Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa
File:                     81abf99e-6226-34a8-a0dc-3accb6842858.roa (raw, json)
Hash identifier:          KdNF03pUxNiyxkeDmHlQ2m8HS+AvEeXCiB+FSE1/iNU=
Subject key identifier:   F7:16:21:EF:AA:42:70:BC:9B:E7:56:C7:AA:CF:AF:30:B8:6B:57:58
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F43285847BC2C126D5FD2A83FDF851600
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     26658
IP address blocks:        146.148.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:12:6d:5f:d2:a8:3f:df:85:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=3c130824-1cae-4f1f-8bcf-38b8b01f9a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:11:71:2f:d5:15:25:bd:bf:34:af:e3:45:
                    b8:de:b5:96:f5:f5:95:f8:b8:a3:f6:f6:cf:76:fe:
                    6c:6d:0c:db:97:e8:eb:c4:db:47:89:68:1e:06:3b:
                    1c:68:63:d0:00:d9:56:c3:40:2e:d4:e6:be:e1:64:
                    7d:51:71:61:52:de:48:f6:88:16:49:40:a9:f7:bc:
                    8c:f1:8a:b0:bc:65:cf:d9:a0:3d:b0:75:7c:41:fe:
                    e1:b0:5c:2f:58:a5:ed:93:51:53:61:5d:d9:a3:fe:
                    fd:59:56:25:0f:a7:36:08:34:79:dd:51:34:ab:5c:
                    f9:2b:73:2b:2e:44:17:d6:72:14:b4:f6:e8:dd:45:
                    3b:78:a0:83:ed:7b:b7:06:b8:e9:f4:1b:b9:fb:6f:
                    27:9a:11:19:ec:a1:3b:63:e7:8a:73:2e:b9:73:86:
                    7e:ef:69:45:d6:d3:ac:81:a2:08:83:fd:f7:cd:a6:
                    fe:b7:27:f3:09:47:7d:d4:80:4b:30:d3:eb:9c:32:
                    fd:f8:1c:66:6c:ea:4a:29:cd:96:72:e2:85:53:69:
                    db:f4:55:2d:ea:a7:c8:97:9d:4f:31:2a:0c:70:b8:
                    0e:d3:68:a3:6c:be:83:3c:bc:5b:44:a4:eb:af:8a:
                    cb:de:b4:e2:02:cd:21:e2:bc:ea:3f:2f:68:35:63:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:16:21:EF:AA:42:70:BC:9B:E7:56:C7:AA:CF:AF:30:B8:6B:57:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/81abf99e-6226-34a8-a0dc-3accb6842858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:ff:e4:1f:99:29:6b:15:02:c8:fb:f3:2b:41:66:2d:85:
         3b:94:d4:92:ca:aa:04:e2:9c:f9:f7:38:18:8a:10:e9:78:59:
         00:2b:fc:f9:77:69:24:bb:f1:5a:13:8c:92:87:4c:6d:bc:66:
         c1:22:0e:ed:45:9a:f4:b5:ed:97:93:02:1a:9d:89:6d:ea:18:
         19:0a:84:35:80:31:d5:1f:74:79:5f:42:b3:f9:e2:8f:ea:ff:
         ca:74:26:60:21:fc:20:00:3d:4f:58:5c:7d:47:ea:9f:b4:33:
         e5:ce:3f:c3:55:1e:3e:08:c6:7c:17:ad:c6:9a:41:68:12:2e:
         64:40:69:f9:dc:5d:59:a9:9f:31:2e:ef:96:17:39:32:d1:69:
         d6:97:56:fb:29:73:a0:96:9f:e0:91:3c:0f:46:14:b9:87:86:
         29:f4:ec:c8:b9:77:db:aa:c9:32:6b:0f:09:9f:6d:92:5e:0c:
         d7:25:a3:e0:18:ed:eb:99:55:2b:5d:9e:88:b2:f2:e8:78:c9:
         25:73:3a:49:64:21:cd:92:f4:85:94:3d:45:c1:57:44:c6:09:
         38:4b:4d:7b:4d:59:c4:7f:0f:96:2f:22:bf:d9:fb:16:0b:a0:
         df:94:1f:e2:93:f4:b9:a4:e9:56:18:ef:9a:f2:3a:0e:43:dc:
         e8:cf:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:27 2024 by rpki-client on console-ams.rpki-client.org