:72:8a:bb:b3:44:3c:d1:dc:
                    5d:d5:3c:50:ab:75:23:2f:b8:26:21:c1:79:aa:03:
                    36:8d:ac:4e:d7:cc:a5:0a:1f:e5:42:99:29:b4:cb:
                    c2:85:ae:1e:0d:e7:d0:24:f2:c1:84:8a:f0:9a:b9:
                    03:90:69:db:ef:02:31:45:f5:63:e2:10:58:c9:d5:
                    4f:86:71:dd:e9:e6:84:bb:70:85:d1:5b:b1:bc:ed:
                    55:7d:c1:e7:a6:e2:80:cf:f0:ee:7f:e5:47:e3:10:
                    84:fc:c5:64:be:9b:14:13:7d:ee:db:95:84:b3:6e:
                    f9:cf:f0:5c:21:b7:7d:d7:86:35:99:f7:ca:eb:17:
                    64:35:9e:e8:91:0f:02:fc:16:7b:1d:00:7a:23:5b:
                    cf:ed:fc:39:cc:4c:86:29:a6:47:16:16:b6:eb:52:
                    c5:e1:08:cc:38:9a:ac:82:f3:82:2e:e5:4e:2e:99:
                    94:5f:55:db:ba:fb:10:fb:fe:f7:e0:ce:90:be:ce:
                    41:6d:6a:90:ed:7f:33:fb:a1:a8:ce:74:69:94:55:
                    4c:4e:ef:03:5b:62:fa:7b:f3:38:19:c3:a0:bc:ff:
                    cc:14:c7:a3:dc:46:22:e2:2e:cf:7b:39:1e:cb:10:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:02:B7:E7:44:20:90:20:34:02:18:DF:91:06:A4:84:50:25:A2:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.157.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:ec:29:b5:16:80:91:33:e4:2e:9c:62:08:e5:38:c7:20:
         9b:90:63:25:26:b5:4f:dc:95:38:83:35:84:12:ab:24:67:8f:
         cd:ca:51:01:da:28:e8:f6:a6:8f:08:5f:c8:dc:3d:60:74:58:
         5c:ca:8b:ac:66:0f:15:01:e3:88:4c:d3:96:ca:96:41:bd:e8:
         8a:30:39:50:65:33:9d:3f:69:77:22:62:52:15:1a:fe:9e:38:
         fb:c0:ef:91:0b:ff:b4:c6:00:32:11:6a:10:6e:f8:e0:a3:99:
         43:cf:cc:93:03:a3:5a:25:86:3e:5d:b5:7e:34:a8:8e:1c:75:
         cd:19:23:f0:9d:f5:94:ed:e3:bf:fc:45:6c:ae:e5:cc:5a:29:
         0f:99:d2:5d:92:7b:4f:d2:0c:0a:a1:8d:bc:2a:bb:66:15:16:
         ac:31:0f:82:93:e2:df:fb:e1:e1:19:20:2b:cd:31:4a:78:b3:
         8d:74:bc:29:ad:db:09:cf:d8:18:64:8b:9e:4c:1d:5a:39:26:
         94:47:f7:51:2f:d9:e3:49:e1:fe:86:22:2b:6f:3e:ee:90:2a:
         65:fb:94:c6:ec:8a:ca:24:ec:e5:6e:95:43:6e:b6:fc:d6:79:
         a8:d5:98:54:99:f7:17:b4:66:ec:88:44:62:69:c3:88:c7:2d:
         0c:7d:72:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:26 2024 by rpki-client on console-fra.rpki-client.org