Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
File:                     167e52c7-fbe4-3f43-bddb-624de95626ec.roa (raw, json)
Hash identifier:          bO+MZyhuOUccfW4Mc9ZntWzsfUJ2sXditkTg3oWvTNU=
Subject key identifier:   5E:1A:74:EA:59:24:76:02:75:8A:75:26:49:9F:8A:2A:3C:CC:DD:5E
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285847EE8A3112C3CFC2E60AF60A80
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     7862
IP address blocks:        146.23.192.0/22 maxlen: 22
                          146.23.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:31:12:c3:cf:c2:e6:0a:f6:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=065c3a76-fafb-41bf-9300-0fcd5369c37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:6e:fb:fa:89:6e:f9:02:ec:12:ac:47:a5:
                    10:f7:d9:8e:83:9e:d9:c4:ac:22:ff:19:07:ad:9f:
                    d0:f8:3e:e2:d4:f7:a0:3c:18:a7:9b:d1:a9:3c:c5:
                    b9:b3:e9:59:00:1b:27:bd:74:f5:73:b9:b7:f6:18:
                    77:98:d3:c3:8b:2a:ad:86:93:b5:f2:9a:9f:b1:21:
                    a0:08:ed:ff:79:0c:b9:ac:6e:d2:23:40:61:84:32:
                    d7:f3:ba:a1:1a:dc:21:a9:f9:fb:b3:f0:e5:ac:af:
                    d0:71:e7:a3:5e:c0:47:11:23:be:5c:6e:ea:24:c4:
                    dc:37:31:92:be:69:77:bb:c3:29:45:2b:39:36:fa:
                    54:45:14:44:43:4b:51:23:72:f6:23:95:e2:91:03:
                    55:4a:2c:53:7c:85:d6:ff:73:bd:ad:cf:f2:1b:84:
                    d3:af:b5:d5:aa:42:89:4e:b5:0a:91:dc:21:e9:e4:
                    db:17:e0:2a:4a:f7:61:a6:38:d6:ab:41:87:dc:4c:
                    d1:4e:09:6f:6f:d0:fb:ce:df:b9:be:48:eb:58:ea:
                    7e:4c:6d:73:d0:9d:bd:bf:fb:e8:f5:78:3b:19:95:
                    92:43:bf:27:f2:d3:44:e1:eb:d5:ae:cc:e2:a5:bf:
                    01:2e:9e:0c:fb:e7:58:aa:5d:2a:a9:bf:e3:6d:87:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1A:74:EA:59:24:76:02:75:8A:75:26:49:9F:8A:2A:3C:CC:DD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/167e52c7-fbe4-3f43-bddb-624de95626ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:1b:b1:58:20:f2:db:f5:3d:19:b5:14:c1:25:03:51:d2:fa:
         d7:41:95:1f:95:54:67:bc:bc:0d:60:46:40:4f:ac:e4:4d:b3:
         64:6f:15:4c:5b:ba:2e:43:ad:24:e7:15:2d:97:2d:f9:ed:8e:
         ce:fc:66:95:08:fa:7f:45:19:b3:9f:d7:26:1b:d6:a3:2d:dd:
         eb:3d:22:cd:19:c3:38:c2:b6:72:89:53:3d:85:a3:26:cf:a9:
         e0:e7:b2:16:67:48:af:54:ea:0f:8d:55:02:f1:51:bb:d0:d8:
         3d:5c:33:8a:7e:fc:29:b0:a4:e3:cc:66:23:7b:17:10:00:af:
         0d:f7:e0:59:8b:6f:7b:94:31:3f:6d:41:ed:f4:0d:f5:7b:d2:
         92:27:a2:1c:b2:ca:ac:b3:02:18:0a:0e:58:c4:00:eb:5d:71:
         b4:eb:c3:c6:6a:f8:9a:63:0f:a9:ba:cd:c3:93:12:5e:a5:09:
         0a:35:75:b8:fb:b5:f3:d6:b9:20:51:c4:1d:68:3e:71:3a:88:
         dc:41:b5:a0:1e:3a:10:79:0e:ec:8f:6d:2a:36:70:cd:3f:a6:
         25:85:48:6c:1a:c7:19:2b:62:84:f6:7f:de:65:89:c9:e4:7a:
         aa:cf:86:f2:ab:2f:55:eb:1a:d1:87:0c:89:6d:76:72:f1:ea:
         0d:53:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:03 2024 by rpki-client on console-fra.rpki-client.org