Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa
File:                     84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa (raw, json)
Hash identifier:          16BTUZRRTG/Icet2TfUGWEy7Z5HwLK4YiY708OIW4ts=
Subject key identifier:   DB:FE:29:38:06:4F:CC:E5:88:BF:D1:A5:D5:92:AE:DA:BC:CB:5A:18
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847C3449416D8ED6A946B953B80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     399195
IP address blocks:        107.148.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:94:16:d8:ed:6a:94:6b:95:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=e0aeb172-2bdf-4210-8db1-d469374d5568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:17:1b:ab:57:95:82:71:47:af:df:71:2d:
                    6c:7a:3f:48:19:21:98:ef:51:0e:3f:81:db:b2:0d:
                    10:7b:28:f0:55:c7:d4:2b:65:dc:86:e3:6d:e5:6e:
                    35:48:c3:a8:0a:de:55:b6:f6:bb:8b:e0:d2:2b:df:
                    d5:d7:58:29:6d:89:6f:ac:07:a3:97:09:50:10:4c:
                    e4:4f:2d:b5:5b:97:cd:59:81:5b:16:ad:71:ab:cc:
                    bc:3a:d3:6f:fa:d6:ea:66:ff:9b:86:df:f9:56:65:
                    72:9e:b3:c2:d0:99:02:73:2b:94:62:c0:f5:d3:a5:
                    7b:55:c0:83:44:40:2c:9d:f8:1d:29:63:14:e8:49:
                    23:ec:47:43:b6:2b:99:98:54:45:0d:c4:40:6a:20:
                    1e:14:72:86:85:42:24:4f:c1:2e:52:59:1c:65:44:
                    87:2b:6e:ac:09:b1:8f:39:54:99:87:73:f8:db:20:
                    07:67:8a:6e:8f:be:26:f0:90:a8:75:ed:62:ad:5d:
                    02:de:fc:ec:e6:94:64:6a:39:90:c4:2a:df:20:fc:
                    16:69:50:4d:28:7f:47:05:fb:6c:64:1b:4f:7b:ce:
                    f7:76:b4:9c:1e:a9:5a:28:ce:fd:29:18:16:c6:85:
                    16:05:be:a8:d4:d4:23:c6:53:82:80:35:05:be:38:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FE:29:38:06:4F:CC:E5:88:BF:D1:A5:D5:92:AE:DA:BC:CB:5A:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/84c85baa-e6a7-36d9-ba1e-16fd07fcb054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:e1:e4:3c:05:17:fe:fc:51:8b:52:e1:8c:a1:cb:fb:40:
         ce:d2:45:c0:48:28:21:3c:75:77:d1:7a:00:8d:83:f5:9c:4f:
         a6:e5:b3:03:22:84:9c:55:98:8a:f5:dd:49:8b:07:35:d6:48:
         21:40:59:1d:0a:92:c0:c9:3e:0a:2e:2f:60:6c:48:6a:e0:9f:
         4d:80:0b:5b:ed:28:1b:1a:c7:ea:48:11:5c:e6:c1:b3:ef:7f:
         94:8f:54:0a:0f:81:7e:12:94:a0:6f:d1:ea:9b:a3:c2:3d:20:
         9b:20:ca:3c:e3:6e:30:77:2d:cd:07:09:7d:96:99:d0:d3:7a:
         17:88:91:5d:13:ef:9f:7a:5a:77:d3:75:b3:bc:1a:85:ae:42:
         d8:76:c4:2b:b6:80:10:77:6e:fd:b5:bb:4a:e0:c1:01:6d:f8:
         a0:b1:27:cd:78:00:cf:06:ee:30:e4:d3:cd:49:34:0a:ee:bc:
         a6:ea:67:18:23:a9:ad:01:63:2d:ab:e5:10:39:74:67:8e:0a:
         84:d3:4d:4d:07:8b:ec:cd:40:af:5d:b0:d8:c9:be:a9:c3:a2:
         a3:2b:26:2c:f3:14:bb:3e:95:60:33:fe:a9:71:e0:c1:00:0b:
         01:f6:b8:08:e2:cd:30:74:b3:71:b9:91:b3:8d:dc:de:1c:5e:
         c4:21:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:18 2024 by rpki-client on console-fra.rpki-client.org