Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/79ae258c-8ba5-38af-85f2-6739f53c8b17.roa
File:                     79ae258c-8ba5-38af-85f2-6739f53c8b17.roa (raw, json)
Hash identifier:          Yz/4nsBYzHBdf5F/C2pQZrMSfiLRtrKOHNcW4/la2nA=
Subject key identifier:   C0:22:B3:9E:44:28:9B:9F:28:FF:69:83:7F:3B:09:EE:69:B2:A3:52
Certificate issuer:       /CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
Certificate serial:       010D0C9F432858478CB6898D246F6F671572E040
Authority key identifier: 8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/79ae258c-8ba5-38af-85f2-6739f53c8b17.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     8075
IP address blocks:        205.143.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:89:8d:24:6f:6f:67:15:72:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=20d1bbac-22d5-4ed5-81e9-e2cd675c7ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:da:43:6a:a5:bb:8d:fa:91:d5:94:04:86:
                    18:48:71:c7:52:63:53:e7:e1:7d:0d:d2:b9:dd:a1:
                    07:5e:11:b3:78:e1:1a:d3:93:13:83:bc:fa:27:95:
                    45:c6:68:1c:c0:88:55:9d:70:a1:ea:36:73:cb:bf:
                    46:ce:bb:71:42:29:32:dc:97:19:a4:b8:41:7e:01:
                    c3:15:61:65:d6:9e:87:8b:ca:b7:d5:38:55:91:40:
                    81:b2:eb:f8:2b:fa:b9:67:26:53:0e:69:4d:8d:a4:
                    de:19:67:50:2f:83:78:dd:34:c8:98:bd:0e:99:6e:
                    8a:b9:8d:b9:7f:f5:c0:6f:c6:7b:46:2a:37:cd:ed:
                    c3:4d:41:de:72:e7:18:3a:e3:a1:6e:1f:18:fe:5c:
                    67:88:b6:b6:80:cd:4d:01:de:95:40:a6:0a:96:22:
                    99:01:0e:1a:89:63:83:cb:ce:04:b4:40:a8:dc:e8:
                    df:cf:e2:50:6b:cf:70:3c:6d:58:76:bb:9a:1c:f5:
                    57:db:4e:50:75:31:8b:e2:f6:9f:32:fb:54:70:d2:
                    ab:32:a0:9e:bd:64:bd:ad:66:29:cf:65:6c:1f:3f:
                    f9:17:c4:ff:33:59:14:7a:0d:cd:fb:9b:a9:bc:80:
                    8d:fc:1f:58:6b:c2:14:6e:2f:8d:73:42:b4:7c:03:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:22:B3:9E:44:28:9B:9F:28:FF:69:83:7F:3B:09:EE:69:B2:A3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/79ae258c-8ba5-38af-85f2-6739f53c8b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C7:1D:9B:12:BB:F9:46:70:21:D3:1A:46:40:F5:27:20:ED:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a8c83fa-ffcb-4c14-9e3b-c3fa40561ad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:c4:e5:f0:18:6f:ab:fd:6f:41:4c:0a:0e:a6:3b:ba:4c:
         fc:56:8c:e6:5b:62:57:7c:0f:a9:19:c2:d8:e4:92:56:bd:46:
         8a:99:6b:f3:8c:3b:f3:bf:ec:ff:9c:3e:8c:5d:0a:f4:6e:03:
         36:d3:b8:7f:d3:43:a9:77:eb:22:1c:54:64:09:fb:ee:34:3b:
         4a:24:96:cb:24:b8:bb:ac:6f:16:ef:8a:dc:c5:76:ef:ab:a6:
         ca:0f:9d:94:b9:7a:83:88:55:8a:82:57:38:e7:de:c2:74:43:
         47:41:a3:70:b4:0c:35:45:f6:75:0f:14:d7:c6:58:c7:5c:63:
         d9:41:d5:28:ec:ab:e9:05:b5:0b:53:6f:f3:bb:02:66:97:70:
         a9:62:5e:94:7c:82:19:b9:d6:27:90:f5:5f:28:7e:86:22:cb:
         26:63:b6:ca:41:ac:5d:87:8c:9f:74:a6:07:9a:2d:e9:30:95:
         e3:16:53:eb:19:91:cc:a7:15:85:88:72:6f:69:87:5f:ce:7c:
         6b:b9:14:9b:e2:63:f9:ad:ac:17:00:75:ec:72:48:98:07:e5:
         f9:f6:ca:36:b7:29:6c:33:51:72:bd:0d:e0:80:46:63:e1:37:
         2e:df:77:8d:5b:4f:33:ad:48:0d:b7:db:be:6e:11:37:5d:58:
         6e:b1:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:06 2024 by rpki-client on console-ams.rpki-client.org