Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
File:                     4758cd24-a95f-3bd5-b342-8e08369bfb40.roa (raw, json)
Hash identifier:          b7KLN4u8rkPZ4K31+zco3RnrTG4x92YNRdluIcpVv+8=
Subject key identifier:   09:51:4C:C1:4F:B0:47:6D:D5:08:AA:05:B6:2B:5B:47:3A:01:37:B8
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F432858473392881159C70F740191E200
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa
Signing time:             Fri 13 Sep 2024 14:41:25 +0000
ROA not before:           Fri 13 Sep 2024 14:41:25 +0000
ROA not after:            Thu 12 Dec 2024 15:41:25 +0000
asID:                     8560
IP address blocks:        209.46.120.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:92:88:11:59:c7:0f:74:01:91:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:41:25 2024 GMT
            Not After : Dec 12 15:41:25 2024 GMT
        Subject: CN=91a77ea7-392e-43b4-b073-4cc86ebadf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:ec:b1:e6:27:43:f2:1a:d8:f6:2b:86:a6:
                    7a:d4:31:76:f8:a2:01:97:0b:f4:d9:36:be:9c:73:
                    29:d5:cc:05:06:08:9c:58:80:e0:de:6b:d9:f0:09:
                    63:81:e2:49:b6:56:5c:dd:f3:dd:4d:ca:7b:7f:d6:
                    74:65:fa:0f:b5:fe:95:88:c3:03:04:29:56:3c:d6:
                    c0:33:4c:e2:e2:5f:77:70:ff:88:ef:52:ce:61:2a:
                    b7:25:8b:c9:4a:05:04:10:4c:95:c9:9b:93:71:6d:
                    cb:de:2d:1c:25:17:98:8a:86:fc:53:f8:c7:e6:9f:
                    f0:1e:35:c2:5d:f2:9b:73:f2:00:28:6b:1e:8f:f9:
                    d9:78:bb:83:8b:e1:5d:4c:ae:e4:f5:d1:de:6f:29:
                    30:e1:79:84:6e:83:f2:ab:b0:60:27:aa:40:68:f4:
                    07:13:95:b1:31:96:74:b5:8d:61:35:de:54:b2:73:
                    fb:85:cf:e7:6c:ca:38:52:fd:29:63:6a:6b:89:7b:
                    75:d8:af:d4:7b:63:57:b2:cb:f6:17:95:d4:d7:4c:
                    70:ee:7b:db:c3:38:f1:46:0b:d6:70:6b:b9:bf:fe:
                    dd:d2:b1:83:3d:a2:ea:14:1b:65:b6:54:3c:e1:69:
                    94:0f:df:53:1c:36:b2:9a:1b:45:09:3b:02:73:a1:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:51:4C:C1:4F:B0:47:6D:D5:08:AA:05:B6:2B:5B:47:3A:01:37:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4758cd24-a95f-3bd5-b342-8e08369bfb40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:8c:a2:df:b7:13:70:e8:33:8b:69:7e:0f:ec:8e:37:9c:
         ef:4c:72:4f:98:16:fb:97:67:1b:c8:c7:e7:f0:d9:fd:73:cf:
         3a:4e:bf:44:75:10:8f:5f:92:59:a9:2a:1f:9b:8a:bf:80:45:
         a6:92:8c:34:6c:f2:87:3c:0c:f9:bc:99:3b:61:86:cf:78:3f:
         0f:bb:46:37:72:17:0f:fb:b7:cb:25:f2:a0:09:3f:71:57:2c:
         63:0a:ed:b1:3b:85:5d:4a:5c:52:f6:45:8d:cd:53:4e:69:f6:
         65:76:29:fc:f6:49:c6:8a:1b:08:de:42:5f:7e:de:c7:d9:fa:
         f5:da:1a:0b:9f:24:c0:29:20:e9:d9:49:79:95:c0:6b:18:1e:
         16:5a:3e:53:d3:91:43:5a:74:de:4c:fb:94:8e:11:c3:8c:59:
         17:f2:1d:e2:a7:88:47:2e:1a:dd:69:79:dc:f2:85:b4:2d:df:
         34:65:28:be:32:93:84:63:12:22:7a:6d:d6:57:fb:be:77:e2:
         3b:aa:77:2a:db:cf:2f:07:42:8d:ce:d7:bf:ac:20:3c:07:33:
         2e:ae:1f:d6:7d:e7:e4:56:f6:da:ff:51:d5:d4:1d:d2:c6:7a:
         fe:58:75:60:2b:e6:c0:4b:9a:00:8f:6a:23:ba:af:4e:a5:1a:
         0a:c4:72:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org