Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa
File:                     75b7045f-c36c-37c2-b78d-396dac2abcf6.roa (raw, json)
Hash identifier:          0bPQBZ0ggUq5CsN4CHo9zQUYYUlenmhyPzKjbPO4140=
Subject key identifier:   E5:3D:2B:FD:3C:1A:E9:21:FE:53:F3:13:0C:AD:88:83:B4:59:DB:15
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F43285847E1F35811DFE038ADBFB12A80
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa
Signing time:             Fri 15 Nov 2024 01:47:08 +0000
ROA not before:           Fri 15 Nov 2024 01:47:08 +0000
ROA not after:            Thu 13 Feb 2025 01:47:08 +0000
asID:                     931
IP address blocks:        128.254.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f3:58:11:df:e0:38:ad:bf:b1:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Nov 15 01:47:08 2024 GMT
            Not After : Feb 13 01:47:08 2025 GMT
        Subject: CN=656b5d81-a4c6-46e2-8637-8166a42a8a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:0a:5a:84:f0:e9:6b:dc:d9:4c:84:a9:be:
                    b9:75:cf:b8:11:c9:f6:7e:54:aa:55:89:c1:08:19:
                    f9:2f:13:73:67:0c:88:24:fd:e9:e6:ca:94:2d:dd:
                    de:0c:0b:a6:00:f7:2b:e5:77:8d:ba:f2:0e:d2:0e:
                    74:2a:9a:84:0d:6e:11:c9:a0:cc:6e:2e:68:5b:73:
                    88:4c:df:4a:0b:e6:7c:88:0e:be:ab:24:86:8f:39:
                    0f:b3:d3:9b:a9:de:17:c0:f6:0d:83:f4:39:e6:6d:
                    92:46:ee:e8:9e:c3:e8:93:83:f7:69:50:82:e4:eb:
                    9c:35:9a:c5:bd:d6:30:dd:fb:30:f4:4d:39:02:cb:
                    ec:cf:70:32:e0:f0:c3:b0:a5:1e:cc:1b:ef:e6:28:
                    5e:af:ad:e2:ae:df:ae:6f:85:30:2b:55:74:8a:01:
                    71:71:03:25:4b:a2:89:7c:77:c0:06:eb:87:39:3b:
                    00:97:1e:44:89:27:e6:13:08:e0:34:24:09:cc:b2:
                    dd:a4:cc:c5:82:db:63:0e:d6:25:b3:0c:f8:53:ba:
                    31:e5:4b:8b:3d:89:f0:bc:19:c8:26:68:39:c5:7a:
                    a8:c1:38:8d:31:3a:9a:cd:b1:80:67:28:a5:b0:43:
                    c6:9c:40:97:2a:91:99:ef:b1:12:50:80:f0:93:c5:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:2B:FD:3C:1A:E9:21:FE:53:F3:13:0C:AD:88:83:B4:59:DB:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:81:c6:28:be:f4:18:4e:98:e8:bc:83:bf:2d:62:25:61:5f:
         38:ec:50:69:15:ef:01:ef:4a:17:44:db:5d:34:41:83:a9:38:
         e1:77:60:1a:04:d1:5a:ed:2e:75:9d:88:72:d5:0b:31:e9:84:
         70:b8:5f:be:34:74:52:61:4b:ea:f0:17:20:57:4f:2c:52:4a:
         92:d1:36:85:b6:b8:31:54:90:82:9e:d9:30:53:aa:d9:19:a3:
         dc:87:ec:b4:c3:24:d7:7e:32:4f:30:0d:18:6a:ea:15:68:ac:
         1d:c5:f6:ba:b5:63:63:7b:45:7e:5f:85:82:c8:2a:dd:f7:2e:
         f3:cd:05:cd:f8:a4:95:52:74:8d:7a:db:55:c9:06:d5:86:4e:
         de:bc:44:02:19:47:61:b0:38:e4:46:49:cf:78:78:50:95:bd:
         79:14:1d:cb:ba:af:26:8f:95:5d:7e:c3:ea:5f:d6:83:37:b0:
         ea:33:0a:b5:f9:a9:c3:ef:aa:27:bc:82:5c:b6:ee:97:52:ee:
         4d:d5:a5:9f:22:fa:eb:f4:f6:2a:f5:fc:8d:3e:55:e5:00:06:
         76:26:6e:74:bd:84:c6:2c:72:f1:5c:5f:34:cb:96:cb:34:74:
         a6:45:47:2c:73:b0:13:72:45:53:43:00:c2:75:13:24:a2:da:
         78:00:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org