Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
File:                     a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa (raw, json)
Hash identifier:          ZEaJu8teHcs1gbT01Yv5LiKNtl/mqbndOODAmiO4CtM=
Subject key identifier:   A5:6F:A4:2D:CF:BD:7E:7F:EB:1C:76:62:37:5F:53:20:C5:17:E0:A9
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584762D65D00C8D0683580A34500
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26744
IP address blocks:        147.124.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5d:00:c8:d0:68:35:80:a3:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=2bfe882c-0f2f-4302-a7bf-89a732df4839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:0e:5a:8b:1e:83:2f:61:19:d9:e9:36:69:
                    3d:69:3f:ff:38:5b:a2:0e:75:06:15:e5:a7:96:5d:
                    6f:96:98:97:96:4e:9b:46:df:e9:fd:cd:0d:8e:ab:
                    5f:99:cf:47:32:34:1c:b3:db:1c:6d:bf:6c:14:74:
                    89:45:94:1f:73:c6:90:06:20:4b:a4:d3:89:50:6f:
                    97:22:4f:c1:ac:22:ba:20:e6:49:6e:b6:0b:53:02:
                    cf:a6:75:42:21:d3:74:9f:dd:13:6b:4e:4e:23:e7:
                    51:7c:f6:45:9a:81:d8:cd:80:9b:21:c4:6c:96:54:
                    7a:85:e7:d3:e5:19:41:7f:32:b2:b6:bb:d7:9e:a1:
                    9b:6b:f6:21:0d:41:82:7d:ec:bb:46:b0:52:a1:de:
                    8d:73:20:49:15:88:a6:2e:00:66:3e:c8:e6:80:89:
                    11:4c:12:1f:1e:3c:e5:5c:c3:f7:52:68:0d:1a:8b:
                    c1:bc:00:73:f1:34:08:32:90:28:94:76:4f:2d:59:
                    b2:1c:1a:28:c1:6c:3e:10:a4:b2:ff:7f:2b:a4:f6:
                    1f:36:ec:d4:60:a5:16:05:4b:6a:00:c9:dd:3f:38:
                    0c:62:25:dc:df:96:80:0e:98:ef:d8:64:02:32:12:
                    c3:e3:2d:c2:bc:d8:a6:1d:c3:8d:16:19:07:d3:ae:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:A4:2D:CF:BD:7E:7F:EB:1C:76:62:37:5F:53:20:C5:17:E0:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/a7a7031e-008a-34d9-a4a0-ece5e7e6dbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:ff:97:b2:d3:dd:e2:a0:a2:f2:1f:b7:bc:57:22:c9:51:
         47:41:0c:95:d8:b6:ac:93:2b:9f:e7:64:4e:6f:9b:01:85:f5:
         eb:a6:5b:16:8b:dd:7b:57:21:df:96:95:17:a4:5d:02:5d:46:
         a7:20:31:9e:7c:30:0f:e7:ed:37:20:33:3e:8b:74:35:af:bb:
         9d:a0:fd:83:bd:d3:17:b8:24:92:3b:89:0c:f6:9c:f1:ec:5d:
         26:26:d2:9e:f8:c5:ac:a6:87:16:ac:6b:28:a1:2b:c8:0b:e9:
         29:4c:13:88:ea:d3:92:3a:20:ee:73:24:b2:db:25:be:87:54:
         2f:66:96:18:79:09:6d:38:d6:0e:da:bc:c2:e0:a0:15:7e:79:
         f3:f4:8f:ee:b2:f0:aa:18:43:98:29:01:bf:9f:3d:d2:43:4d:
         6a:67:61:4d:ec:87:e0:29:57:b6:9b:fe:46:fa:a2:54:e6:c6:
         7c:93:b6:16:6b:5c:cf:44:e0:ab:af:df:dc:6e:b8:2f:2a:72:
         66:37:d7:dd:c7:58:45:72:48:0a:5e:97:c3:0a:54:3c:52:67:
         7d:65:8b:aa:ba:7a:0e:28:66:6f:e0:52:8e:a4:cb:4b:38:2d:
         aa:31:e5:fa:57:f7:78:9a:39:0a:3b:14:23:47:5b:c0:f5:5d:
         6a:aa:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org