Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
File:                     a684e03c-762f-380d-9364-a51ce895efa3.roa (raw, json)
Hash identifier:          /tH94KR7/9RrSzlJk3H8N6rMTS7jg3PjpH7xtyEpau8=
Subject key identifier:   1B:46:BA:27:86:15:FB:87:9B:C1:5C:3F:E5:79:7D:8B:4B:16:38:05
Certificate issuer:       /CN=7a0faf4a-643d-4023-8090-81f838253675
Certificate serial:       010D0C9F43285847F4580CA59DB843FBB0982940
Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
Signing time:             Thu 21 Nov 2024 15:54:36 +0000
ROA not before:           Thu 21 Nov 2024 15:54:36 +0000
ROA not after:            Wed 19 Feb 2025 15:54:36 +0000
asID:                     26214
IP address blocks:        148.59.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:58:0c:a5:9d:b8:43:fb:b0:98:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675
        Validity
            Not Before: Nov 21 15:54:36 2024 GMT
            Not After : Feb 19 15:54:36 2025 GMT
        Subject: CN=b60cda2d-ff73-4eee-b266-3c8bb86639c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:67:b7:4d:20:45:5d:f8:4d:2a:12:fe:28:
                    82:63:48:78:c9:7d:5b:56:1c:d0:ac:b0:c2:08:73:
                    1e:45:21:2d:86:7f:40:59:dc:71:cb:36:d0:7f:a4:
                    8e:5e:af:80:2c:51:99:1d:84:e0:70:74:6c:e1:0e:
                    70:26:a0:0e:7c:3c:0f:fe:38:da:6c:4a:fc:81:05:
                    25:ab:62:f0:34:09:e8:01:ff:d2:e0:0f:33:18:58:
                    f1:bd:61:d6:37:61:ed:c1:dc:4d:39:2a:ef:b4:b5:
                    e8:bb:22:ae:c9:a8:72:0c:c9:d0:57:fb:8d:28:3c:
                    0b:2b:16:45:ad:65:e3:2e:31:31:28:97:8c:18:ca:
                    92:31:db:b2:f7:33:68:44:d0:87:7b:66:2b:0e:27:
                    1d:2b:30:e8:55:98:75:01:84:5c:7f:b8:7c:97:6c:
                    ad:ed:5a:a2:92:32:12:93:e9:09:44:ec:96:3d:22:
                    d1:88:24:c1:7b:9e:39:19:81:d2:99:c1:06:2a:2d:
                    93:f6:bc:55:c3:d2:15:34:01:8e:03:0e:0b:3e:72:
                    03:71:f5:4e:c7:05:69:d3:47:9e:f6:33:c5:2a:5e:
                    6a:13:a8:53:a4:24:40:70:33:78:53:f0:05:a9:84:
                    00:86:4e:87:65:9a:14:3b:f6:8c:64:3b:61:33:d2:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:46:BA:27:86:15:FB:87:9B:C1:5C:3F:E5:79:7D:8B:4B:16:38:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl

            X509v3 Authority Key Identifier:
                keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:dd:c0:95:a1:f6:3f:d1:f0:c5:7c:76:b5:66:90:c6:18:
         a2:aa:7a:18:be:5a:0d:f6:c3:65:da:8a:04:a5:71:43:8b:b6:
         4a:11:45:e4:53:10:2d:3c:3c:c9:7e:34:fe:64:32:c1:8b:f9:
         cd:ea:8d:4a:63:f2:3c:bd:18:df:1d:ee:54:b2:6c:c5:06:3a:
         6a:04:4b:6c:d2:cf:e6:7a:83:2f:5c:ca:f9:3c:db:d9:ce:b7:
         83:64:f2:c7:f6:c5:84:98:24:2a:3d:28:4e:c6:eb:7f:67:64:
         5c:5c:6f:5e:51:d0:da:1e:b5:dd:c7:53:7e:8c:d9:26:da:02:
         c7:f2:23:df:a1:6a:0a:2b:1c:67:16:4c:e8:95:5d:fe:7e:d6:
         07:cf:8c:d7:d2:49:7c:70:7c:69:e8:d5:40:3a:30:f9:2f:58:
         18:a4:32:77:99:4a:46:68:98:ce:75:1b:e9:fc:e1:e4:bb:45:
         57:67:44:fd:f8:a9:bf:d5:99:a1:98:ba:e5:b3:27:cb:10:84:
         5d:3a:f7:4a:f7:01:92:81:dc:6c:f9:9b:b7:22:e7:2b:4f:cf:
         35:2b:88:89:4d:1d:4f:a2:fb:02:68:d2:67:30:f4:30:24:f8:
         a4:6b:36:a7:6a:11:5d:93:6a:21:e3:bf:72:c4:a3:7b:34:8b:
         9f:b3:d2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:21 2024 by rpki-client on console-fra.rpki-client.org