Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
File:                     23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa (raw, json)
Hash identifier:          NH52HIchy6ILX6ZD2c04QE10WB1CceRKGlkIFLN7Z5A=
Subject key identifier:   C7:C1:58:32:F1:4B:80:32:96:59:17:63:8D:24:4B:BD:83:0F:B1:D8
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858475910B55F4036C362B038CF80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     398823
IP address blocks:        107.148.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b5:5f:40:36:c3:62:b0:38:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=5a94fe90-2787-415f-8917-a58727ef42ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:6b:13:80:84:98:a2:c3:c3:d4:58:f6:7b:
                    f0:4e:ac:03:c0:25:df:0b:f5:ce:db:83:bd:17:33:
                    d9:1e:76:df:d4:86:70:de:40:6d:c7:55:e0:99:41:
                    b2:6f:e0:5e:6e:01:18:4b:9e:41:a4:9c:fc:eb:4b:
                    5f:7a:34:b6:36:89:61:62:db:c7:dc:d3:3f:68:3e:
                    d4:3e:c1:25:33:74:f3:a6:a3:26:85:86:2f:31:48:
                    99:71:69:36:ff:24:b6:0a:7f:82:96:1b:e7:f8:75:
                    ea:7f:0d:5f:cc:19:0e:5f:bb:33:e8:09:ba:48:e5:
                    19:b8:22:ee:1b:30:02:23:fc:27:8c:dd:d7:10:11:
                    ad:36:d1:b4:40:e6:e2:40:42:fb:31:63:eb:44:6d:
                    dc:0e:78:2d:ba:d1:40:18:75:65:20:ba:05:02:f5:
                    1d:be:61:92:73:63:eb:c9:29:65:a0:a9:79:9c:00:
                    c2:dc:8e:1b:31:48:d4:93:68:83:85:83:a7:3e:94:
                    6a:c5:18:32:e1:25:9d:88:c9:0f:d4:25:e7:41:d5:
                    21:4f:05:59:f4:67:70:09:04:f7:6c:46:85:d0:4d:
                    52:dd:45:75:f6:bb:65:e1:1d:e4:f1:0e:5b:a9:0a:
                    8a:f8:db:32:cb:b4:f5:b5:6e:d3:c5:da:c8:08:88:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C1:58:32:F1:4B:80:32:96:59:17:63:8D:24:4B:BD:83:0F:B1:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23766e22-82ca-3006-bb67-6f6e6b9aa16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:79:53:65:0e:25:cd:73:aa:53:b9:72:ac:c2:bb:16:9d:6e:
         3a:ab:c2:a1:cd:61:2b:2f:33:32:69:8c:e9:ed:94:a9:47:25:
         c5:2d:3a:64:85:e8:2a:6f:6d:fe:a4:a1:4d:85:94:2b:76:ba:
         c7:49:4a:6f:b6:8c:d0:9f:62:a4:5c:f2:be:80:fa:7d:2e:b7:
         cd:e4:ed:f1:73:1d:a2:fe:7c:a9:28:f7:04:15:2f:87:de:b1:
         fb:fc:99:3e:07:0c:5f:27:6c:d4:60:5f:88:63:41:b3:99:bb:
         d9:c4:57:04:46:2a:00:1c:9a:21:92:81:81:35:48:37:be:85:
         a4:f7:6d:75:0d:c1:8f:4c:72:aa:67:6f:f9:c0:93:fa:13:85:
         ff:e9:6d:06:13:50:1a:67:c3:86:81:ac:a0:84:fb:82:b3:7f:
         46:f2:b9:34:75:3f:d3:7d:de:0e:25:cb:52:35:3d:a7:03:cd:
         a2:83:51:23:37:40:98:4c:45:a4:c3:74:ec:ee:45:82:5b:2c:
         d6:15:63:53:0a:e3:46:76:df:2f:61:39:e3:bf:d8:98:01:80:
         f6:ae:f1:ff:df:7a:f2:86:21:76:ea:1d:78:fa:b7:f2:44:87:
         24:79:97:55:67:21:5f:a6:10:43:66:b8:0e:3d:f6:38:01:fb:
         63:8e:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:21 2024 by rpki-client on console-ams.rpki-client.org