Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6c740755-9154-322d-91f2-9140f0f65608.roa
File:                     6c740755-9154-322d-91f2-9140f0f65608.roa (raw, json)
Hash identifier:          xs/hSyUEG/oe14/bxZb0q9TDwJigdCCedx8gIiD7Xno=
Subject key identifier:   97:80:CC:38:4B:5F:D1:53:4B:23:5F:13:DD:83:23:22:B8:9C:3A:6A
Certificate issuer:       /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
Certificate serial:       010D0C9F432858477230E39A4DFEBB259DBA7600
Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6c740755-9154-322d-91f2-9140f0f65608.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     53665
IP address blocks:        216.120.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:e3:9a:4d:fe:bb:25:9d:ba:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=5a554326-ab68-4090-8a73-067b3bfad893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:64:df:a1:f7:a7:cc:15:02:be:9e:f7:9e:
                    d9:c1:11:42:cc:d8:e3:6c:40:c2:d5:15:fd:7e:ab:
                    32:30:10:81:06:8f:54:68:da:aa:b1:77:80:67:47:
                    ca:24:67:53:22:df:4d:b6:27:d2:70:96:47:ca:e2:
                    b1:54:55:76:f7:2f:c6:4c:50:8b:c9:f8:4c:88:2e:
                    e9:ed:e6:d8:8f:1d:6f:12:e7:46:90:4c:55:82:e7:
                    1b:09:38:82:d8:64:af:67:b5:f6:fe:b1:77:0f:f8:
                    bb:f7:60:c5:01:d6:ae:6a:f6:bb:b3:0a:8c:ad:3a:
                    e8:5e:d8:24:a7:1f:7d:36:bf:15:98:50:e2:ae:47:
                    71:4d:c0:b6:6c:6a:df:f6:6b:1f:0b:fd:54:66:d9:
                    9a:c6:74:de:33:03:4b:c4:25:66:b7:14:d7:02:c9:
                    0c:98:81:20:4e:1f:d0:c5:9a:c7:76:56:51:fb:58:
                    c3:61:4b:f7:58:f4:09:f4:99:55:f9:1d:00:61:ee:
                    00:e6:7f:2e:f0:59:9c:c7:c1:11:3f:6b:d3:fe:a6:
                    7c:a8:a6:34:f9:6b:e1:ec:7d:de:6d:f3:77:2a:a7:
                    60:f3:92:41:a2:9c:64:a5:c5:ff:a0:96:2e:c5:2d:
                    b4:90:54:1e:ac:cf:5c:fe:f4:9c:3a:04:2c:a0:28:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:CC:38:4B:5F:D1:53:4B:23:5F:13:DD:83:23:22:B8:9C:3A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6c740755-9154-322d-91f2-9140f0f65608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl

            X509v3 Authority Key Identifier:
                keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:40:2e:16:88:5b:fa:d9:5f:ac:bf:be:f6:58:1f:15:7c:58:
         36:5e:c1:c0:93:de:0e:1d:dc:8b:a0:08:3d:ec:2f:06:60:ae:
         34:7d:37:9a:39:fe:49:46:8c:fa:e2:63:24:8d:80:25:f5:f8:
         2b:2b:87:11:cc:52:78:64:ee:41:ff:84:cf:7e:bf:16:26:2f:
         58:b1:6d:fc:fc:3b:73:d3:6f:d0:2b:80:15:16:54:a5:19:a0:
         79:04:38:21:6c:80:cb:42:b9:0c:02:a2:06:fe:8a:46:d1:bd:
         28:da:8e:88:6b:d8:6e:96:bf:5b:1d:a2:8d:04:71:74:c8:f0:
         18:bc:70:6a:9c:cc:17:eb:85:78:46:c4:72:d8:ef:2b:48:1b:
         a3:51:b0:9d:2e:c2:b3:04:ca:91:50:88:da:1e:55:81:d3:83:
         c8:4b:ca:9f:ce:5b:d6:59:c4:3f:78:1c:f0:55:fb:02:f2:10:
         c5:47:94:00:0c:f5:fb:0a:fb:2e:13:27:31:23:be:5f:41:d2:
         2f:08:01:2b:b9:cc:e9:a6:ee:1d:ad:60:1f:e9:b2:74:68:d3:
         87:80:2a:9a:b9:46:6d:ab:99:6f:95:e0:45:65:27:33:ff:4c:
         2a:be:1b:91:0a:e5:46:ae:0a:de:4a:c9:fd:cc:cf:84:4c:65:
         6a:61:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org