Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa
File:                     79181e42-32f7-3219-9195-88b549e832d6.roa (raw, json)
Hash identifier:          /7U/YqEr9bH4X9O485Dh+aGYrTdPDDluFdkBKoiJCvs=
Subject key identifier:   20:F7:C7:23:29:4B:AB:E8:DF:03:49:24:CD:CD:4C:72:72:4C:F2:AD
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285847362B42AB9E2E4A4C90A44980
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16904
IP address blocks:        207.191.152.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:42:ab:9e:2e:4a:4c:90:a4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=b7d4de8c-40bd-4af0-8795-cf7744d19bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3d:2f:3e:bf:d3:ca:f0:45:c2:2f:44:21:47:
                    14:ab:09:2a:fb:f4:6a:cc:5b:f3:be:9b:be:ee:fa:
                    b0:c3:d3:69:a2:75:c8:dd:07:e7:32:2c:bf:14:ca:
                    cd:8a:64:7d:a7:f9:e3:42:96:a3:e0:79:b7:b8:30:
                    7a:17:65:f3:6b:3a:62:f9:c6:5f:18:97:65:1e:4c:
                    f0:98:58:15:0b:ff:35:61:4e:19:0a:fb:d0:c9:1a:
                    0b:8c:c8:12:c0:0d:3d:a4:44:e6:49:bb:17:a9:8c:
                    40:90:c0:22:b3:0c:44:dc:82:61:03:34:b0:b6:b3:
                    5f:55:2b:0e:ba:7b:cf:1e:8a:ae:1c:f8:04:c3:f7:
                    5b:0a:14:ed:79:f9:da:7a:78:1e:04:ff:89:7d:b5:
                    1c:a7:4f:22:70:cd:a6:3b:bb:c3:7d:93:dd:26:bc:
                    d3:cd:c8:34:b0:ff:2d:ac:d8:bb:a0:01:e2:38:84:
                    af:43:cc:eb:00:e0:85:75:36:fd:82:de:9b:ae:89:
                    2a:7f:77:a6:7d:b1:95:32:a2:79:92:4e:27:1f:8e:
                    6e:8a:e9:31:a1:39:c6:15:b0:df:c1:25:d2:cd:8d:
                    90:fb:ef:6b:5d:fc:21:99:d6:50:56:25:79:fe:44:
                    ba:7b:e8:0c:46:11:ba:73:75:83:bf:e3:29:11:77:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:C7:23:29:4B:AB:E8:DF:03:49:24:CD:CD:4C:72:72:4C:F2:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/79181e42-32f7-3219-9195-88b549e832d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:1d:06:c9:25:46:88:53:0f:d2:20:79:ae:f0:48:70:86:
         9f:f0:fc:42:0b:37:40:e5:bb:be:03:0c:22:24:46:16:04:d4:
         c9:4f:b5:19:08:ca:90:1a:dd:d3:0e:8f:ea:ff:bd:41:c5:71:
         86:99:1e:47:0b:e3:57:d1:12:9e:d1:3b:37:47:b8:c5:87:b7:
         4e:54:1f:a9:dd:ce:a0:0c:f6:7d:36:b8:1e:3b:a8:f8:a4:7c:
         b1:f0:5f:3a:54:45:0d:3e:cd:07:c8:e9:24:4d:74:c0:27:17:
         5f:cd:0d:64:82:41:d0:74:c9:ea:44:be:1b:4d:ad:91:37:c8:
         c3:b5:8c:e9:ec:05:ca:54:1e:ed:0a:96:73:64:24:6c:eb:58:
         41:77:7c:18:c8:48:5a:e3:28:19:b2:d5:0f:0a:51:6c:1e:ef:
         4e:38:8e:50:74:56:23:7f:71:5f:dd:76:50:93:79:5f:a2:f5:
         cb:61:45:45:d4:1d:37:1e:20:dd:94:ce:38:2d:2e:64:bc:f8:
         1f:27:83:49:c4:d0:af:a0:44:95:bb:3a:23:b9:ea:0a:69:4d:
         8a:7e:45:05:54:25:91:0c:e2:c9:13:b3:83:0d:f8:dc:2f:29:
         11:71:a9:85:10:84:29:c9:72:85:bc:20:9a:3b:0a:2d:ed:55:
         fa:46:18:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:59 2024 by rpki-client on console-ams.rpki-client.org