Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
File:                     5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa (raw, json)
Hash identifier:          Nx896McTs9dojrshQN/Un8/MHsueP3tTN/JkDfwtZyo=
Subject key identifier:   08:A2:A8:F6:C9:20:5F:5D:31:86:B7:2C:D1:54:DD:81:98:AD:F0:37
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858475910B57714F0C59578FED540
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     398823
IP address blocks:        107.148.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:b5:77:14:f0:c5:95:78:fe:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=643c0d96-7873-4584-9d69-376fc542a32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:ac:34:e6:1c:25:a4:e1:b5:67:bd:a1:8f:
                    23:66:27:1a:05:ec:55:ca:c0:17:b8:39:8b:02:c0:
                    d8:23:44:67:fa:1a:df:78:1c:12:27:e3:98:4d:7b:
                    cf:e0:44:e7:b4:05:4b:ad:9e:4c:ed:ed:f5:69:08:
                    d4:4d:aa:df:7a:5c:51:9a:60:76:ac:06:74:78:88:
                    50:1f:6a:08:c8:d8:0e:bd:7b:8c:d9:2d:ec:e1:0e:
                    18:d3:ae:82:66:05:13:42:8d:be:76:76:17:64:44:
                    42:2f:4c:05:2b:05:45:23:a0:ae:ce:02:74:c1:f6:
                    02:68:a6:dd:f7:81:de:46:d7:9e:7e:d1:ce:e1:93:
                    40:0d:7a:a6:8b:4d:cb:53:b7:69:ed:24:35:76:8e:
                    78:bc:d3:81:83:4d:d3:ad:a0:50:d6:5d:b3:98:a6:
                    80:99:12:73:a1:6d:7c:9d:0d:8c:c2:31:8e:56:cf:
                    d1:4b:d1:8e:6d:44:99:e4:be:2a:e9:cb:d9:c7:85:
                    d9:11:18:de:e5:b9:d7:6e:a0:88:f5:5d:9c:2a:28:
                    75:c7:b9:40:df:b0:ca:25:9c:33:65:81:4a:4b:fc:
                    d0:5a:79:6b:5c:c5:e2:3a:b2:8e:38:37:8c:c3:71:
                    db:ce:34:47:78:f5:d6:c6:20:19:bd:32:1c:f1:22:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:A8:F6:C9:20:5F:5D:31:86:B7:2C:D1:54:DD:81:98:AD:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:d0:0e:8e:da:c6:51:71:f8:1f:bb:74:8d:0a:92:f4:d2:
         ff:1d:31:78:1a:a4:4b:e9:ea:80:8c:5f:b5:d0:a2:8c:f2:09:
         dc:a1:1a:95:91:7f:b0:9e:28:76:b3:2f:c2:5f:4f:37:2b:91:
         03:f3:d5:f1:f4:9b:11:0a:f6:01:60:11:28:4d:0d:be:5c:df:
         7d:49:9e:00:6e:7e:7e:61:ae:58:6e:da:81:6b:70:82:93:b6:
         8c:d1:4f:1c:e5:ac:4b:c9:e1:51:83:8c:b9:b9:3e:f8:80:90:
         d6:b2:9a:b3:05:06:9b:bd:5f:ad:0c:8f:38:f9:32:8c:2d:a3:
         b2:7b:7f:7d:bb:87:3a:37:78:cb:71:15:6f:69:52:4a:49:64:
         5a:14:36:82:95:4d:ee:f9:c7:55:c0:86:fe:a2:52:1b:14:1e:
         81:f5:dd:da:72:99:5a:47:8b:0b:ae:f1:f1:7f:7a:fb:41:27:
         2d:c5:9c:57:92:46:cb:4e:d4:12:b7:31:b9:14:56:59:47:73:
         86:af:be:a9:1b:89:b2:8f:84:1b:2a:9a:e2:16:9e:6d:de:c3:
         14:ac:88:e6:4b:c8:40:5b:a3:ce:9d:2c:c2:cc:2c:f5:79:80:
         d7:8b:04:d2:ed:64:a7:f2:e0:ec:3b:76:69:13:ce:7c:0d:8d:
         36:66:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:39 2024 by rpki-client on console-fra.rpki-client.org