Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa
File:                     a1b1d79c-ab46-35ce-8c97-2053ed447262.roa (raw, json)
Hash identifier:          tqD5UESmk+HXq9u3mrsfYmP1DWSRdoDuqL5S83a3hyY=
Subject key identifier:   F1:85:A8:A4:17:B4:38:68:9F:17:0E:F4:6E:1C:24:44:08:AA:CE:DF
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584774FB8FD87F3CF1C4390CC700
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     36511
IP address blocks:        192.149.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:8f:d8:7f:3c:f1:c4:39:0c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=7ec483d1-cd34-4000-9a9b-d9f586b48709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:da:13:51:a1:46:9e:66:75:8c:be:ba:70:
                    1e:cb:0a:c0:17:40:93:2a:41:9c:f8:63:e5:21:0e:
                    58:33:c9:c8:1f:30:28:19:1d:7a:ca:46:9f:25:21:
                    4f:93:0d:22:13:7d:a9:66:ad:9f:81:a1:19:d5:ab:
                    0d:18:59:8c:73:60:37:ae:6c:04:76:e7:ae:3a:28:
                    4f:2d:10:7d:28:23:40:85:87:90:0b:32:a4:5e:10:
                    8d:e1:fb:c6:1b:4e:87:bd:77:6a:7a:a8:20:90:7c:
                    38:e5:78:7f:fb:7d:d3:d7:fa:de:38:b9:3a:8b:5e:
                    2f:79:3e:da:a9:a2:4a:18:53:b6:86:32:a3:c6:21:
                    4a:ea:18:12:6d:aa:13:dd:42:ca:12:45:4b:18:c4:
                    67:7f:cd:b0:d1:ce:59:3e:70:04:14:cc:27:60:0c:
                    ce:9a:51:c8:88:26:4e:2c:15:ce:96:d7:9c:2d:63:
                    b4:c1:77:03:18:49:55:9d:41:ba:63:75:f7:75:5e:
                    b4:06:57:cc:d8:27:aa:05:9d:c2:cd:e2:c6:b2:51:
                    54:1f:57:25:d4:0b:e5:48:79:40:d9:c1:3f:2a:46:
                    04:6e:ab:3c:b1:08:f7:7c:84:83:e3:2f:31:30:e3:
                    ae:5c:cd:c1:be:4a:9b:92:dc:37:b0:dc:78:fb:35:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:85:A8:A4:17:B4:38:68:9F:17:0E:F4:6E:1C:24:44:08:AA:CE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:36:9a:f5:4f:19:34:5c:08:35:44:73:eb:72:1f:e6:54:fb:
         01:75:ab:cb:33:fd:e1:78:96:5c:b7:26:1e:16:3a:ca:42:d1:
         58:67:71:2d:1a:74:81:53:c2:31:70:f1:ab:38:c0:43:fe:7f:
         bd:3d:57:24:c8:dd:98:8e:49:20:63:e0:ec:a8:c9:c7:08:e7:
         39:52:5a:db:74:41:46:d0:ed:ca:a6:54:e5:bc:86:ba:f0:65:
         79:ec:f1:91:cb:47:37:64:79:e3:76:c7:d8:2f:5d:8f:c3:00:
         26:3b:9c:c3:3f:3d:98:2b:81:d5:4c:9d:03:ff:e2:63:bd:d5:
         64:84:c3:ee:ae:56:dc:66:8e:28:66:72:1f:f5:8f:2b:01:d2:
         ea:5d:9f:9a:35:8d:8a:00:bf:61:cc:2d:4e:d0:c0:93:a4:3b:
         7d:8d:5b:35:c8:4e:40:45:d9:fc:80:2c:49:b7:3d:a7:4a:9c:
         4a:66:fb:5e:41:0e:ca:c0:58:b7:b0:76:80:93:3a:e7:86:ae:
         b2:6a:e6:33:57:14:2a:2f:5d:ab:e9:d4:42:09:a9:c1:5c:15:
         8b:f8:d7:d7:a9:15:86:5a:8d:3d:db:59:39:f1:d4:d2:5c:a3:
         c7:c2:33:4f:4b:ce:6e:18:7c:92:b6:d6:fd:e6:4c:5c:62:a7:
         1f:58:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org