Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4b7f60ed-8bb2-3323-8b89-1cd61070f31e.roa
File:                     4b7f60ed-8bb2-3323-8b89-1cd61070f31e.roa (raw, json)
Hash identifier:          YSXLvGKsENx5SRfxuatAR0uAi7GrLYkpkNEPhug3gnk=
Subject key identifier:   80:01:E0:4E:03:FD:FF:F6:3A:88:EB:16:FF:FA:44:9C:0C:FD:64:05
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285846DC13B30D1BB5B3D341945200
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4b7f60ed-8bb2-3323-8b89-1cd61070f31e.roa
Signing time:             Tue 13 Aug 2024 06:30:32 +0000
ROA not before:           Tue 13 Aug 2024 06:30:32 +0000
ROA not after:            Mon 11 Nov 2024 07:30:32 +0000
asID:                     26658
IP address blocks:        107.178.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dc:13:b3:0d:1b:b5:b3:d3:41:94:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Aug 13 06:30:32 2024 GMT
            Not After : Nov 11 07:30:32 2024 GMT
        Subject: CN=1e6ce22d-bfcb-41bd-9e1e-bc6c12f86dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:e5:1f:36:f4:ac:c7:b0:b4:9f:ff:bf:47:
                    bb:41:36:7d:9e:1a:75:21:21:49:a9:3b:87:c6:df:
                    b2:5c:d5:8d:ca:6b:c6:29:e9:fe:73:c4:c8:72:92:
                    a4:f7:f2:65:1f:9c:6d:32:d4:f9:4c:7d:a8:cb:a1:
                    5d:9f:9b:00:58:95:dc:dc:38:b5:32:f6:0a:8b:ff:
                    a0:36:ad:2a:ea:bb:0d:31:67:97:0f:77:cc:f1:ec:
                    46:97:cb:ff:8b:fe:3b:1a:32:90:b5:29:90:c1:4c:
                    9b:75:e9:1d:4e:74:a4:2d:2e:4d:6e:49:70:29:17:
                    9f:be:a1:73:78:7d:e6:df:b0:fc:2f:8a:ca:37:92:
                    13:f0:6e:8b:3f:8d:96:34:23:05:c9:d5:68:a5:87:
                    14:fd:b3:93:ea:7b:2c:67:63:67:fe:8e:16:fc:8b:
                    77:e9:d4:cc:aa:c0:d2:d9:19:e3:ae:b1:1c:9b:34:
                    5d:7a:c0:0d:ec:c0:3c:36:eb:b6:ab:55:c7:af:43:
                    2e:23:fa:fc:8f:96:f1:ef:03:6a:fa:58:fe:eb:1b:
                    d7:ec:f5:20:15:02:13:18:98:fd:65:50:af:fe:c4:
                    28:05:af:bf:19:96:06:dc:37:53:54:4a:47:72:85:
                    1b:94:55:0b:2c:5b:d9:67:a0:f9:04:0f:14:35:2c:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:01:E0:4E:03:FD:FF:F6:3A:88:EB:16:FF:FA:44:9C:0C:FD:64:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/4b7f60ed-8bb2-3323-8b89-1cd61070f31e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.178.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:9a:50:57:81:ce:5a:4c:f4:60:81:7c:b5:8b:e0:f0:2f:
         ed:79:97:85:ce:46:22:7e:90:c6:83:92:f1:81:c4:15:45:66:
         2a:4b:a5:f6:05:2d:ac:4c:73:7a:ad:fd:42:d8:99:49:51:a6:
         fc:17:ff:a0:ba:c6:e6:3e:58:69:9e:21:28:a7:f5:10:53:f5:
         f6:d6:6d:fc:e5:3a:45:09:25:2d:e8:a1:e0:b2:2b:eb:1b:63:
         69:e8:76:49:4b:7b:5a:8e:71:7e:ff:8b:96:16:73:7d:6d:14:
         24:b6:a4:4b:c7:cc:e7:77:17:a2:33:2e:3a:5a:44:4c:fa:01:
         16:d3:0a:cf:fb:f7:d0:03:fe:70:0a:cb:d7:0d:3c:5b:27:7e:
         58:34:59:3f:ef:bc:d5:63:45:01:74:50:3b:bc:27:22:f5:db:
         6e:57:c8:b0:72:f9:29:91:b8:7c:bf:ff:77:89:f0:ba:74:57:
         3c:73:df:f8:ac:dd:60:dc:8d:80:7f:a5:b6:68:7f:0b:d8:da:
         5b:47:48:3d:8f:10:b4:f1:8d:47:b0:9d:bf:4a:07:da:6e:44:
         67:86:ff:3d:8c:58:94:df:42:65:ea:03:61:c8:3a:32:4d:7b:
         80:6d:e1:f6:a6:fa:7e:3a:c8:1a:b3:e8:b1:d0:a6:2c:c7:ed:
         ce:97:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:23:04 2024 by rpki-client on console-fra.rpki-client.org