Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa
File:                     86f8c834-2c80-3069-adb4-87db93e6cc48.roa (raw, json)
Hash identifier:          nNnoANRq2VjCwr8u7KfjQYnthP3m06Pc+3aYWX8TR6g=
Subject key identifier:   40:31:75:2A:53:EA:54:36:4F:A0:83:6C:55:49:A0:E1:42:B9:DC:C4
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858478E1BBBC1F0EC7EAF2E7B318C
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     62610
IP address blocks:        128.1.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:bb:c1:f0:ec:7e:af:2e:7b:31:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=1be9c986-acf2-4783-93f2-3a1fcbb4ba0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:dc:c1:0d:1e:95:c7:15:da:5f:a4:6c:d9:
                    3b:ee:9a:85:68:5c:c4:7d:ed:db:44:8f:1d:0f:1b:
                    fd:07:6a:aa:b9:72:9e:20:f1:94:37:35:fe:4f:89:
                    1c:8b:96:a7:ba:a7:2f:02:3d:78:cb:75:08:6c:2f:
                    49:06:20:2a:98:b4:db:a8:dc:da:a3:27:8f:60:7f:
                    32:86:ea:dd:a0:ee:92:6b:80:16:11:6a:8c:01:b0:
                    93:7b:a4:cd:f8:8d:5c:6f:df:f5:99:d5:05:59:06:
                    51:43:18:52:e4:1f:57:bb:91:76:60:e1:e1:83:9b:
                    cb:11:17:ee:e3:17:6c:d7:ef:0a:0a:35:ca:d6:fc:
                    7d:c7:8f:5a:e7:58:29:b7:d8:a9:3c:ba:23:af:4d:
                    21:ee:7b:63:fa:f0:ed:6e:7c:42:f9:94:49:ba:e2:
                    a7:e1:62:e8:5b:32:ea:be:80:54:38:80:43:f7:5a:
                    0d:39:4d:fc:0d:49:a9:72:b9:7b:28:57:26:14:0b:
                    c5:27:df:6c:29:80:d8:ef:1a:02:0e:ac:0d:96:05:
                    24:36:79:e1:41:32:cd:74:54:a7:b4:6f:8c:e0:98:
                    83:62:5a:37:86:78:ab:81:79:46:cf:93:bb:05:5c:
                    7b:0d:53:33:a7:1e:b0:e2:93:b7:f5:94:32:5e:8e:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:75:2A:53:EA:54:36:4F:A0:83:6C:55:49:A0:E1:42:B9:DC:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/86f8c834-2c80-3069-adb4-87db93e6cc48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:53:ed:79:74:ca:d6:d5:7c:9d:ee:c4:4c:ea:ef:6b:de:
         3b:6a:d3:34:71:dd:1c:c8:42:9f:c3:e6:b8:fd:78:bd:4f:71:
         be:9e:14:3f:48:47:fa:04:34:06:90:39:4e:7a:4a:6f:ed:74:
         28:df:76:3a:88:33:b8:e2:17:0b:e6:60:6c:0f:5f:a5:4c:fd:
         4f:05:07:ee:5d:8f:dc:59:84:56:58:ed:9a:00:8a:18:32:0d:
         72:8b:57:aa:bd:4c:39:fe:4f:ed:cb:97:8e:6a:22:a3:d5:95:
         41:28:cd:3d:f3:36:73:b6:1d:81:20:02:2b:48:74:b7:5e:31:
         7b:6a:5c:a8:58:7f:a0:93:d2:6c:b3:92:79:a3:19:08:35:6e:
         2d:f1:7c:db:f7:ec:fa:70:9a:81:1c:27:0a:d5:11:9e:d1:5f:
         af:07:ee:fa:0c:3f:74:ec:16:c8:af:4b:42:af:b1:d7:de:ac:
         96:9a:83:28:01:aa:33:74:ce:c5:d4:f8:0d:76:3c:aa:50:df:
         0f:fc:f8:15:ca:29:0b:01:1d:94:bc:40:a9:27:57:b2:ad:af:
         f7:88:3d:6f:2c:5c:55:78:70:a9:be:70:d6:64:68:3c:75:a8:
         fc:3d:b5:6b:9a:2b:c3:9c:bb:48:d2:39:d1:13:3c:5c:94:3b:
         ca:71:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:45 2024 by rpki-client on console-ams.rpki-client.org