Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
File:                     1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa (raw, json)
Hash identifier:          w7p6j50Vo38O+3xIyOMG4aHGZZxvNjHZTRrRM7xXHyE=
Subject key identifier:   DE:1C:CB:4E:A0:4B:60:EB:14:AA:A3:6D:6E:56:A7:E7:F0:9B:99:B3
Certificate issuer:       /CN=024863fe-f941-4bf2-81d9-ad03d50aa194
Certificate serial:       010D0C9F43285847D0BE40DF7D1D16DEC254D200
Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
Signing time:             Fri 08 Nov 2024 21:51:25 +0000
ROA not before:           Fri 08 Nov 2024 21:51:25 +0000
ROA not after:            Thu 06 Feb 2025 21:51:25 +0000
asID:                     13576
IP address blocks:        204.147.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:be:40:df:7d:1d:16:de:c2:54:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194
        Validity
            Not Before: Nov  8 21:51:25 2024 GMT
            Not After : Feb  6 21:51:25 2025 GMT
        Subject: CN=26730c9a-3ced-4bfc-b240-8e9c3d5084a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:a6:89:68:e3:cf:f5:ea:d7:e5:09:f5:2d:
                    5a:1b:40:e2:7b:30:8e:41:4e:a3:f1:6b:1a:af:48:
                    c9:72:ee:ce:7d:63:4b:34:b6:5f:3b:e0:3f:a8:fa:
                    ec:4f:d0:90:04:a7:fd:3e:6a:77:58:f2:76:14:7e:
                    fb:76:79:18:15:14:df:09:ab:47:14:4f:7f:66:37:
                    9d:23:36:fc:b4:7c:1d:6f:69:0d:0f:fb:ef:40:dc:
                    5b:df:a8:2b:8a:f7:28:f3:7a:2b:80:d2:a9:92:18:
                    8a:8b:68:bc:7a:4d:5f:d8:9b:8b:d4:d9:f1:a3:97:
                    1e:60:4a:62:20:31:11:2b:55:00:47:11:87:cb:1b:
                    8a:e4:fb:d4:31:68:54:e1:4d:48:2e:b1:21:e2:50:
                    dc:47:11:b8:d4:ad:35:8b:16:c4:45:46:0e:f3:e2:
                    96:01:af:11:2e:95:eb:f1:73:e0:b1:23:15:4f:a6:
                    fc:e7:25:0e:1c:8c:7b:81:51:78:81:d1:26:d4:b5:
                    73:f6:f5:e4:e4:e1:e8:e8:e7:40:17:50:09:17:67:
                    f7:e7:03:43:83:15:ec:59:29:3a:86:a9:35:87:b5:
                    75:f3:4c:72:08:03:89:f6:9b:db:cf:93:ec:97:5d:
                    48:64:6f:b4:98:4c:ef:80:66:c3:4e:41:fa:f6:63:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:CB:4E:A0:4B:60:EB:14:AA:A3:6D:6E:56:A7:E7:F0:9B:99:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl

            X509v3 Authority Key Identifier:
                keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c3:7d:8b:53:a9:3c:ec:27:9b:df:cb:d4:c9:51:d8:aa:93:
         68:e3:65:10:bd:00:26:d7:4e:25:f2:06:75:1e:fe:0b:96:f8:
         b6:c7:95:b1:a4:e5:b5:e7:43:6a:2b:fa:ef:eb:a6:d8:b3:ed:
         8c:5f:ce:0c:9f:5a:80:82:6d:bd:ea:1e:69:d5:d7:5e:a5:a6:
         69:00:1d:1a:bc:8b:fa:98:9f:5a:a9:b6:26:2a:0f:d9:e3:c9:
         9a:e6:68:a5:b2:a3:d8:be:03:62:9c:45:c2:5c:14:1e:ed:43:
         32:6f:a2:5f:cd:3c:db:f6:9d:8d:e5:4b:4f:87:8b:be:f0:7b:
         bb:65:00:06:61:69:82:e3:ed:f4:29:3e:b3:71:73:60:fc:96:
         fb:04:61:df:07:aa:c6:f1:0c:a4:93:c0:55:13:c8:3a:d5:70:
         13:94:dd:06:46:2d:d2:9c:c9:68:e9:0e:b1:7a:ac:cf:5e:31:
         06:b3:d6:f9:bb:fa:0c:16:a6:dd:5a:d5:57:ac:e4:9b:4a:1e:
         40:10:18:d2:4a:47:34:27:05:1c:02:e2:9e:a0:e2:00:d6:e8:
         0d:6d:78:05:fb:d3:21:17:a1:5c:51:8c:42:68:9c:aa:5b:45:
         02:83:e1:77:e5:c1:6f:61:93:61:65:55:f2:e7:f6:6e:a0:da:
         9b:a6:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:24 2024 by rpki-client on console-fra.rpki-client.org