Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
File:                     04ecbba8-a20a-3de9-9e0a-adb751a99684.roa (raw, json)
Hash identifier:          vxhE4KHpL3E87XtQ8Kv+4Il1IysoqGg9+fDSzXHRpJY=
Subject key identifier:   CE:4C:DA:B6:19:48:66:6F:A3:AD:C6:3A:BA:EC:06:5B:2B:7A:6E:EE
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847362B475074ADE91E6E193F00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     137280
IP address blocks:        107.155.51.0/24 maxlen: 24
                          107.155.52.0/23 maxlen: 24
                          169.197.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:47:50:74:ad:e9:1e:6e:19:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=0e92bb55-b69d-427d-9ea9-49e69287df92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:96:03:3f:60:6e:22:70:01:1f:e8:9c:67:
                    54:40:90:bc:da:10:86:c2:74:85:ba:94:d9:07:9a:
                    c9:db:3c:62:49:e9:38:81:70:dd:db:9e:85:fe:7b:
                    9f:0d:ea:f7:cb:ce:4a:b4:1a:77:34:49:df:83:e7:
                    28:3c:f5:57:72:5e:f2:0b:62:ec:77:ec:6e:7a:f0:
                    81:e0:59:e8:a4:0b:ca:2c:b1:2d:de:72:be:41:2f:
                    b0:c8:aa:78:cd:18:b2:9b:40:f7:36:fd:ea:7c:2f:
                    ba:1a:4a:d2:9f:ee:75:ee:af:da:54:ce:a3:a3:3e:
                    eb:e3:6b:ed:77:5b:b9:b9:3a:00:9a:74:ac:54:fd:
                    93:e0:1c:88:4b:c9:5b:91:ba:eb:05:c1:2d:11:97:
                    ec:91:fe:d3:33:2b:d6:f1:a3:d8:ff:f7:64:25:0e:
                    a1:b3:11:38:74:1f:35:3a:83:38:cd:0a:4b:3f:96:
                    cc:61:c8:21:e4:a3:d6:4d:93:f6:0d:a8:a7:56:b6:
                    7c:e7:cb:c2:36:9d:96:65:d8:41:7e:64:19:a8:ad:
                    82:73:69:47:68:1e:bd:ed:c0:e3:2f:0e:59:a3:dd:
                    a0:8e:3f:35:47:a5:6c:e4:86:aa:d5:9a:ea:fd:a0:
                    c7:a6:67:b3:75:73:25:ee:bd:34:be:f3:a9:b0:09:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:DA:B6:19:48:66:6F:A3:AD:C6:3A:BA:EC:06:5B:2B:7A:6E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.51.0-107.155.53.255
                  169.197.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:50:92:89:77:2f:ad:99:d1:6c:e2:2c:57:a8:10:1d:46:
         c6:c7:8b:38:94:75:13:ad:cf:b4:df:6f:5e:69:93:e5:14:66:
         34:ad:9c:e0:84:57:4b:67:52:0b:71:de:da:39:97:8e:78:f2:
         81:0a:be:57:d5:2f:33:b8:1d:8c:c0:c0:9a:7c:0e:9e:a2:ee:
         ba:30:60:e1:04:c3:fb:3c:14:83:a4:a2:e7:e2:2e:b2:d7:a4:
         37:d7:70:64:07:b0:92:89:d1:2e:be:9d:2b:c5:f6:58:21:36:
         92:b3:6c:0b:3a:a8:63:36:64:d2:a5:40:1b:62:79:99:fd:78:
         bf:6c:c7:3f:ab:09:b1:ca:d0:2e:14:1b:0e:46:c4:52:78:90:
         f0:c5:5b:91:53:d7:c3:1f:02:12:1e:25:c1:71:a4:eb:79:1f:
         b9:69:58:12:ec:b6:3d:27:49:6a:7a:a8:3c:99:ef:52:7e:65:
         da:56:87:de:48:e9:0f:f5:83:ed:61:a5:05:9c:33:43:61:e4:
         e4:a1:ef:f3:73:8a:21:f3:b3:13:8e:5b:77:f3:7f:f4:e9:5d:
         c7:28:01:ba:df:98:1f:da:df:8c:c4:3f:76:5f:fd:33:6b:b0:
         73:ca:7d:6f:f2:c7:b6:99:ae:1f:85:88:6e:13:bf:03:12:94:
         b9:06:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:45 2024 by rpki-client on console-ams.rpki-client.org