Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/108fd9ae-65de-3d0d-afa0-2733d304eb96.roa
File:                     108fd9ae-65de-3d0d-afa0-2733d304eb96.roa (raw, json)
Hash identifier:          C0vL7Cst6SUMJBy6qB4pjIsxG2GVHHcVjlQGGclrGm0=
Subject key identifier:   6E:90:1C:87:8F:09:5C:33:1E:97:75:B9:AF:1C:EC:BA:26:36:CA:F1
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847BAC6A630D463F5DE020C5580
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/108fd9ae-65de-3d0d-afa0-2733d304eb96.roa
Signing time:             Fri 01 Nov 2024 01:00:30 +0000
ROA not before:           Fri 01 Nov 2024 01:00:30 +0000
ROA not after:            Thu 30 Jan 2025 02:00:30 +0000
asID:                     399195
IP address blocks:        107.148.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c6:a6:30:d4:63:f5:de:02:0c:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov  1 01:00:30 2024 GMT
            Not After : Jan 30 02:00:30 2025 GMT
        Subject: CN=e43ebe98-d2e1-4db1-8500-2fdc897d835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:eb:6d:8a:16:45:78:01:3d:94:f1:0a:4f:
                    2c:f0:32:7c:35:ce:75:70:d7:59:5d:1c:2f:5c:01:
                    6b:2c:8c:c1:af:dd:08:87:d7:b4:10:1c:60:78:d2:
                    29:43:f4:9f:43:e2:18:52:74:ab:06:d9:2c:0d:96:
                    02:2c:e6:8b:79:c2:f6:36:bc:43:b4:ad:42:f0:c4:
                    e3:66:e3:ea:33:ed:d3:ed:f8:36:45:7f:b6:1d:8b:
                    79:58:23:26:45:0a:db:f7:a5:b5:15:47:9d:83:cf:
                    2e:64:cc:4d:f3:72:b6:ad:13:19:a0:5f:b2:ff:2b:
                    6c:ba:94:4b:a4:8a:46:2b:85:6b:fa:0a:05:cc:e5:
                    fe:57:74:c6:7c:fb:6c:36:6e:06:eb:82:c8:d6:32:
                    b1:24:e1:38:a2:47:79:40:ee:88:c8:a4:af:37:5e:
                    16:53:2f:33:ba:14:04:99:c1:d3:1d:4d:d5:43:89:
                    29:a6:db:ef:b3:78:ae:a7:99:b7:f0:a6:c3:94:8f:
                    f1:09:37:1b:e1:48:d1:a0:36:93:b1:36:a0:3c:1c:
                    c3:7a:02:05:3e:e6:32:54:56:0e:ec:35:0c:00:e6:
                    4b:5a:94:6e:bc:ac:99:7b:e8:cd:5e:ea:dd:70:07:
                    97:a4:86:d6:22:ca:54:76:cc:ea:99:d2:d4:1f:3c:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:90:1C:87:8F:09:5C:33:1E:97:75:B9:AF:1C:EC:BA:26:36:CA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/108fd9ae-65de-3d0d-afa0-2733d304eb96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:04:3c:1f:48:08:5e:28:d7:bd:3f:9e:fc:0b:7c:56:ad:
         02:2a:7d:3d:05:a7:47:2a:82:9d:9e:22:b7:6d:5d:c3:6f:8a:
         92:91:1d:9c:dc:db:65:9c:e7:68:d8:2f:13:ad:8e:25:a7:0d:
         de:3f:50:59:9e:12:86:3e:b1:b3:71:8e:bf:c5:fb:fe:69:64:
         a7:2c:ed:c5:50:2f:bc:8c:c2:57:bd:9b:f1:85:f7:54:bd:ad:
         0b:4b:1e:e2:36:bf:cb:a7:88:d1:9e:55:1a:42:09:fe:54:19:
         50:2b:2d:f4:95:88:05:21:88:ad:61:76:36:d9:41:ff:76:bc:
         a5:e4:c2:6b:e1:50:0b:5a:cc:05:f8:8d:38:71:3a:28:73:f8:
         12:ae:31:ce:b4:4c:ec:3f:4f:87:37:59:83:36:e2:d4:cf:2c:
         cb:cf:0f:e0:01:fd:45:c6:26:55:30:47:d4:3f:8f:ca:5a:e5:
         a1:ef:8d:39:5e:fd:ee:88:b1:77:b5:e5:83:0b:27:7c:47:98:
         c0:0e:d5:05:2a:7c:d9:95:63:09:92:bf:1b:f7:28:a0:ec:83:
         29:2e:97:a5:3f:95:b9:f0:43:a3:59:b7:4b:3f:8a:51:c0:c5:
         fc:af:19:ca:5d:5b:33:b9:ad:01:b1:c8:98:cd:24:88:40:c2:
         27:84:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:21 2024 by rpki-client on console-ams.rpki-client.org