Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
File:                     6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa (raw, json)
Hash identifier:          0AxAUII1CwDFDKS+cPzgf9KFnxOpeoi7kAbwDULeGFw=
Subject key identifier:   E2:56:37:51:4B:AE:66:6F:AB:5F:72:4B:EB:EF:AA:E6:F4:99:5A:68
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584767061E874193711784C82A00
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
Signing time:             Wed 02 Oct 2024 01:00:31 +0000
ROA not before:           Wed 02 Oct 2024 01:00:31 +0000
ROA not after:            Tue 31 Dec 2024 02:00:31 +0000
asID:                     11348
IP address blocks:        207.160.128.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:67:06:1e:87:41:93:71:17:84:c8:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Oct  2 01:00:31 2024 GMT
            Not After : Dec 31 02:00:31 2024 GMT
        Subject: CN=3b8f5805-dccc-4b10-a9b3-333fbcb2f860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:f6:5f:64:9e:ab:1f:39:45:09:a4:55:86:
                    d4:b4:61:8c:7c:5b:7c:2c:5b:2e:b8:2d:d4:51:62:
                    e0:65:5c:30:cf:51:b0:a4:98:51:05:ed:6f:24:e4:
                    86:20:7d:65:22:16:0d:b6:06:3a:92:61:21:8c:cd:
                    cc:2f:bc:77:36:8c:c9:d7:75:c2:61:f0:99:74:8f:
                    31:45:d5:75:fc:92:d0:56:c8:2c:bc:a8:b8:2f:83:
                    af:d9:25:85:85:08:d4:04:bc:ad:fc:cd:ec:77:8b:
                    2d:02:a7:f1:2f:c4:7d:3c:56:7a:98:56:14:f3:18:
                    9e:64:51:57:18:bf:90:1d:3b:18:19:d3:46:2b:47:
                    d8:31:59:a8:ba:ca:9a:24:da:f9:36:8b:26:e3:bf:
                    6a:3b:da:58:4f:9d:db:b8:98:73:d5:89:6b:c6:bf:
                    c4:05:3e:3f:fd:6b:5f:a9:ae:cf:4c:58:d3:c8:ad:
                    1d:63:a1:69:fc:07:26:54:b1:b8:88:a2:41:ce:d3:
                    92:52:2c:3f:62:8a:04:38:d5:4d:38:b8:55:3c:ee:
                    16:37:ac:63:3e:be:b3:84:d4:2b:49:45:a8:c7:f2:
                    d1:5d:e5:02:28:bb:20:da:bd:03:17:50:7b:8f:37:
                    1b:74:b4:55:8b:de:73:b7:3d:21:7b:58:c8:23:b2:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:56:37:51:4B:AE:66:6F:AB:5F:72:4B:EB:EF:AA:E6:F4:99:5A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.128.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:59:c4:e3:e2:f8:a2:f9:71:d6:a3:cc:0b:d4:f9:d6:f9:92:
         7f:31:fb:52:07:6e:73:19:82:0b:32:51:3c:4c:09:cc:6b:77:
         0a:ec:a6:97:97:eb:ef:a7:7e:c4:05:e9:4b:44:f5:ee:83:1b:
         e9:ec:e2:b4:d8:ac:3e:2a:0f:cf:05:10:19:7e:7a:af:2d:fc:
         a9:d6:e0:45:f5:a2:5d:75:fe:9a:38:39:2c:23:41:ba:ec:e7:
         48:af:5f:df:34:97:3d:70:e4:93:5a:63:59:f0:c3:bf:fd:5a:
         bb:72:d2:57:37:b5:11:24:c9:68:d8:47:a4:dc:24:ee:48:5a:
         2f:c5:08:41:f5:b7:43:2d:97:a0:b3:25:14:15:77:82:1c:b1:
         ba:30:aa:3a:b7:ad:2b:e6:35:da:c0:d4:67:d6:24:1a:10:12:
         04:51:b2:54:c0:cf:27:ef:fa:89:3f:1b:69:72:cb:1c:8c:2c:
         62:af:94:49:c9:af:41:2d:1a:ea:74:d5:67:e3:ab:e4:20:59:
         b0:65:ed:9d:98:a7:96:d8:49:e1:be:f4:e4:e0:de:2d:66:fd:
         3b:17:f5:0e:33:7d:f0:bb:5c:3f:78:30:fd:27:2c:cb:f8:93:
         ab:a5:5b:4d:be:fc:42:6a:d6:83:50:65:6b:62:85:be:3e:c8:
         9a:d5:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:10 2024 by rpki-client on console-ams.rpki-client.org