Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1c11f8b-42cf-30da-a60f-1acd9350dee0.roa
File:                     d1c11f8b-42cf-30da-a60f-1acd9350dee0.roa (raw, json)
Hash identifier:          G+W8IQz4WdVSYRt+9RM22JEEdyKrjEEZOqZBNKy6+7A=
Subject key identifier:   15:B0:E3:AF:3F:65:EC:F1:CA:D4:9E:6E:57:81:D0:4C:95:E6:9A:7D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E62B41713F9C8E8A336C2F20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1c11f8b-42cf-30da-a60f-1acd9350dee0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        146.148.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:41:71:3f:9c:8e:8a:33:6c:2f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=07751873-3ea0-4326-b221-59e20fd11149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:ce:75:fc:85:dc:e5:26:cc:af:e6:54:96:
                    f6:85:3b:1a:fd:b1:7e:2e:43:05:87:3f:9a:25:4c:
                    a6:9e:cb:58:bc:76:42:44:35:89:6e:6e:8f:d2:75:
                    52:0f:eb:f4:e2:d2:e2:81:77:f3:be:4a:f1:28:5c:
                    25:85:90:56:70:14:9c:b7:ea:de:1d:a7:e6:81:92:
                    82:82:ba:a7:08:bc:c9:4c:33:df:cb:1d:76:e6:a9:
                    26:00:ea:b2:04:ae:7c:33:d8:10:5f:0d:88:c3:2e:
                    49:9d:cd:b6:ef:24:4c:5a:c6:9b:64:de:ce:52:a1:
                    ea:0b:a1:94:b8:dd:1a:e9:8d:62:46:f6:21:c1:ee:
                    8e:ef:86:37:b5:67:4e:44:73:eb:d8:04:86:26:0a:
                    d3:d6:1e:18:e2:2d:69:84:87:80:06:6a:65:77:9f:
                    a0:d8:80:d0:91:19:1d:70:29:37:5b:4d:7f:77:ba:
                    7a:7a:62:c3:19:a2:56:72:69:53:06:20:0d:bd:d3:
                    9f:3a:5b:5e:a7:95:ac:e6:76:d1:05:3a:74:5a:2d:
                    b0:9a:16:1e:09:db:8d:03:1b:30:c1:24:9c:ea:e6:
                    0f:a4:92:aa:74:cb:26:68:b0:92:85:7a:2f:d9:55:
                    76:76:9c:d1:64:37:74:73:85:b7:08:bb:94:19:85:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:E3:AF:3F:65:EC:F1:CA:D4:9E:6E:57:81:D0:4C:95:E6:9A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d1c11f8b-42cf-30da-a60f-1acd9350dee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:32:f5:fa:e5:1d:24:ae:0e:ce:84:42:1e:ed:4a:42:c9:86:
         b3:39:c9:b9:3d:b7:e6:47:6a:2d:20:ab:62:71:17:cb:26:ea:
         a7:61:7c:9e:9a:d0:0e:68:1f:81:68:ad:9d:2a:eb:5c:58:37:
         a7:9a:e9:ae:ec:da:9b:b3:dd:cf:f3:6a:aa:77:d0:12:e6:8b:
         7b:92:da:63:90:a5:75:b7:0f:7d:91:d2:ee:33:f6:8a:cc:03:
         85:92:76:93:10:68:e7:50:16:fd:0e:bd:1c:78:3c:df:a3:66:
         0b:cf:6e:1d:ea:f5:bf:d7:26:4d:f3:8f:40:84:da:68:6b:d1:
         11:cd:3f:74:ec:42:34:07:c2:ee:83:c3:7c:1a:97:72:81:9e:
         ae:be:f4:f1:72:e5:a8:fc:60:c6:0d:ec:e5:b0:0e:ff:e5:63:
         5b:3c:14:7f:e1:21:50:59:ce:ce:19:d5:f7:07:94:25:48:9f:
         32:5f:c8:92:e5:f3:93:cb:3f:22:e9:ad:16:a2:a0:57:12:d9:
         45:e5:1e:67:17:d6:bb:74:94:3e:f0:de:e6:e5:b1:c1:bb:6a:
         f2:87:de:0c:3c:d4:d5:9c:4c:b4:f7:c9:8e:9a:40:de:52:69:
         1e:81:0c:56:00:f4:c7:7d:d7:11:9a:4d:b8:a7:e4:a0:f6:84:
         bb:4d:95:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:00 2024 by rpki-client on console-fra.rpki-client.org