Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/77083666-248f-3f2e-b711-81d7bfd0a224.roa
File:                     77083666-248f-3f2e-b711-81d7bfd0a224.roa (raw, json)
Hash identifier:          HByVNZ67+c0bCJJfng+5gHyOS0BvoGW0w8oDpEJgLUI=
Subject key identifier:   B0:70:7A:EF:4B:57:95:A3:6B:FD:06:FD:55:00:CF:61:15:F2:8B:4F
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F4328584765A0E42CFA444BCB2C6E2080
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/77083666-248f-3f2e-b711-81d7bfd0a224.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     136133
IP address blocks:        209.160.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:e4:2c:fa:44:4b:cb:2c:6e:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=6632bff0-44a5-429c-9709-d5667dcf6cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:fc:4d:ee:a3:fc:72:ad:60:2c:96:d8:78:
                    57:a1:d9:15:2e:76:40:8e:06:e5:db:37:84:8c:74:
                    9c:ef:02:4b:f7:37:d3:ba:51:ca:00:13:cb:0b:31:
                    d6:4a:20:c6:a0:8c:ea:ef:8f:f5:6d:72:06:2a:0c:
                    d5:48:f5:c8:fe:ea:bd:7e:3f:36:c7:6b:94:8f:23:
                    cd:54:ce:e8:62:67:c0:69:1d:03:9f:d4:28:23:67:
                    05:6f:27:52:e2:d1:68:65:2e:99:bb:70:46:16:d4:
                    b8:6d:ec:da:e7:7f:2c:cb:af:8b:b0:95:6f:bc:4f:
                    e1:c8:d6:65:d2:98:8d:9b:c3:d5:57:94:ae:84:2b:
                    5f:e6:30:40:b3:a4:f9:44:8f:e2:f3:8f:46:2d:5b:
                    ad:97:34:f9:04:49:24:fd:4e:a9:4b:6a:2f:e1:4a:
                    9e:8a:fc:ed:b6:3e:e2:c1:1b:93:50:e4:a3:17:36:
                    c2:e9:25:73:9e:90:2b:fc:5d:d2:d8:b5:cf:44:50:
                    96:60:38:3c:34:91:f2:c6:02:62:ea:06:e1:4d:f8:
                    1c:08:6c:00:cb:92:32:49:c5:14:92:d4:fe:32:4b:
                    e9:3b:85:d8:0f:84:eb:95:1c:f4:47:37:66:50:5f:
                    c3:83:6f:a4:a5:5f:15:9f:2e:b8:fa:ee:99:14:fa:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:7A:EF:4B:57:95:A3:6B:FD:06:FD:55:00:CF:61:15:F2:8B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/77083666-248f-3f2e-b711-81d7bfd0a224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:28:a2:74:a1:20:8f:15:34:92:7e:1d:be:2b:d8:70:ce:
         2a:d1:db:99:a1:8d:62:47:87:51:0c:47:7a:22:e8:fa:45:f0:
         a9:f5:8f:c7:94:6f:3b:f9:66:ae:f2:99:7c:ea:f5:7b:8a:69:
         b9:9d:89:03:ce:cc:1b:f5:6c:16:91:c2:52:bf:26:ba:11:14:
         6e:99:96:fd:58:50:c7:7b:2a:fb:e6:38:e4:bc:a9:c1:28:34:
         44:13:f7:d0:eb:b1:e8:ec:34:3f:5f:2c:07:37:c4:3b:af:15:
         2b:51:1a:38:51:b7:1c:33:df:00:54:33:78:04:43:64:03:9f:
         b0:35:72:06:ca:c5:41:47:d8:26:d5:fb:fb:6e:9d:5e:ca:ea:
         31:6e:6e:ed:03:99:31:ba:92:b8:86:9c:b9:7d:86:a3:38:a8:
         6a:4e:c5:9a:28:33:d2:cc:f5:fb:e5:87:2c:dc:ae:d8:25:76:
         07:f3:d9:26:b8:e4:7e:19:cc:2b:06:7e:77:bf:26:a9:69:6a:
         44:15:de:a7:46:d5:94:dc:c0:c0:f7:92:3e:de:97:ac:48:36:
         f6:e7:6f:03:44:9a:1c:eb:e5:fd:fd:84:3b:1f:c1:42:70:97:
         ab:28:f5:a5:ff:6d:5c:d6:2b:cb:ad:15:fb:a6:2a:b8:4d:c1:
         25:b7:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org