Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/46d51c7d-9f63-36d9-8175-44f839e69cfd.roa
File:                     46d51c7d-9f63-36d9-8175-44f839e69cfd.roa (raw, json)
Hash identifier:          w2vaqprh452R/sy0iIuBjmVT/6xxUhttGF7VF1ilaKA=
Subject key identifier:   4B:37:92:DB:6E:06:CF:AD:0A:ED:E8:FC:1F:10:1C:3F:78:09:A1:7B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285847F41FA149FE85807235EBB780
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/46d51c7d-9f63-36d9-8175-44f839e69cfd.roa
Signing time:             Thu 21 Nov 2024 14:00:51 +0000
ROA not before:           Thu 21 Nov 2024 14:00:51 +0000
ROA not after:            Wed 19 Feb 2025 14:00:51 +0000
asID:                     150436
IP address blocks:        128.1.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:1f:a1:49:fe:85:80:72:35:eb:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Nov 21 14:00:51 2024 GMT
            Not After : Feb 19 14:00:51 2025 GMT
        Subject: CN=29159308-26e6-493b-985a-4343f8c5d1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:1b:fa:45:bf:f4:91:9d:4f:26:3f:87:61:
                    79:91:37:55:b2:77:52:d8:d9:37:4f:e6:5a:1b:fa:
                    d8:57:4d:4d:a2:3b:2c:06:a6:f1:6e:f4:6c:31:ab:
                    37:9a:f8:39:50:e1:d6:2f:1a:00:e9:0b:b4:4a:6f:
                    0d:be:06:aa:d4:cc:14:c4:f4:18:9e:29:aa:b2:c1:
                    59:f4:20:18:81:9f:31:97:19:3b:3b:74:5e:39:e6:
                    7e:2b:27:de:82:88:1f:20:1e:72:54:9e:52:bc:55:
                    d4:61:3f:5a:0c:e7:b3:3b:e0:12:da:1d:e4:7f:ad:
                    9b:7f:67:d6:67:c6:30:76:3b:b4:c5:56:d8:7c:2a:
                    43:ce:30:a7:fc:7e:73:e0:e3:3e:78:f6:dc:0f:84:
                    b6:6a:4c:29:fd:ef:62:93:44:22:93:2d:15:bb:4d:
                    a2:e9:27:0f:7d:44:8a:31:0f:51:22:11:0b:1c:4d:
                    de:6b:45:bf:31:ba:38:62:a6:45:b2:bc:41:ab:84:
                    98:35:87:de:0c:c8:03:67:9b:37:e4:4d:75:39:81:
                    0f:c2:df:31:4d:9b:54:25:92:72:6f:ae:d8:b2:c9:
                    88:e4:54:54:d2:5c:ad:95:7f:55:26:54:9c:ee:96:
                    03:e6:9d:7c:05:ae:56:25:11:3b:91:d5:0f:23:75:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:92:DB:6E:06:CF:AD:0A:ED:E8:FC:1F:10:1C:3F:78:09:A1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/46d51c7d-9f63-36d9-8175-44f839e69cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:df:d3:b4:3a:83:fd:4c:e7:f7:cf:3c:03:bf:16:04:2c:
         ff:21:a2:8a:0e:5b:05:98:f1:89:e3:5f:3a:40:53:92:64:73:
         cf:7f:c6:3d:19:ed:ae:5a:84:f8:38:65:c6:88:6c:32:95:20:
         10:ed:a2:b2:2f:44:28:6c:96:06:8e:93:0c:94:ca:ab:74:b3:
         1a:b3:69:fe:20:84:af:4f:16:fd:e3:1b:24:6c:8b:ce:ee:0a:
         b6:89:9a:18:af:36:e9:50:dc:1f:76:71:04:a1:fa:e3:25:04:
         94:34:7a:1b:37:7b:bc:d3:e4:21:37:e9:44:20:c6:b2:20:df:
         95:fb:aa:f4:2b:d5:94:9f:85:23:0c:ee:4a:b1:c4:7a:a6:12:
         93:f0:b8:22:26:b7:df:6f:cd:05:f3:c9:6c:37:27:09:85:9b:
         b0:bf:7d:ce:1b:8c:a3:1e:1a:d2:0c:97:c9:cc:29:be:aa:0b:
         99:0f:9d:d9:77:a7:35:4f:51:32:31:a1:fe:87:ef:52:ff:d4:
         96:a2:c9:e4:64:28:c0:f8:a0:de:14:68:92:4d:d1:c5:69:32:
         d8:2b:d1:56:04:c9:73:4b:d9:33:a0:c8:8e:54:f8:13:84:cb:
         ef:21:e5:27:64:ec:5b:f6:ef:0e:ff:39:79:cc:6a:48:df:cc:
         e2:3f:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:45 2024 by rpki-client on console-ams.rpki-client.org