Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa
File:                     a6447836-c53d-3cdf-ab2a-c3db72297447.roa (raw, json)
Hash identifier:          qu/OKcKlueNxaycvJ6f6PY5kbPa29iSLWv10V2gMzeU=
Subject key identifier:   BC:B8:E7:B7:09:85:44:F8:21:55:DB:E0:F1:40:D8:A1:1E:9F:EC:19
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F432858477660F82AB2BEE67F42F70D80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     398993
IP address blocks:        107.148.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:60:f8:2a:b2:be:e6:7f:42:f7:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=360c9e90-2635-48d1-9246-4b3e7496648b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:ab:cc:29:19:05:2b:f8:6e:f3:39:10:5a:
                    c1:82:e1:7d:71:66:2f:cb:45:77:f9:61:fe:02:89:
                    28:9e:f6:12:dd:f0:8c:3c:a5:64:d3:77:8c:2a:b7:
                    23:c0:3e:56:cc:6e:54:34:57:03:91:a4:19:08:cf:
                    4f:9d:99:dc:8d:98:e0:42:4d:24:2e:f5:32:75:c2:
                    8f:4a:46:a6:ef:0b:c8:7f:63:74:0d:70:76:9a:47:
                    c4:cd:67:56:68:4d:fc:5a:e7:00:14:08:69:90:d8:
                    e9:e1:b2:27:97:86:91:a3:bd:2f:5f:ca:67:a8:87:
                    15:95:bb:eb:40:df:ed:0c:d3:95:5a:58:e4:9a:72:
                    45:4c:e0:02:ff:41:a5:9e:7b:07:c2:8b:0a:70:90:
                    29:f8:a8:db:bd:e8:ff:59:cb:98:8f:94:70:07:59:
                    7f:93:ff:e2:f4:a1:b7:5e:12:8c:db:9b:e5:d3:13:
                    45:ac:56:de:81:4e:40:34:e5:29:b8:0e:f8:6e:62:
                    33:8c:55:77:4c:c9:4f:b2:84:58:bf:7d:2f:61:37:
                    ab:59:fc:ec:5e:af:b1:d9:37:7d:3a:51:9d:82:34:
                    1f:25:4c:fe:5f:81:11:9a:f1:03:c8:e6:46:5b:3b:
                    47:69:80:64:b7:c0:88:80:8d:9b:fd:e1:48:b8:7a:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B8:E7:B7:09:85:44:F8:21:55:DB:E0:F1:40:D8:A1:1E:9F:EC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a6447836-c53d-3cdf-ab2a-c3db72297447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:12:2c:71:eb:50:89:36:66:b1:3a:83:70:e6:49:74:cb:d4:
         12:e6:24:92:36:2f:d3:cd:ec:8d:d4:e0:08:4a:b9:08:6d:c1:
         72:2f:17:eb:16:62:01:da:c0:25:f7:68:02:60:68:d0:ca:05:
         72:0c:03:41:4a:bd:e0:a9:71:c9:60:1b:f1:90:d6:5f:4c:79:
         a6:1c:8e:6a:9e:df:38:e5:3a:70:17:47:96:1f:f1:16:3d:2a:
         49:60:89:40:ce:76:d9:f6:15:c2:4c:75:b0:42:a4:9b:a4:df:
         51:af:67:96:7a:fa:ab:9f:94:09:1b:30:93:6d:b0:74:d9:26:
         b6:67:0b:53:2f:da:de:61:d0:bc:25:fa:f3:cb:b0:8a:9a:bb:
         be:ac:2c:3e:3a:32:53:fe:1f:d9:a6:16:52:b5:18:64:91:d0:
         05:33:3a:44:6b:0c:8e:76:8d:89:5e:79:93:81:d7:f0:c9:5e:
         bb:2b:d4:18:4f:cd:bc:a9:5d:77:fa:26:5c:fd:ce:b7:c3:4f:
         28:61:61:97:e2:fc:f2:44:a5:2f:ff:1e:88:dc:ee:02:d9:af:
         dc:91:f4:f0:67:e8:c8:65:a6:7b:fb:bc:d2:64:30:ec:07:0a:
         06:94:e2:9b:da:60:c8:a7:56:94:5e:9f:77:57:c3:d6:38:60:
         db:2a:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:22 2024 by rpki-client on console-ams.rpki-client.org