Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
File:                     f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa (raw, json)
Hash identifier:          2ys5DR1tifRBOPVIB+iQosOFuiAkiHhoHMOoQ0dKZnQ=
Subject key identifier:   FA:28:CF:53:89:E4:2A:9D:19:FD:29:C8:62:A1:41:36:8C:D9:28:38
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584762D65C3E285F839CBFC33D40
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     26744
IP address blocks:        147.124.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:5c:3e:28:5f:83:9c:bf:c3:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=3789be60-31b3-44fc-9d3f-e5f0257f745f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:3f:76:1c:66:61:6e:7d:a6:cd:8c:f6:31:
                    8f:9f:c0:f1:58:7d:22:d3:a9:0a:74:7f:be:18:54:
                    9c:3a:b5:77:cb:69:dd:71:e9:5b:48:9f:e8:3e:0e:
                    0a:82:04:d3:05:54:1e:1d:6a:33:76:77:ea:22:b7:
                    b8:17:aa:40:57:07:bc:1c:dc:68:ab:75:5c:89:12:
                    ce:b8:0f:48:7e:5e:32:4c:b0:17:26:00:57:d6:02:
                    6a:95:52:bd:5f:cc:64:ce:b3:39:e8:b5:92:ab:2e:
                    68:e2:d9:e7:d6:d7:46:6a:7d:45:84:f6:58:a0:26:
                    82:27:1d:b8:b0:87:5b:71:0f:0a:65:62:f4:df:41:
                    17:0a:33:b9:c0:4c:10:3e:41:ee:3c:b4:86:69:64:
                    6b:66:e1:23:0c:a3:fe:b8:2d:38:2e:e6:a6:ad:9d:
                    83:ec:ed:74:62:83:dc:a6:69:2e:81:20:66:19:5f:
                    51:b5:db:42:35:e0:4e:a5:9d:4a:bc:2c:20:c7:25:
                    3d:b6:b6:c6:cb:e8:c8:c4:9b:da:aa:6d:ac:84:af:
                    64:3b:6b:6d:1c:b7:40:9e:19:bd:85:3b:1c:a4:30:
                    9e:7f:d9:a1:a2:28:b5:df:fd:51:1c:05:48:94:27:
                    af:80:4c:89:16:37:94:3b:8d:74:ad:dc:b5:a7:01:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:28:CF:53:89:E4:2A:9D:19:FD:29:C8:62:A1:41:36:8C:D9:28:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/f77e13fe-2291-32d0-8b57-e1ff9cd4b925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:a0:ee:3a:c8:8b:53:d4:ba:98:3a:7c:97:03:56:5e:ed:
         5b:d7:e5:03:a6:7c:71:04:37:6e:43:8a:90:c1:e9:b7:30:29:
         f0:23:fa:62:38:83:42:f4:ad:2a:16:7a:22:97:57:cb:87:c6:
         08:d8:c4:ea:1f:8b:f3:51:13:6a:8a:d6:9c:32:97:30:41:2f:
         b3:e1:31:8d:3b:ef:12:8f:23:a6:2b:e7:f8:2c:8c:88:66:57:
         54:84:7d:b2:30:05:17:ac:3d:69:65:9b:c0:5f:4b:41:4c:02:
         9e:3b:f1:13:28:c4:ff:3d:ba:49:32:05:4f:42:8d:9c:65:c6:
         fd:10:1b:a5:52:23:71:6f:19:fc:69:4f:3f:f9:ac:7d:d6:de:
         ee:ff:62:e1:69:33:bc:45:7f:a9:77:df:ab:63:64:c6:e1:bf:
         c9:5a:93:48:0b:0a:35:4a:24:40:39:cf:c5:92:0f:41:e0:39:
         8c:b1:b0:e6:e1:09:a9:fc:55:10:60:18:43:22:e3:fb:4e:a3:
         7e:be:06:f6:0c:a1:1b:a3:25:d8:4c:26:23:17:0a:27:af:73:
         ee:b5:61:07:04:1b:f7:51:50:d4:c4:b1:29:18:02:d8:39:7d:
         c1:61:79:f6:13:5a:50:43:b8:6a:1c:4c:9f:d9:99:77:2c:7c:
         8d:3c:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:29 2024 by rpki-client on console-fra.rpki-client.org