Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
File:                     a01efa5b-614e-3d99-9b01-12a6e3f87492.roa (raw, json)
Hash identifier:          7182cBzozx5NdwfSPD7Ezv2tkMa/QtQBYP1i+/Q8efg=
Subject key identifier:   94:79:A6:88:CF:EF:94:BC:E8:F2:36:07:9C:5F:D9:E0:2D:06:D1:F4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DC649D4E83A8561D4D5A9500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        173.181.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:9d:4e:83:a8:56:1d:4d:5a:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=7cb66304-9df9-4ed5-86ec-a21fb3dd8bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:62:6f:4d:8f:23:7f:78:51:22:02:da:2a:
                    5b:b3:f7:35:98:60:d4:36:a9:cd:9b:64:57:33:46:
                    a8:80:07:72:4c:61:10:a3:5f:8d:c9:9d:2b:14:47:
                    51:24:76:85:a8:3c:f7:a2:d9:cf:bc:06:cf:4c:08:
                    98:72:4e:fa:69:9d:ae:32:13:e3:a6:fb:b9:2d:26:
                    a5:f1:31:1b:19:e4:21:dc:ab:42:c6:22:65:38:15:
                    9e:ab:26:55:5a:0d:95:11:88:e7:e9:6b:54:4e:d6:
                    2a:c9:8f:6d:43:83:ef:60:8f:4e:67:19:b1:05:ef:
                    92:21:6c:7c:6d:ed:be:bb:02:15:43:94:8a:16:ed:
                    52:c0:2a:66:b7:7d:56:8a:3f:23:d3:17:f7:80:ef:
                    3e:c6:78:58:fa:35:5e:42:d9:a6:17:84:2e:a2:ff:
                    ac:9c:1c:07:ce:b1:10:85:19:25:55:0b:94:36:8a:
                    ec:4f:3f:ab:ec:dc:d5:6b:87:14:76:b5:36:31:cf:
                    2e:db:91:2c:57:fb:bb:9b:2a:0a:df:61:79:6b:13:
                    a4:c6:ae:4f:c0:11:28:40:f7:a3:9b:62:8e:55:93:
                    f3:ee:10:ab:8e:7c:8b:bf:08:47:2e:e9:42:ed:45:
                    ce:50:3d:4b:07:79:5f:0d:18:d2:f1:4c:08:ed:3e:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:A6:88:CF:EF:94:BC:E8:F2:36:07:9C:5F:D9:E0:2D:06:D1:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a01efa5b-614e-3d99-9b01-12a6e3f87492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:d5:aa:15:66:d1:d3:f0:8f:09:76:26:0b:50:cb:14:16:
         28:b1:f7:d8:f8:52:ad:e2:3e:12:69:2f:d6:0d:31:1c:30:b1:
         50:65:f9:2b:48:d5:0b:dd:6b:43:2e:c0:06:90:f4:c4:e8:e4:
         9b:21:07:e9:13:b6:97:c4:1b:96:e1:24:58:26:cb:ed:3e:bb:
         23:cb:a3:04:62:23:79:b6:c0:21:55:7a:73:a1:ee:59:33:a4:
         c2:b5:73:22:8a:98:9b:cd:28:6f:d3:db:7d:8e:fa:7d:d6:0a:
         39:fc:fb:2f:4a:bf:4d:71:bd:36:92:24:cf:de:ba:60:8d:f2:
         a9:f5:2f:df:a0:4a:ca:58:fc:a8:c7:2b:4b:c4:a9:c1:ec:a3:
         eb:82:03:d8:4b:b9:16:8e:53:dc:35:87:66:62:79:35:8d:8a:
         e6:3d:28:04:86:01:33:0b:e2:32:e5:b9:30:db:cf:f6:bf:eb:
         0e:99:30:46:ce:64:69:ab:c0:14:fb:a8:14:09:04:c8:a6:c3:
         73:c8:5d:95:a2:d0:04:a3:e4:7f:1d:f1:6a:d2:90:c4:54:56:
         7e:30:1a:34:e3:9a:45:44:84:3d:69:4e:8a:ea:3a:2f:5e:10:
         4f:a2:61:17:3d:ee:8d:3c:d2:bb:6b:03:22:66:f6:f2:d5:88:
         21:ee:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org