Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa
File:                     327b3852-a90b-3425-9c39-6fc599ac324c.roa (raw, json)
Hash identifier:          9nH0S4eWNGSepm7zgJr+MzRyeGwHQBANmNufUUN++6k=
Subject key identifier:   C2:7B:19:C8:98:89:5A:25:96:DB:92:86:34:4E:53:9A:61:A6:D7:66
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F432858475A7631C74442B1CD53F13900
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        152.130.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:31:c7:44:42:b1:cd:53:f1:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=0a3d60b6-8574-4bc0-80ba-4025880de9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:45:02:39:b5:38:36:1a:63:0e:c1:88:f1:
                    c0:ed:8f:53:10:cb:6a:e5:3f:2e:74:7f:51:83:ad:
                    43:97:55:58:61:c6:0a:5a:be:b8:b1:42:d6:1f:ae:
                    25:8e:11:91:db:bd:a7:a6:9f:9c:d5:b6:7b:d4:af:
                    c9:f4:04:4d:79:1a:fe:15:29:63:94:dc:d5:5e:9b:
                    9b:91:b8:a3:cc:e5:5b:32:cf:6e:ad:a7:ab:ee:e1:
                    c3:9b:4e:00:07:45:6f:cd:4c:ff:ea:83:1d:1b:48:
                    b6:98:be:64:4d:8c:c7:68:1c:3d:f6:7d:31:4f:65:
                    c3:70:fe:03:c4:ed:98:5c:2e:74:70:00:76:41:f2:
                    0e:76:7b:97:6d:d2:67:fc:9f:39:b5:1e:de:38:59:
                    6f:30:d6:4d:40:1e:ff:1c:e2:54:ee:6e:67:df:6a:
                    b6:88:a5:31:73:5f:6b:4c:82:b3:f1:9e:9d:98:11:
                    2e:e8:38:ed:4b:d9:69:9b:f1:a7:81:b1:76:f0:17:
                    ba:92:6c:4b:41:b4:03:ea:7d:d9:65:87:b0:e1:41:
                    a6:6d:8d:1e:65:d5:20:42:6f:fd:e9:52:35:06:7e:
                    2d:be:91:f3:ae:90:95:d5:16:e5:c1:a9:1b:c7:f2:
                    91:17:cf:23:68:6d:2e:32:a8:91:a8:52:8b:85:0c:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7B:19:C8:98:89:5A:25:96:DB:92:86:34:4E:53:9A:61:A6:D7:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/327b3852-a90b-3425-9c39-6fc599ac324c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:8b:ce:7e:57:c6:ab:39:a6:41:18:ff:da:d8:bc:83:c3:
         1e:82:83:45:45:6b:6a:96:80:17:1d:2c:59:4e:21:9c:2d:42:
         05:f9:b6:e5:07:f7:98:2b:1d:be:99:95:0f:79:2e:c2:2c:64:
         4d:3d:31:54:f2:d3:e8:b9:60:8b:5b:1e:3a:34:7c:97:6b:77:
         fb:58:37:9b:e5:d8:7d:83:84:4a:3a:71:65:6a:bf:30:94:54:
         58:a9:7c:59:b1:f6:80:a1:d2:31:d2:b3:96:c8:d6:d3:82:d5:
         72:5d:3a:95:32:9f:d7:14:ed:8a:45:87:74:aa:16:0d:49:83:
         ae:a2:9d:11:f0:7f:c1:67:aa:ec:f4:79:0e:41:1a:c4:7b:e9:
         f9:15:c2:5f:fc:b3:03:dd:ad:7f:4a:5a:9e:26:98:8c:35:f2:
         33:97:2d:6d:b9:da:9c:8c:9c:92:40:93:9c:5a:ba:90:15:2e:
         18:0e:b5:a8:0b:b3:8c:76:7b:46:5d:4a:0f:01:d2:67:3b:ff:
         17:0f:39:7f:1d:bb:43:33:d4:9c:99:dc:7c:9d:4e:af:49:e0:
         2e:20:9e:76:38:8a:52:a2:8a:ff:8a:6a:58:aa:25:80:19:de:
         c2:0b:4f:f5:da:9a:cf:cc:ab:dc:ae:0f:82:ec:5f:ae:7c:90:
         fc:cb:d9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:11:41 2024 by rpki-client on console-ams.rpki-client.org