Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa
File:                     1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa (raw, json)
Hash identifier:          fCBdSlcqVz/kNzWltIZmG+y9Sxv/JIoPZo6HzxoxJ+8=
Subject key identifier:   08:C3:43:1B:15:8C:79:75:3F:5C:8B:BC:B2:4A:21:31:45:C9:DC:35
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858476E0102A199D7EBBC214795C0
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     393740
IP address blocks:        147.124.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:02:a1:99:d7:eb:bc:21:47:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=79f6d643-394c-47e3-93b7-0ffa2ad690bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:78:55:bc:5e:ac:5e:f1:f4:82:e0:0c:93:d2:
                    34:34:39:80:ce:e8:bf:02:ab:89:82:3b:16:d0:68:
                    8c:2d:f0:a7:d2:b2:b5:26:0c:e6:a3:07:35:67:d9:
                    bb:f6:54:76:e2:47:fe:52:25:c7:a2:73:a0:07:c8:
                    83:f8:b2:12:4d:4c:24:45:d9:f4:74:da:20:43:b8:
                    b2:58:43:28:2f:71:81:04:6e:06:b2:3d:de:14:54:
                    db:b6:ab:e5:bc:63:60:33:73:6f:c5:77:0f:6c:7f:
                    e8:86:aa:0a:83:61:85:42:83:6b:0c:00:66:2c:f5:
                    bf:e3:c1:48:eb:77:93:13:f0:d8:32:c7:b9:2f:e5:
                    71:6b:e6:4d:71:44:54:f0:41:7d:2a:00:b2:65:7a:
                    58:ad:af:22:15:fa:d6:1e:61:bb:ae:f6:83:94:b6:
                    e7:41:e8:82:da:c9:48:41:c9:27:8a:8d:52:ff:dd:
                    f7:d4:af:4c:a9:69:cc:95:b1:a8:9f:37:5c:fb:8b:
                    d4:f9:72:f4:3c:32:1c:ba:37:25:32:f8:4f:a1:d7:
                    be:7d:43:da:cd:3b:5e:86:e9:d2:3b:ce:1a:9c:52:
                    c9:57:2f:db:67:64:b8:f1:19:28:92:de:c0:9e:59:
                    b6:68:32:eb:8a:fd:ff:69:27:49:b1:f3:17:72:37:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C3:43:1B:15:8C:79:75:3F:5C:8B:BC:B2:4A:21:31:45:C9:DC:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a1:32:06:95:aa:15:f9:df:73:3c:45:8c:1b:9f:93:fa:32:
         5a:06:0b:b5:8f:42:de:3d:a8:0f:cb:3a:5b:76:83:8d:e0:26:
         92:41:c2:db:c2:76:78:57:af:ef:8c:ef:22:20:c9:3b:d5:1a:
         45:ba:f1:2b:13:97:8b:6b:cd:f9:c0:65:19:f9:af:46:f9:8b:
         7c:f7:00:84:92:6a:a4:68:b2:5f:c1:d4:5d:b8:68:28:a3:c2:
         d6:75:32:2e:ad:46:3d:63:05:71:a6:5d:07:d3:ca:00:16:52:
         e7:ff:47:cd:30:8c:7e:ad:ac:a9:30:54:a6:f8:78:05:55:8d:
         9b:e3:85:c2:84:c3:a9:c8:93:08:f0:ab:f2:92:c4:76:6b:94:
         0a:ba:3b:c0:e8:79:fc:9f:29:e6:4b:0d:bd:0a:32:54:c3:5d:
         fb:74:3f:93:18:f9:e1:7c:29:3c:0d:df:80:7c:35:78:b6:dc:
         23:34:09:a4:d2:d5:b9:82:56:7d:d1:7f:50:98:e4:2b:fb:2b:
         ec:75:31:01:e6:3d:4f:62:a5:12:4e:11:5a:b4:8c:f8:65:24:
         fa:13:bc:8c:72:91:c5:42:59:f4:31:d3:bb:36:d9:f3:3c:75:
         22:2c:55:88:f0:fc:cf:e6:55:c0:3c:3e:6e:4d:b4:37:fe:3e:
         11:fb:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org