Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa
File:                     bc03ef31-23dd-3af7-bae3-71da91faa331.roa (raw, json)
Hash identifier:          G87L9q5KDc8H6saChzS6pxJrxM9vjG9TRZkFXcO0EfM=
Subject key identifier:   13:8A:09:F5:25:DC:24:07:69:CB:5D:46:01:B2:97:A3:73:B7:39:97
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F432858473386C57ACA181D82A0E66230
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa
Signing time:             Fri 13 Sep 2024 14:17:43 +0000
ROA not before:           Fri 13 Sep 2024 14:17:43 +0000
ROA not after:            Thu 12 Dec 2024 15:17:43 +0000
asID:                     8560
IP address blocks:        192.195.77.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:86:c5:7a:ca:18:1d:82:a0:e6:62:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:17:43 2024 GMT
            Not After : Dec 12 15:17:43 2024 GMT
        Subject: CN=4f4d165c-aee1-42f1-aa94-97aba1c9f17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6e:0b:c3:d7:7b:25:d9:2b:c0:9d:5f:d3:af:
                    89:08:20:c7:75:65:df:17:40:e5:a8:2a:68:43:82:
                    07:44:0f:05:3d:96:a1:14:bb:2b:5a:c0:ee:f9:1d:
                    42:9b:bf:45:5a:c6:8e:c0:55:9b:be:5d:d1:ff:bc:
                    81:cd:53:78:06:7c:1b:3c:90:5a:61:ca:b1:2f:92:
                    2c:02:98:25:9e:15:01:98:ee:bf:dd:b3:5e:10:2b:
                    60:46:27:d2:99:24:6b:b3:b8:b1:9f:9d:46:fe:2d:
                    86:6d:cc:a5:e6:62:48:f0:e1:a2:bf:98:ca:e6:ab:
                    34:4c:38:12:87:21:8c:01:2d:66:75:26:a3:a6:13:
                    09:23:2c:be:c7:fa:ce:8c:41:e3:0f:52:24:11:1a:
                    dd:2b:de:d0:75:13:99:b6:ef:0e:6e:8a:84:5a:01:
                    b6:4e:85:92:72:53:27:25:70:70:f0:33:42:3d:fa:
                    56:83:46:59:04:b6:68:15:9f:d3:74:7c:72:e7:b2:
                    17:62:da:db:7c:0b:48:76:4e:8c:d7:e6:cc:31:4b:
                    f5:b9:08:23:96:ad:1e:4f:62:5f:f9:9f:ce:be:5d:
                    3a:96:1b:f6:00:8f:77:7a:49:f5:36:ab:9a:56:cd:
                    35:67:1d:46:be:02:39:48:f2:1e:42:21:90:22:e5:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:09:F5:25:DC:24:07:69:CB:5D:46:01:B2:97:A3:73:B7:39:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/bc03ef31-23dd-3af7-bae3-71da91faa331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:b6:f5:2f:60:f9:66:dc:35:60:7b:c0:54:1f:0d:f2:ee:9a:
         46:9e:99:af:ee:22:75:24:ee:b1:88:d7:30:c2:36:1c:d6:77:
         12:d6:5a:b6:04:8a:88:0d:b5:27:4e:de:80:c5:64:40:da:91:
         06:76:fd:da:91:81:66:d3:f1:ff:dd:4e:a1:09:8a:bb:37:e8:
         1d:ed:48:52:75:ee:e6:6a:51:5f:21:1d:40:ab:f9:c2:2e:de:
         5c:e7:41:d9:10:e0:57:77:6f:3e:b8:60:61:fa:ce:f6:c6:c1:
         dd:a0:b4:e7:da:aa:52:e7:6c:de:01:02:2d:c9:66:ad:c8:a9:
         45:bd:8a:32:f7:25:93:48:8a:3d:46:73:bc:56:f5:b1:fe:ea:
         3f:62:ec:60:69:c1:51:9c:64:ff:10:95:fa:96:44:85:de:f1:
         51:02:9f:ef:14:48:52:07:3a:24:44:de:c1:81:9d:cd:32:7d:
         bd:02:74:7a:a3:14:55:9e:07:c0:6d:ac:65:d2:ff:fa:36:59:
         16:ac:d1:5c:d5:63:a2:96:cd:b8:97:39:c7:6a:3f:c1:68:88:
         19:24:b7:e0:4d:dd:0f:6d:fe:24:3e:d7:cf:91:0f:79:58:f1:
         6b:4e:8e:c8:ee:62:10:88:12:83:af:fc:2a:a1:eb:de:fc:cd:
         6f:e2:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:01 2024 by rpki-client on console-ams.rpki-client.org