Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
File:                     7532ea0c-e641-334f-986f-c6ddff0253e2.roa (raw, json)
Hash identifier:          kngJYs+c2Ef5/M4J/2gzQzULcJO3P8O/S9MiGFtEpn4=
Subject key identifier:   C7:13:42:9E:26:6D:A3:F5:CA:11:8A:15:64:BB:EE:F9:74:B0:35:47
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584762D6520D04DB03B74592FFA0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     399471
IP address blocks:        163.123.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:52:0d:04:db:03:b7:45:92:ff:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=02536b90-736c-42d2-833f-dbcf2af5937b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:8f:e2:1d:31:0e:8b:da:10:3c:5d:42:73:
                    d8:61:3d:1a:2f:3f:ef:cb:dd:c7:30:05:a3:03:8e:
                    a7:14:8d:e0:94:63:e4:12:3e:8e:6a:28:55:2c:4c:
                    10:5a:a1:12:e7:b6:c9:95:05:c2:44:ce:90:67:17:
                    e2:ad:10:eb:33:16:2e:5f:a6:eb:b1:e3:87:64:35:
                    90:7a:b2:02:83:5e:2b:c3:f8:bc:9f:6e:4f:a3:30:
                    30:72:39:e9:e3:ad:ab:bf:28:42:ca:ac:b0:24:03:
                    b6:a3:ba:11:6b:49:95:d3:22:31:2b:ab:17:7a:d0:
                    00:48:9c:03:ff:c1:7b:45:12:f8:1e:61:59:30:63:
                    4b:a7:d6:d8:9d:2b:e9:7a:14:2e:93:17:05:67:42:
                    be:a4:33:f6:c0:60:86:0d:aa:6f:b1:30:fd:13:63:
                    c0:71:ea:c9:f3:f7:e2:4a:cc:26:17:65:97:77:fb:
                    0e:e3:86:ea:ba:99:ff:ac:69:81:6b:90:87:82:f8:
                    20:6c:d7:99:bb:0d:ec:55:e8:9a:79:7a:da:7b:29:
                    10:38:0e:6c:5d:9d:db:59:a6:c6:d9:d7:fa:69:ef:
                    e4:7c:4f:aa:d8:68:5c:ab:70:65:93:2b:1f:8c:d7:
                    c4:01:72:a2:1f:25:aa:e1:dc:64:f8:16:67:e4:76:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:13:42:9E:26:6D:A3:F5:CA:11:8A:15:64:BB:EE:F9:74:B0:35:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/7532ea0c-e641-334f-986f-c6ddff0253e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:13:fd:6a:a7:63:e8:c5:df:13:79:94:db:ef:9f:7e:a8:
         38:47:0a:78:3e:ab:14:89:1a:93:1c:d3:62:95:80:48:47:02:
         e2:ba:7b:d9:65:db:46:aa:aa:65:e0:48:dd:94:08:7b:79:cf:
         a5:4c:6b:c7:d3:6a:db:cd:6d:df:9a:da:96:1e:98:9f:f0:29:
         88:07:9b:6a:10:29:6b:f9:43:2a:cc:12:95:09:3a:81:6d:2d:
         b1:c5:50:72:22:40:92:33:6f:53:c9:ed:24:03:f6:25:62:6f:
         4d:d2:42:cd:41:23:59:3e:d6:4a:a3:55:e3:89:38:47:3c:42:
         50:f9:9e:5b:17:13:ca:fe:37:5d:01:51:3e:6f:42:e5:84:56:
         55:00:be:82:d0:f8:15:fe:c9:12:15:1e:7b:9d:42:e7:d1:4f:
         b3:70:4f:06:ff:0e:29:07:d3:f9:39:f4:b7:26:87:d8:e2:6a:
         03:32:aa:e7:ce:96:e1:2b:db:52:18:02:91:23:b7:5b:8d:8d:
         49:9c:eb:3c:20:64:ae:c1:12:07:2a:89:30:b6:cc:9a:3b:1d:
         97:71:dd:7b:96:6a:da:68:be:aa:ee:63:bf:ad:ea:25:00:65:
         2d:c9:f9:f8:dc:e2:30:5c:15:a9:ab:ca:ea:e4:d1:7a:31:c0:
         16:8e:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:42:11 2024 by rpki-client on console-ams.rpki-client.org