Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3979df5d-b4a1-39b2-a5a3-ad93dda0cca7.roa
File:                     3979df5d-b4a1-39b2-a5a3-ad93dda0cca7.roa (raw, json)
Hash identifier:          ICqYCNdxqI79d2664viG2rjL1ow8U61JM/BLP2Z9ndA=
Subject key identifier:   0C:A0:30:F0:49:43:49:CC:55:35:A8:86:68:22:85:BD:8B:83:54:AE
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584737907E2C39D281AEB4BA6680
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3979df5d-b4a1-39b2-a5a3-ad93dda0cca7.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     7029
IP address blocks:        134.202.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7e:2c:39:d2:81:ae:b4:ba:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=b8d69787-7983-44a4-80ac-9b2b3b4e4bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:11:c3:89:a0:55:42:b2:2e:13:e2:62:9b:
                    d9:82:79:7d:ad:eb:9b:55:30:6a:1b:bb:20:d9:11:
                    1e:29:b6:1b:ec:20:2e:c3:da:fa:70:3e:26:84:e2:
                    c7:37:82:6f:62:24:8b:8e:ba:f8:ba:df:b7:b1:e3:
                    f1:c6:9f:10:e1:10:0e:22:69:1f:53:24:e9:6b:0a:
                    1a:a7:5e:9f:4f:0e:0c:28:92:14:a6:68:21:cb:aa:
                    d0:dc:8c:c9:21:ad:21:80:93:63:d5:46:9c:9f:cf:
                    f5:e7:54:eb:83:94:63:75:6d:fa:7c:fe:f2:60:4a:
                    38:c0:b4:13:6e:4e:a4:88:b3:22:65:5f:88:54:c7:
                    11:b5:70:3e:52:cf:5e:71:bb:a3:a1:d2:fa:7a:28:
                    93:03:ea:ed:aa:89:84:ec:db:6f:67:95:93:e1:dc:
                    a5:e4:e7:62:48:57:65:c9:57:e8:d4:1c:bd:71:7f:
                    8b:9e:6c:6b:82:a8:2d:88:db:3e:e2:a2:00:55:cd:
                    73:61:5c:07:72:22:5e:2a:5e:05:4b:47:a9:ac:b7:
                    53:d7:de:af:fe:94:74:b6:25:57:59:43:a3:b3:37:
                    2d:7a:44:ed:fb:fe:22:df:9f:62:cd:13:d9:64:87:
                    e2:c6:94:bc:a9:f1:59:d3:23:09:6e:dc:b6:99:fa:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:30:F0:49:43:49:CC:55:35:A8:86:68:22:85:BD:8B:83:54:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3979df5d-b4a1-39b2-a5a3-ad93dda0cca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:6a:68:fa:d4:03:4a:74:a2:87:7f:d8:6d:a6:1f:d5:ea:
         34:ed:3e:66:8b:34:20:a1:1d:ab:0f:37:08:f7:75:cd:43:4f:
         a2:7f:c9:22:ab:c8:a1:11:7f:5c:52:a4:1a:d6:82:c2:45:4e:
         d0:26:42:ea:bd:f3:bb:36:2f:3e:41:1e:1c:4b:a7:f7:8a:39:
         96:80:7f:bc:41:48:2c:b9:fb:3d:a2:c2:ee:ca:a3:b4:84:8f:
         26:90:a7:54:07:ab:e2:cb:54:06:59:56:cf:97:d2:04:d3:38:
         0e:e4:89:b1:3d:0f:e5:9d:12:da:1e:49:ae:b8:d0:75:dc:11:
         57:1e:f4:f3:9c:24:10:70:d3:d1:38:56:0b:c5:35:18:4a:99:
         f1:a2:8d:a7:96:ad:16:14:29:72:a3:fe:9d:40:f0:1d:e2:68:
         16:78:11:6a:3c:cf:56:cc:a2:f1:b5:19:99:00:14:be:3e:3d:
         e8:7a:93:7e:2a:68:bd:b7:65:0e:40:ea:99:25:94:0e:d0:46:
         55:53:94:ba:cd:c8:b0:d2:b1:85:e2:a6:59:7c:c5:cb:d5:fc:
         34:ed:0c:64:0e:27:7a:e7:e9:26:98:8b:6e:d8:11:93:44:20:
         9c:8d:8c:a4:ef:85:f1:59:ef:e2:0d:6d:69:cf:7c:df:81:3f:
         1a:88:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:43 2024 by rpki-client on console-fra.rpki-client.org