Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/f88190fc-7337-3dae-945f-c903c684f3d4.roa
File:                     f88190fc-7337-3dae-945f-c903c684f3d4.roa (raw, json)
Hash identifier:          YEFTkG3BHqdHWKabNmHLCDMw/AIdqgwjcfqKkTHIGTc=
Subject key identifier:   DE:36:44:F9:15:A2:36:1F:25:97:52:EA:9C:67:02:05:1B:B5:17:5E
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F432858474850B4C0A77546E947168880
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/f88190fc-7337-3dae-945f-c903c684f3d4.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     16904
IP address blocks:        209.81.120.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:b4:c0:a7:75:46:e9:47:16:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=7523cfee-4507-40fa-b769-a6b95e2b297b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:5b:2a:aa:4b:f8:1c:13:cf:f7:f5:a6:84:
                    ed:41:ef:bf:59:3b:c1:7f:02:a4:17:7a:1b:a2:d3:
                    7b:37:29:da:66:94:28:44:00:41:bf:01:0c:16:06:
                    4e:c8:e3:2d:24:5b:46:39:b1:8d:e9:ba:ab:2d:3d:
                    11:6a:e9:11:81:22:18:d9:9e:fb:61:c0:e4:3d:2c:
                    4f:8c:73:f2:2e:f6:70:a7:8a:29:63:2a:6e:87:14:
                    c1:ae:95:39:6a:ec:55:40:57:77:99:53:7e:85:29:
                    99:12:85:7e:01:a5:ac:2c:45:29:16:5e:55:59:5e:
                    d3:cb:cd:4c:f3:45:53:58:b3:d2:b2:bb:12:a1:fa:
                    86:92:8e:93:1c:67:9d:ef:7c:d4:28:63:0e:5b:7e:
                    97:ac:03:aa:69:8c:bb:0f:39:2a:91:38:1f:c4:4b:
                    65:ef:70:9e:34:4c:ed:78:fe:7f:60:57:7a:0c:ab:
                    69:72:2e:80:39:41:d5:6e:6a:11:e7:b7:1a:b6:58:
                    cc:5b:3f:9a:05:cb:26:54:c2:e2:6d:63:24:56:a9:
                    c2:3b:94:d0:1f:a3:29:42:75:5b:4e:85:ba:4d:a3:
                    5b:cd:3b:f5:d2:58:51:69:c8:81:4b:8d:00:0b:19:
                    5e:bb:d8:ba:f1:dc:69:3d:5f:6c:18:e5:46:b1:fd:
                    b6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:36:44:F9:15:A2:36:1F:25:97:52:EA:9C:67:02:05:1B:B5:17:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/f88190fc-7337-3dae-945f-c903c684f3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.81.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1c:b3:ab:9d:fd:53:3a:e1:6f:37:11:fa:de:94:a0:ff:ce:
         1d:0c:c8:4d:a8:7b:48:b8:c3:70:0b:20:7d:15:72:7c:91:8d:
         47:22:ed:d6:9e:e5:d4:03:ad:b8:01:91:5a:32:9b:a6:66:84:
         38:72:79:35:d7:5e:ed:35:85:8e:2e:74:27:4b:c1:bc:0a:ce:
         22:5b:3f:86:24:e7:46:f8:22:54:9d:d0:fc:f6:87:23:c6:46:
         40:ba:79:0d:ab:ec:6c:5d:02:3b:94:4a:e0:6b:d2:fd:17:ea:
         27:6d:63:c2:9c:b4:c9:71:6b:7d:1a:05:22:43:b1:19:b6:a3:
         ec:c3:b8:a9:ce:4a:e2:04:41:f9:e7:e0:b2:e3:07:11:7c:8d:
         f7:d9:e7:b9:60:25:2b:26:5f:6b:51:d3:b8:49:10:61:a9:49:
         86:0b:a0:98:4a:f5:0d:57:cb:ba:75:84:13:e4:42:d9:09:90:
         89:79:5a:61:b7:c5:20:2d:4e:86:57:89:2d:f5:25:61:75:ff:
         16:d1:8e:38:d9:be:a2:09:e7:18:11:18:1b:80:f4:cc:e9:15:
         e8:e0:6b:52:b3:6c:54:be:ac:a7:30:07:7d:4c:09:32:1f:7a:
         53:ed:f2:ac:d0:e9:5a:70:b1:31:8f:c0:f6:ad:0d:99:bd:bb:
         2e:10:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:04:59 2024 by rpki-client on console-ams.rpki-client.org