Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa
File:                     c950cc34-b6bc-32c3-886c-c6539782d6a6.roa (raw, json)
Hash identifier:          Io30M33aOeGhhWHMxSy1iueSY7kyO6AFegx85M+Jw1o=
Subject key identifier:   66:C8:A0:86:21:09:C5:A7:11:CC:6C:E4:A7:DF:E1:19:1E:9E:AA:31
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858478E1BB854DF26C209A0E90680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     62610
IP address blocks:        128.1.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:b8:54:df:26:c2:09:a0:e9:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=eb81ef7f-5b1c-4cc8-a23e-a59291132c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:88:2e:dc:e4:d7:9a:45:f7:f1:5b:0a:5c:
                    0d:f9:32:af:ca:54:58:cb:42:a8:ab:48:4a:23:67:
                    ba:7a:f2:ea:72:08:eb:dd:81:03:3c:b2:8a:23:aa:
                    c5:4c:99:c0:82:c7:7d:a4:ad:28:66:8d:00:35:d6:
                    aa:41:57:3e:be:83:74:cf:58:4e:49:e4:9b:4d:2f:
                    dd:4e:1f:e6:c2:c9:9d:e0:44:3f:a5:4c:0d:f0:28:
                    65:a4:08:10:3f:3f:9a:a4:5c:2e:b3:0d:48:90:8a:
                    eb:76:71:7b:4b:78:de:00:68:69:eb:8a:d0:27:00:
                    5d:3f:19:d2:c6:6a:60:99:5b:05:2b:4d:4c:1c:6c:
                    33:df:85:ac:ea:77:5d:4d:7d:3a:67:40:ce:ec:53:
                    d1:d2:c9:ba:b2:ed:b9:84:f7:af:7b:c8:4f:0f:2a:
                    dd:cd:40:23:cf:ae:36:3a:62:79:11:ef:d6:36:c7:
                    e4:29:50:c4:7f:0f:79:5a:df:a8:fd:2f:16:dd:54:
                    59:b4:b1:bb:04:9f:34:54:cd:c8:53:7d:91:ec:c6:
                    68:12:2c:ac:59:09:dc:c2:27:6f:06:33:38:dc:a6:
                    23:17:f3:0f:fc:9f:42:51:3f:bf:7e:c1:01:72:60:
                    67:26:2d:88:06:6c:bf:a6:0e:66:93:6f:56:63:eb:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C8:A0:86:21:09:C5:A7:11:CC:6C:E4:A7:DF:E1:19:1E:9E:AA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/c950cc34-b6bc-32c3-886c-c6539782d6a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:50:45:f7:f1:bd:70:18:24:d1:47:03:7f:93:21:c2:83:
         85:5b:1c:ac:3f:ec:58:d8:5f:8e:0d:ea:61:aa:e5:6b:fc:48:
         34:43:18:46:99:f3:6d:06:85:4b:69:2c:d0:67:05:c5:81:d8:
         cf:64:9c:7f:58:9d:36:af:90:86:ff:c7:0b:a0:ce:f0:a3:0c:
         5c:3b:84:8b:e8:d8:0b:60:00:22:22:f3:9c:8f:24:fd:ae:68:
         e2:78:d3:f6:06:11:9e:1d:8f:bb:62:80:a8:42:c9:85:a7:21:
         d3:e4:1d:d0:87:79:57:df:07:aa:2b:d2:52:8e:19:57:c8:05:
         32:9f:9f:4a:e8:b9:51:dd:06:8b:41:a8:b8:a3:90:3d:60:10:
         17:a7:11:08:95:d4:df:d4:ad:4e:25:07:b3:6d:a3:8b:77:72:
         32:d2:44:b7:dc:ea:88:67:9d:ee:94:63:71:3e:34:dd:80:78:
         b0:a8:ad:c0:33:b1:d0:9a:f6:b5:77:39:d5:39:d7:c3:80:db:
         8e:bd:d8:35:b3:e9:9b:9f:03:7f:78:d6:b1:88:11:46:a0:ea:
         6d:fe:3f:cb:eb:40:4b:54:33:c0:b8:be:d6:8c:af:c1:8f:0e:
         8b:54:8a:72:d3:7d:ea:0b:75:7e:df:25:49:35:d5:96:a6:ac:
         55:ab:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:28 2024 by rpki-client on console-fra.rpki-client.org