Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa
File:                     713f68d8-8447-3185-ae18-2325ad6b61c4.roa (raw, json)
Hash identifier:          qMze3AfHmEKBHBATh2L2uZehdIICkbdmW4hmDNuoHqA=
Subject key identifier:   5F:B3:C7:40:B2:F4:41:E7:DB:5C:BC:2E:F6:E2:49:C1:2C:85:CB:0E
Certificate issuer:       /CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
Certificate serial:       010D0C9F43285847BC66845861C19AC785F96500
Authority key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa
Signing time:             Fri 01 Nov 2024 14:58:29 +0000
ROA not before:           Fri 01 Nov 2024 14:58:29 +0000
ROA not after:            Thu 30 Jan 2025 15:58:29 +0000
asID:                     18671
IP address blocks:        152.44.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:66:84:58:61:c1:9a:c7:85:f9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
        Validity
            Not Before: Nov  1 14:58:29 2024 GMT
            Not After : Jan 30 15:58:29 2025 GMT
        Subject: CN=8670f81f-5236-49e8-84b3-ab4cdb57e8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:d1:7a:37:5a:87:10:de:8d:b9:49:f4:8c:
                    15:35:94:80:b9:83:47:c1:d6:83:46:e3:1e:95:1d:
                    8d:15:64:8a:a1:e6:df:e1:3f:06:5e:ea:07:62:5f:
                    c6:9b:8f:fd:2f:7e:f7:34:69:87:55:04:0f:48:dd:
                    31:03:05:02:1f:3a:49:c8:f6:6d:06:c7:1c:86:e6:
                    58:ff:76:bf:5e:39:8e:21:ea:89:1c:82:be:61:72:
                    1c:1e:2a:42:87:9e:46:ae:0a:1e:f4:68:ef:fb:87:
                    53:7c:7a:08:11:b6:51:d7:15:43:f9:87:5f:7c:5c:
                    42:1a:4f:96:ac:e2:c4:c2:b6:f7:11:3d:97:b6:f0:
                    64:f3:02:93:e6:d5:e8:f2:99:bc:22:93:3e:93:fd:
                    6e:9c:5b:2c:f6:b3:2b:44:38:f4:42:18:62:e9:fe:
                    7a:e6:67:73:0c:e6:05:d1:e2:06:4e:24:8b:66:40:
                    6f:3b:a6:67:16:97:fe:63:3b:d6:41:af:d5:87:75:
                    cd:18:8f:6b:d3:ff:f9:90:1f:1b:b1:1f:17:2e:99:
                    c0:f9:e7:31:a1:44:b1:d6:65:03:c0:1b:bd:77:e4:
                    f0:84:8b:90:44:4e:8c:df:f7:9f:b8:fb:8d:26:70:
                    21:41:ea:d5:d0:aa:fe:fd:d8:ee:38:2e:56:94:b8:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B3:C7:40:B2:F4:41:E7:DB:5C:BC:2E:F6:E2:49:C1:2C:85:CB:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl

            X509v3 Authority Key Identifier:
                keyid:60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:db:61:ff:b2:36:c6:09:24:7a:b9:7f:54:9c:f4:6b:ff:90:
         1a:6e:29:eb:be:1e:c0:52:58:d3:df:ea:d8:44:e2:51:e7:0f:
         60:35:2b:a3:86:df:f2:3b:4f:c6:bb:f3:a2:2f:f4:fe:6f:34:
         69:ef:74:9a:aa:0f:ca:0c:56:19:b6:04:13:3a:cf:e1:6f:41:
         8e:17:2b:e7:6c:5c:6b:e1:31:b8:b5:fc:61:f8:46:16:d7:79:
         24:b4:ef:57:e3:c2:09:59:b1:65:d2:dc:56:fb:e0:8a:7f:58:
         7b:03:63:56:26:4a:d3:92:bd:a8:b3:f4:85:62:8e:4d:47:44:
         77:9e:53:5c:0a:5d:36:fe:d2:d4:2f:6f:d9:61:2b:59:a9:98:
         e9:d9:99:4a:1f:03:29:3a:58:21:ae:8c:51:30:89:30:23:c0:
         c0:79:0b:42:de:ef:33:06:aa:ea:19:da:a1:c9:9d:b9:8c:78:
         53:c2:fc:05:c1:68:e8:f0:9a:a0:06:72:6d:bf:2d:40:8d:36:
         0f:9d:71:07:81:07:43:8c:e6:92:2b:2f:e0:a1:64:f0:fd:af:
         04:be:24:52:f4:29:59:a4:1d:01:ff:fb:be:e2:5c:ca:cf:9d:
         62:a5:11:96:bb:8e:3c:0a:4f:7f:b0:26:b5:3b:81:84:f1:2e:
         f7:ce:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:03 2024 by rpki-client on console-ams.rpki-client.org