Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
File:                     1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa (raw, json)
Hash identifier:          sar51iea4zZojQ5R8Yap0uqcuJV1chw0RTgZ1ZMXjyg=
Subject key identifier:   8D:FE:0C:F8:59:FA:8A:90:BE:4B:D3:E5:70:53:B8:6F:1E:1B:F4:F3
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584733609B2D53D8AEF872B50900
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     11650
IP address blocks:        155.94.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9b:2d:53:d8:ae:f8:72:b5:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=ff190178-14ba-4853-a459-8274901a4a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:cc:de:ac:34:72:a8:2e:23:e9:32:79:6e:
                    ba:9e:2f:52:c7:70:25:e3:41:d3:93:0f:e9:95:c6:
                    2d:f4:02:6e:e8:05:84:35:90:b7:d0:64:79:79:9c:
                    3e:85:54:0b:7f:42:84:12:c9:7f:66:98:1c:4a:71:
                    47:19:5b:d9:62:be:fd:01:c1:78:92:48:2f:03:9e:
                    28:2b:49:49:5c:70:b9:9d:02:4d:68:10:27:10:0b:
                    00:b3:58:f8:8a:40:ca:db:44:e9:31:49:1e:ee:69:
                    53:2d:f9:74:86:0e:3f:19:83:d4:68:4c:9c:05:b6:
                    55:b4:24:3d:bc:9a:a1:5e:bc:c2:5b:7d:70:1e:04:
                    23:a6:10:13:5c:71:f0:b4:03:54:2c:f9:dd:33:61:
                    85:b7:e3:a2:a0:15:dc:00:3c:3e:80:52:0c:00:ca:
                    97:23:9d:1d:10:6d:b3:92:22:4f:0d:e9:27:4d:a7:
                    42:17:ef:26:6f:01:12:28:f3:35:c6:19:c3:1f:a6:
                    da:9a:f4:f6:82:c2:0a:5b:0a:45:64:40:c3:6d:e9:
                    3d:e1:e1:db:ff:3b:08:e1:d4:7a:d6:6b:2c:e7:23:
                    1b:83:ad:2e:60:b2:de:16:46:af:53:3f:60:e6:a2:
                    65:8a:3a:43:c3:0b:93:3a:aa:ea:c3:46:7f:14:48:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FE:0C:F8:59:FA:8A:90:BE:4B:D3:E5:70:53:B8:6F:1E:1B:F4:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/1d93a4dc-14c2-39c2-9c23-d5cdeb9cc2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.94.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:19:1f:78:fc:7f:68:3a:5d:58:76:ed:9d:8e:c1:d2:fa:
         59:1f:ac:d9:96:54:15:2d:50:59:07:9c:56:20:29:47:dd:86:
         53:b8:0e:39:8e:5b:b4:97:2b:ed:e8:ae:6c:fa:4d:28:97:3c:
         bd:19:70:7a:1a:e5:40:11:ff:38:a3:c1:e2:b6:15:66:97:15:
         b3:20:4b:32:5d:b9:eb:4b:a8:03:ac:92:2d:1d:d3:9e:e4:08:
         92:81:7f:9a:69:03:96:a1:ad:f9:04:b3:a1:dd:9d:5a:d0:ad:
         15:28:97:b6:6c:8e:77:32:ca:90:a8:fd:bd:b6:b4:23:f2:f5:
         90:e5:33:24:6f:8b:a2:f5:48:cd:9a:fe:d1:67:92:30:e4:53:
         be:b8:17:cb:1f:4d:4e:3d:ac:42:b5:43:94:e6:35:5c:2b:c0:
         80:f9:0b:4a:19:f5:8d:4d:dd:c8:e1:af:1c:58:bd:57:4c:28:
         10:34:91:d0:4e:f3:a3:05:3d:ea:ee:18:18:03:ce:24:4c:b2:
         a2:36:51:9c:da:56:6b:ee:42:f3:5d:f8:ba:af:6f:c0:70:6d:
         60:04:99:af:04:33:d5:b2:f3:a9:50:92:b4:59:2d:19:a3:3d:
         9a:02:c3:58:cb:09:31:67:f2:d3:61:e3:d2:ac:a3:f3:9f:eb:
         94:7a:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:23 2024 by rpki-client on console-ams.rpki-client.org