Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa
File:                     c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa (raw, json)
Hash identifier:          nQ7XXFhN4nVFGpHzheLhnyiH6YP2hw6HqXE/OSbkKQU=
Subject key identifier:   0C:37:E8:08:2A:3C:48:C9:28:9B:AC:DA:1F:BB:59:58:81:FF:25:C7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62AA4F8526A04B7DBB56380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        146.148.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:a4:f8:52:6a:04:b7:db:b5:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=ec57b38c-913a-407b-beae-998c4d0d37ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:ca:ae:97:84:53:ba:4d:a9:9d:28:8e:01:
                    ae:8d:b0:58:a7:74:60:b2:0b:94:9b:85:a2:d9:00:
                    03:29:bc:b5:8a:50:54:4f:e8:ee:76:70:01:55:ca:
                    7b:9b:ff:86:df:97:10:d0:55:65:03:6d:d9:ac:db:
                    ca:2c:f1:34:88:c9:33:a3:1a:a0:a5:cf:57:85:e0:
                    79:38:ea:78:a0:87:5c:1a:ff:a1:94:3b:c7:23:bc:
                    7d:6f:19:f2:16:2d:ae:6f:39:db:f6:91:ae:d9:bf:
                    58:a4:e5:0e:b2:4b:2a:e6:4b:97:dc:f6:5e:29:a5:
                    ed:82:f6:13:6e:85:60:64:12:9f:25:4a:14:d0:7f:
                    ca:0b:bb:b9:c5:93:28:31:25:3a:30:74:8b:49:59:
                    f3:4a:ef:7a:38:a7:bf:dc:07:50:f2:4e:81:a0:ce:
                    3f:7d:4a:cf:38:bf:e0:7e:93:16:42:47:81:41:a6:
                    96:ae:19:7e:4e:89:10:e4:0c:60:42:17:27:6b:bf:
                    18:70:be:18:e3:b0:03:17:b9:4c:3c:5d:46:3e:88:
                    84:cd:59:1b:ec:ba:51:af:ee:14:f5:13:a9:3a:e2:
                    29:a6:32:80:6c:50:63:a5:40:60:04:05:7d:b3:3e:
                    6e:29:71:6a:a5:1c:41:93:b9:35:60:5f:21:ad:73:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:E8:08:2A:3C:48:C9:28:9B:AC:DA:1F:BB:59:58:81:FF:25:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c4d7f2a3-1e62-3fa0-a227-e97031d07942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:c3:09:e9:2c:8b:6c:d6:23:67:fd:7a:7c:9c:b7:fe:6a:
         b2:6f:f1:3b:cb:1e:80:09:e8:19:c3:5f:ce:f5:46:15:b1:d7:
         1e:5e:38:b0:3a:14:77:06:54:60:20:49:13:71:e1:86:d6:54:
         6e:61:ca:31:18:bd:2e:1f:48:9e:f0:bb:d6:9c:e5:31:ca:46:
         27:3c:dc:6d:df:83:90:67:c2:5a:05:76:a9:b1:56:d4:42:f5:
         ac:4d:35:39:93:fd:34:27:f7:d8:89:9c:2f:70:16:64:bd:10:
         ab:5a:4a:88:7b:98:9e:a8:38:46:2c:4c:98:f1:d0:97:8b:fb:
         68:e1:bf:2e:ea:4f:cc:2c:b7:11:8f:c4:de:be:57:71:c3:3e:
         17:e8:32:04:b9:d4:81:42:96:73:5f:aa:3f:57:5d:a4:34:95:
         60:28:ba:d8:96:38:60:0a:ef:70:ed:b0:7f:ac:b3:68:91:8d:
         da:2d:b7:89:f7:d8:fd:34:fc:eb:df:46:b2:ed:da:7f:da:40:
         70:fa:02:e8:54:2d:b6:88:39:90:3b:e6:1e:91:67:07:af:5f:
         6a:75:01:20:61:53:18:a3:a1:83:b8:30:26:cb:14:4b:06:bc:
         ad:d9:7f:6e:b6:72:22:5a:a8:38:96:48:7b:1e:d3:7b:be:53:
         8d:60:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:08:56 2024 by rpki-client on console-fra.rpki-client.org