Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ac6d285-41d2-3ef9-88e6-cd84d9bbcdd9.roa
File:                     6ac6d285-41d2-3ef9-88e6-cd84d9bbcdd9.roa (raw, json)
Hash identifier:          WrVnQCNV6AfVtfRGfGocEM3169QK1YOuqYyHc2ow388=
Subject key identifier:   D8:C7:6E:EB:70:88:17:3C:B9:3D:62:3A:B6:24:CB:E0:F8:8F:A0:1E
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C22641FE0D7BB0BE7AE0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ac6d285-41d2-3ef9-88e6-cd84d9bbcdd9.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     397630
IP address blocks:        147.53.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c2:26:41:fe:0d:7b:b0:be:7a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=76fea7b2-f0a1-4d2f-8400-82be4d6d2942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a0:f9:78:9e:be:12:0b:1a:e9:c4:8a:9f:e6:
                    5a:bb:a8:30:44:d8:36:35:c8:05:9d:94:25:a6:da:
                    c6:78:f4:c8:a3:3b:7a:72:9e:3a:84:21:12:04:27:
                    79:39:58:68:a1:3b:6c:05:71:80:d6:9e:54:28:fb:
                    79:a5:01:a9:83:0d:f6:b8:28:3c:5f:28:8b:70:fc:
                    15:3d:74:e8:38:13:fa:0d:91:5e:34:de:b1:65:0f:
                    b0:bb:20:c6:f0:56:5a:6e:5c:c0:05:52:0c:6f:bc:
                    0b:ff:34:ae:20:64:68:13:eb:4f:7e:6a:69:35:e7:
                    a9:79:31:8e:10:b7:a7:20:bb:dc:66:80:37:41:fe:
                    c3:0e:8a:fa:2e:27:6a:1f:f0:c2:45:2c:c8:15:5a:
                    52:6c:7e:fb:ee:dc:03:b3:65:23:01:62:85:97:e1:
                    b9:63:6b:75:9b:31:29:1e:5e:b3:ff:a8:96:e9:76:
                    b7:69:7b:cd:c8:ff:11:1d:31:5d:d2:a8:bc:9e:20:
                    69:fa:49:87:5e:5f:02:f3:46:64:14:86:27:ed:a5:
                    5b:9d:6a:ce:b7:e4:07:1b:c6:53:c7:2a:12:0f:83:
                    98:75:ef:d1:cb:f9:e4:d1:80:dc:a2:ad:2a:82:c5:
                    c3:fd:de:61:1f:ef:c8:d7:d8:82:85:89:ee:55:fe:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:6E:EB:70:88:17:3C:B9:3D:62:3A:B6:24:CB:E0:F8:8F:A0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6ac6d285-41d2-3ef9-88e6-cd84d9bbcdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b8:a7:b0:d5:bf:46:42:57:76:fb:90:2d:2b:42:4c:25:b3:
         8f:77:1f:17:53:eb:88:aa:43:dc:59:23:c1:7e:c8:1e:73:cb:
         84:b7:d5:12:92:6f:88:a9:ed:6c:f8:ec:7f:00:e0:41:a5:44:
         bf:22:cf:db:c1:f1:0e:f2:ed:0d:ad:d7:61:0f:9c:27:7c:fd:
         51:2e:59:c9:5a:4e:8d:a9:92:8e:c3:bd:31:3d:3b:74:22:32:
         a0:ef:2a:54:45:23:5e:dd:58:af:7b:79:8b:4f:bd:a1:8a:fa:
         b1:eb:9b:79:e6:bd:7e:f9:a0:17:3a:7c:04:c4:f8:9e:62:f9:
         fb:46:33:30:42:6d:da:e1:a7:43:48:3a:9d:05:b0:82:b1:37:
         af:0b:7c:9b:4c:6e:4b:3a:6d:80:48:c3:3f:64:b4:2f:1a:d8:
         dc:16:e2:c2:15:44:18:be:3a:59:44:71:10:d6:8c:3e:42:6b:
         bd:dd:3d:42:f5:d0:8b:62:58:c2:d1:f1:7e:ec:b7:6a:93:82:
         ce:eb:e7:a5:eb:ce:b9:30:e8:59:58:07:f8:3b:27:bb:8a:4c:
         03:1c:92:0f:1c:5f:c9:b5:45:13:63:47:28:1c:46:ca:62:fb:
         58:03:33:1c:9a:1b:fb:d8:de:ec:01:7a:37:5b:cd:b0:52:41:
         28:28:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:32:21 2024 by rpki-client on console-fra.rpki-client.org