Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa
File:                     37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa (raw, json)
Hash identifier:          Qr0At4ETB1C09CSZjOmuKVsxIJhdJopveGKt5HvhIrk=
Subject key identifier:   90:3D:1F:D6:56:47:0D:56:4B:1F:12:46:2F:F9:CD:84:86:05:F1:7E
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847C344945278FA7B313A192200
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     398823
IP address blocks:        107.148.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:94:52:78:fa:7b:31:3a:19:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=2ee36b82-5314-4242-a599-942e08e639b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:0e:91:9b:7e:d0:fb:60:47:76:23:95:a7:
                    02:e5:f5:53:f5:0a:48:42:00:b0:a0:e0:14:75:a6:
                    39:6f:c7:2e:c7:d7:69:e3:34:d0:ea:65:33:8c:06:
                    f3:2d:1b:9f:b2:62:61:50:97:e2:64:0f:3c:04:ab:
                    53:5f:9b:2e:c6:c6:ca:d3:fe:01:e9:3e:c6:3b:e8:
                    62:2a:17:fe:5c:07:ed:dc:20:2b:5b:bd:7b:c7:18:
                    75:5a:c3:f9:4f:ae:85:a1:c6:b0:6d:2f:13:05:58:
                    79:07:8a:74:26:cb:60:9c:36:5d:92:76:df:76:b6:
                    2c:76:13:d8:c6:55:12:8f:67:66:69:8f:b3:7b:80:
                    da:86:dc:03:97:7d:21:74:bd:b6:a7:a3:da:8c:97:
                    30:26:b9:25:6b:da:3e:33:e2:71:bd:7f:75:25:72:
                    65:e5:81:d3:03:3a:85:a6:8c:dc:88:6a:e5:e5:c8:
                    64:0c:6e:e5:b6:46:ae:ba:99:9a:5f:69:bb:e3:a9:
                    13:a2:85:d2:36:e8:f2:d3:e6:4e:41:f9:8c:52:16:
                    32:ba:22:66:b0:42:78:e5:63:68:ce:09:97:1d:3f:
                    d5:44:54:5d:42:5b:94:5f:c5:89:f0:31:90:be:ac:
                    b1:11:3b:bb:69:d7:c5:36:b3:51:f5:8b:4f:83:cd:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:1F:D6:56:47:0D:56:4B:1F:12:46:2F:F9:CD:84:86:05:F1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/37bf49b6-3e7e-352c-8a5d-3a8ed6c4af5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:45:6d:f9:b6:63:fd:6b:68:2c:b8:5b:da:c9:86:aa:ba:bb:
         79:51:7b:44:a7:a6:47:e6:80:dc:93:1f:1e:90:04:2c:60:4a:
         05:2c:ef:0c:06:3f:92:c7:31:ed:2b:7d:f7:f6:61:f6:ac:86:
         3e:a1:64:ad:c2:77:f6:f0:1e:cd:b4:78:1b:ca:01:10:f6:8d:
         b0:75:ba:f1:5c:60:2d:37:6b:01:72:2d:62:48:1c:87:87:5f:
         3d:43:b1:d6:32:f0:26:09:7a:3a:68:ed:5e:6c:b9:35:6f:d1:
         9d:40:9b:b0:ff:ab:ee:3e:b7:05:84:f3:95:26:ca:43:df:85:
         02:c1:04:22:f0:0e:00:40:69:5c:14:ea:db:ae:ef:67:54:f1:
         f6:62:42:c5:d4:bb:77:9b:10:eb:7f:3a:bd:82:c9:2d:43:a2:
         ae:6f:a6:a5:9a:0a:8c:71:db:e9:e0:df:27:99:75:93:8d:f6:
         29:fa:40:19:43:af:2a:18:63:5b:dc:10:b0:1c:70:ee:27:7c:
         05:c5:90:4b:40:fe:5e:8d:e0:7a:41:d7:79:cc:1f:8f:c6:7b:
         6b:9d:26:ed:dd:4c:4f:df:93:8d:8c:aa:b5:5c:0d:bd:8d:7c:
         b4:a1:1d:21:05:27:45:7c:85:7c:c9:d9:4d:6b:fa:1e:68:84:
         f3:ba:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:21 2024 by rpki-client on console-ams.rpki-client.org