Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
File:                     d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa (raw, json)
Hash identifier:          qibvL79vM7MYB7omzHmsVB9IvZaKMRbN7zKF4JpHfLc=
Subject key identifier:   B2:7B:39:80:16:F1:A5:85:65:34:B9:ED:DC:58:19:28:19:42:E7:1F
Certificate issuer:       /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial:       010D0C9F43285847B7DEDAEF7388AA1A6FB6D740
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
Signing time:             Thu 31 Oct 2024 00:01:54 +0000
ROA not before:           Thu 31 Oct 2024 00:01:54 +0000
ROA not after:            Wed 29 Jan 2025 01:01:54 +0000
asID:                     14702
IP address blocks:        141.221.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:de:da:ef:73:88:aa:1a:6f:b6:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
        Validity
            Not Before: Oct 31 00:01:54 2024 GMT
            Not After : Jan 29 01:01:54 2025 GMT
        Subject: CN=46faf995-5b52-40c9-b2ec-8c2a731622d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:af:9f:45:11:90:79:a4:69:26:0c:4b:24:
                    e2:6f:6e:6c:13:fb:6a:3a:5d:88:fd:ca:13:4a:62:
                    ee:b8:f0:bc:44:da:80:ed:53:56:aa:f1:a0:01:2f:
                    7d:2f:19:cd:b1:9e:cc:68:b8:71:a0:6e:6b:8b:0f:
                    70:dd:35:ed:e9:9c:2e:e4:4e:b9:55:66:8f:66:5d:
                    66:0a:41:e6:40:e3:56:c6:0b:35:5f:d5:12:d7:25:
                    d9:de:c7:0d:ca:a4:cb:be:d5:37:e3:f1:d6:35:37:
                    46:33:0c:43:fb:fc:0e:3a:58:dd:86:7a:99:00:d2:
                    8a:bb:a9:ae:c3:b0:81:64:fc:b5:15:c4:c0:da:00:
                    6b:95:a3:64:25:34:ba:81:47:2e:46:26:1a:30:94:
                    72:a7:d5:a3:6e:0c:bc:06:73:63:09:d3:58:57:af:
                    47:aa:8c:26:ca:c2:f3:27:39:63:a9:f3:d8:bc:67:
                    da:bb:20:a0:32:36:f3:3c:49:08:31:cb:1c:f1:91:
                    2b:60:ca:0f:00:03:8e:a8:d0:c6:19:fc:43:88:91:
                    fb:8a:f4:2d:91:d4:5f:9c:48:b5:75:ff:6d:cb:e4:
                    66:30:07:39:23:0a:ab:af:3e:fa:54:39:dc:66:6e:
                    af:f8:e2:7f:ff:f2:b8:d5:36:94:c0:a1:30:2b:d3:
                    b4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:39:80:16:F1:A5:85:65:34:B9:ED:DC:58:19:28:19:42:E7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:23:de:62:31:7f:67:31:79:86:87:26:41:68:6e:08:63:ff:
         dd:81:aa:1e:96:92:4a:e5:49:6c:55:69:97:7b:07:bb:d6:3b:
         fc:0e:5a:39:e1:6f:50:40:c8:6b:c6:07:4b:55:6e:b2:75:7f:
         b5:82:b3:18:cf:96:6f:3e:7a:49:4b:79:2e:09:4d:5d:bd:4c:
         86:95:9e:c4:6b:19:bd:f7:4f:17:44:de:a3:c7:ec:1d:0d:bc:
         74:f1:d1:45:4d:da:81:13:c6:b6:e7:0d:3c:f6:ba:1e:00:b5:
         29:13:d2:cd:4e:70:ec:b8:e4:72:ec:38:93:1e:6b:20:c7:0d:
         67:da:cd:a1:96:55:60:f6:81:47:41:b0:35:06:97:64:c8:40:
         04:89:eb:18:aa:47:73:3d:6d:97:7c:1d:d8:e7:2b:13:63:bd:
         f6:c5:60:be:83:7f:42:a8:80:2d:4e:1a:eb:03:9c:c7:22:2f:
         90:00:fd:aa:7d:58:d8:75:3f:93:2b:68:e3:f3:ce:89:ee:6e:
         f9:cf:c3:93:b3:59:28:91:e8:7e:38:86:72:e1:74:26:ce:be:
         fc:a1:b8:89:ba:bf:bd:07:9b:e5:c9:c3:20:7c:0e:51:fc:d0:
         2e:5c:20:0d:8d:d1:d1:fc:9e:0a:45:0e:93:7c:ff:f6:28:8a:
         6a:89:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org