Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
File:                     a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa (raw, json)
Hash identifier:          a6ybbiuC2Tegv9sCVQ1hFNvZ2XBic05s2rV49fDfOk8=
Subject key identifier:   70:7C:7E:D0:1E:10:25:C2:B1:29:D9:87:D1:F4:FF:5F:72:05:81:B0
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584770CB986F389214AA7BA38300
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     1742
IP address blocks:        128.103.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:98:6f:38:92:14:aa:7b:a3:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=0a956bc0-e9e7-46ea-8d81-5fd5b98a437f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:f7:a1:df:6a:c7:66:99:22:bb:48:b8:7b:
                    b6:e5:e3:15:bd:b7:8e:08:d4:cc:d6:0d:61:7b:d4:
                    e3:42:82:14:1a:4b:dd:98:35:4f:26:6d:c9:a0:50:
                    5a:07:50:e2:5c:53:d2:3a:de:23:3f:75:81:b5:d4:
                    fd:8a:83:90:46:fa:a9:0d:c9:4a:92:ac:ca:bf:b7:
                    e1:a1:71:cf:fb:a5:0c:4d:a7:96:71:25:59:35:6f:
                    6b:05:5b:25:00:e9:d0:e2:23:4f:b9:32:0c:b5:64:
                    50:94:34:5b:73:33:99:95:c6:e4:f7:a8:d5:e8:72:
                    cb:c7:36:28:4c:47:e4:2f:f7:20:65:87:21:ff:4e:
                    8b:d1:53:a9:c3:65:f7:c5:c9:51:38:f7:7d:91:71:
                    af:71:d8:08:ae:d3:51:7e:0f:9d:18:3c:56:18:c6:
                    41:81:e6:c9:10:95:a1:30:38:21:46:09:27:4e:3d:
                    42:c8:2c:ff:19:86:cc:62:a6:3b:b9:1d:e0:4b:c3:
                    ef:4d:3b:43:a2:11:e5:d6:e5:03:4e:ae:1b:70:c4:
                    a7:60:72:20:1f:9f:98:d4:8c:07:fd:e3:1e:35:28:
                    f0:67:94:6e:2a:19:da:82:1d:34:7e:dc:8a:32:fd:
                    c8:f1:5d:38:56:e3:41:57:29:7b:dc:62:7b:0e:9e:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7C:7E:D0:1E:10:25:C2:B1:29:D9:87:D1:F4:FF:5F:72:05:81:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/a695d1a8-57a2-3f5d-abac-ea47525d89cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.103.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:76:f5:c1:34:83:91:07:40:d8:ac:2a:7c:7c:01:98:ae:9c:
         88:6a:66:68:f2:02:c0:f7:45:5d:9a:00:63:91:ba:0a:ea:03:
         4a:8b:5d:71:e7:ad:6e:d3:8e:cd:6a:b9:ad:b8:b5:67:7f:a8:
         b1:a1:fe:11:84:6c:d6:f8:c8:87:3e:f9:2c:36:22:7b:7f:7e:
         c8:7f:65:43:aa:88:3d:66:3b:39:9f:e9:73:80:a5:5e:82:3c:
         dc:a1:62:16:d6:19:5f:59:f7:30:e8:14:e6:af:02:7e:83:ba:
         dd:ae:77:24:af:4f:1d:3a:1f:52:8f:d0:40:e3:74:65:5d:5b:
         13:86:f6:a1:45:28:af:9f:5a:7a:2a:58:85:b6:7a:bd:bf:d8:
         b8:09:03:6d:31:57:fa:fe:e4:ad:ec:ed:78:3c:68:24:eb:07:
         14:b4:9b:eb:c9:e8:b8:90:29:59:36:de:6d:b5:0b:ed:42:56:
         6e:f4:18:0b:1e:50:2b:73:df:b0:53:c9:56:f8:2e:fa:66:e0:
         65:6c:87:7c:06:a7:ec:34:2f:38:08:4c:44:00:4e:b4:d7:10:
         3f:09:dc:d8:c3:e5:97:47:3a:38:25:c5:c1:bb:9f:5a:d9:75:
         44:af:e8:91:06:22:5a:c7:92:f2:9b:02:73:b6:15:59:80:e5:
         9a:b4:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:37 2024 by rpki-client on console-fra.rpki-client.org