Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
File:                     4bdc7401-6d0e-314a-aae3-b523f7944319.roa (raw, json)
Hash identifier:          /HJi10aE3kQ9upyqYdHNnd/DKZ6H9niRbM9J4o3Feo4=
Subject key identifier:   61:37:88:8D:FF:A3:F7:22:DD:E5:33:72:0C:D3:B6:19:91:27:C4:0A
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F43285847A72687A2B2DE9CF61868ACE0
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa
Signing time:             Fri 25 Oct 2024 00:17:35 +0000
ROA not before:           Fri 25 Oct 2024 00:17:35 +0000
ROA not after:            Thu 23 Jan 2025 01:17:35 +0000
asID:                     8987
IP address blocks:        192.157.36.0/23 maxlen: 24
                          2602:f7db::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:26:87:a2:b2:de:9c:f6:18:68:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Oct 25 00:17:35 2024 GMT
            Not After : Jan 23 01:17:35 2025 GMT
        Subject: CN=25a479af-d337-4dbd-b817-b019386ac596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:e5:ae:14:b4:7e:0f:97:ec:aa:eb:25:2c:
                    28:72:5a:bf:01:67:60:57:c8:60:d0:5f:00:51:c6:
                    d7:46:de:cb:cd:3e:b6:ff:0c:df:ba:24:18:51:83:
                    fe:db:e1:d3:14:a4:42:63:b7:82:2a:1d:d6:f6:3a:
                    5d:9e:28:a5:b7:50:a9:19:3c:74:ea:9f:0d:1a:db:
                    ba:98:15:be:32:f8:31:c8:fc:6b:8c:56:2b:01:83:
                    b4:eb:75:5d:f1:46:54:99:b4:e7:4b:85:7c:80:6e:
                    db:b5:d4:88:5c:5e:0f:46:84:c9:9e:a6:ea:35:6b:
                    6a:75:8a:f8:ca:e8:21:44:7a:db:a4:2a:64:b3:79:
                    50:5b:d2:58:13:f0:8c:e4:97:46:da:a6:19:10:89:
                    94:b3:16:2d:7c:63:26:26:a0:b8:84:ba:8a:5a:34:
                    ae:2f:11:bc:3a:28:99:94:af:6c:91:79:5c:90:a3:
                    6b:03:f4:80:c4:35:25:49:2e:22:c3:56:dc:2d:c9:
                    28:65:5d:56:fc:f1:23:a1:df:8a:3d:d1:ad:b9:3d:
                    0f:d6:44:99:aa:13:9a:2f:e7:f7:84:73:27:a8:2f:
                    ae:b7:d6:bd:0c:90:dc:33:69:5a:eb:c7:cc:d0:87:
                    0a:f0:df:66:7e:da:bb:a6:30:18:6c:2b:7b:10:ce:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:88:8D:FF:A3:F7:22:DD:E5:33:72:0C:D3:B6:19:91:27:C4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/4bdc7401-6d0e-314a-aae3-b523f7944319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23
                IPv6:
                  2602:f7db::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:d4:1a:d4:f7:d7:3d:26:d6:f0:63:ed:b9:07:91:91:09:
         ff:60:6b:64:0d:d1:01:b2:9c:ec:be:58:af:f1:03:ce:31:c9:
         bf:bc:55:45:cb:20:66:ec:aa:7e:6d:21:be:78:42:89:32:63:
         e3:1b:1a:15:1a:40:ff:ad:e9:4b:52:04:be:85:23:14:10:b7:
         c2:78:30:07:df:2d:6e:29:28:cb:76:a9:7b:b9:1b:60:b4:af:
         7d:c9:73:cc:9c:a4:e9:c2:16:74:e0:bf:ad:96:9f:10:58:67:
         01:1d:2b:ce:21:8e:2c:ba:f6:c7:96:d8:b4:d8:61:a2:b4:83:
         3a:f1:37:54:3a:f7:b2:32:05:d8:ac:cb:af:88:8b:1c:03:09:
         da:e9:7d:d7:a3:72:94:dd:4e:5c:0b:f1:27:e8:6c:b2:c8:22:
         66:b2:4f:25:16:2d:ae:6c:ac:9c:58:2c:e5:d1:dd:c1:cd:96:
         f2:3d:4c:cd:e6:2b:48:f8:32:c9:ed:3b:b6:8f:3e:cf:84:79:
         9a:e6:12:b1:ca:1f:29:a9:4d:3f:6e:f1:e0:23:95:e4:97:7d:
         25:9e:14:78:f3:53:1c:73:ef:bb:8a:18:ef:34:82:ce:af:7a:
         22:1d:a3:63:59:fa:2f:c4:3d:39:de:f4:73:e9:86:7d:1d:2e:
         18:83:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:30 2024 by rpki-client on console-fra.rpki-client.org