Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
File:                     4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa (raw, json)
Hash identifier:          DVWhE6dqoxzFFl8IU2kf1QrBgc9y2nvb/NQwzp46eYo=
Subject key identifier:   F6:A4:CE:DA:AA:56:05:2C:CA:26:5C:BA:D1:6C:8E:67:FA:68:2C:4E
Certificate issuer:       /CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
Certificate serial:       010D0C9F43285847C7749210A3B2BF7255C548F0
Authority key identifier: 78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     237
IP address blocks:        141.210.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:92:10:a3:b2:bf:72:55:c5:48:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d63d4f-d3eb-4484-9c8a-7c894afa069a
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=c87c7d6a-71f8-43ba-ac37-fc5028dd8ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:e0:ab:47:c8:b5:4d:6a:50:f4:54:bb:71:
                    63:dc:a6:cc:10:a1:16:5e:15:15:6f:6f:db:86:16:
                    8a:22:a2:3a:56:a9:b4:13:1d:b5:40:83:17:c4:bb:
                    7a:31:f7:17:7b:8c:31:4c:a2:72:8d:7d:3e:06:6d:
                    34:48:f5:64:a3:74:77:3a:63:4b:28:6e:0c:36:74:
                    34:a0:34:9e:56:25:d2:dc:71:74:6e:90:37:58:06:
                    18:7c:10:1b:1f:bb:3c:f0:df:f5:f8:fb:13:39:64:
                    a4:77:f7:ab:cb:da:3a:92:d5:9e:27:4f:5f:f5:9f:
                    b6:c0:0f:8a:28:f8:1f:56:f0:ef:6c:bd:19:5c:3f:
                    8f:c7:87:dd:de:5f:0a:f7:33:ca:2c:f0:da:fe:7a:
                    fb:97:9f:df:07:50:82:eb:e5:98:e8:81:d9:af:a7:
                    a6:89:55:bd:ce:39:34:35:51:a0:bf:38:60:eb:95:
                    c5:f8:e4:b5:ce:ca:a9:05:f8:12:2d:79:a0:e5:fa:
                    a9:45:ce:1b:eb:91:3d:6e:41:8f:c9:b4:8f:21:bb:
                    e5:f8:98:47:70:1f:76:1b:b4:91:f7:10:c1:3c:13:
                    07:40:34:1a:06:ec:e1:4d:60:14:b3:07:30:38:3f:
                    5f:99:74:7f:4b:06:f9:35:e3:36:1b:11:97:33:8e:
                    3f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:CE:DA:AA:56:05:2C:CA:26:5C:BA:D1:6C:8E:67:FA:68:2C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/4e985f61-65ad-358e-bcd6-da8ba3f10e3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.crl

            X509v3 Authority Key Identifier:
                keyid:78:A8:5B:DD:E7:7E:1A:01:02:21:CE:EB:6A:D2:F9:78:16:29:72:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f7d63d4f-d3eb-4484-9c8a-7c894afa069a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:92:fe:7d:8a:db:13:cb:a2:f3:6b:ba:e6:3e:be:a9:d9:
         4c:06:df:d0:a4:40:06:5d:0b:b8:9a:e1:46:fe:de:30:c6:5c:
         95:19:1c:af:fc:99:00:d6:bf:36:dc:1d:67:41:ef:1f:e5:3b:
         f0:58:e3:00:55:0c:0c:30:1a:33:9d:81:6a:b9:ec:bf:6f:e3:
         cb:a4:25:04:39:37:e8:e5:9c:85:8c:48:11:f6:4e:9a:e6:ca:
         1b:c8:74:bc:ee:b6:5b:ee:35:bf:fa:5b:69:40:60:e9:96:ca:
         d9:72:6e:04:ea:5e:77:92:16:30:2d:91:5c:4b:0f:bb:b7:41:
         78:b7:b6:f8:b9:94:a3:41:c3:72:55:a6:ca:75:1f:6b:e5:ba:
         5e:9f:51:c9:b8:61:63:0a:a0:8d:39:d0:d6:6c:c5:e2:1c:b1:
         0b:26:df:5f:19:87:bc:22:27:5f:ee:52:30:fc:4f:9b:a0:09:
         bf:81:8b:18:bd:63:fb:5f:27:07:89:67:49:78:b9:b6:bf:13:
         db:ee:c5:e2:d8:fe:2b:07:c6:95:4f:83:79:68:f6:ff:00:af:
         9a:a0:9a:3c:01:c4:6c:83:93:e5:f9:1b:6d:d2:a9:af:3e:21:
         26:4c:c5:a9:ef:31:1a:4d:e3:d9:b2:65:9e:96:e0:86:6e:b8:
         fb:e1:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:46 2024 by rpki-client on console-fra.rpki-client.org