Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
File:                     c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa (raw, json)
Hash identifier:          CCL2Xba8KG8Da9fv4GyFV0L0iqSIOEjg8cIv+wNmvI4=
Subject key identifier:   20:78:12:0D:D4:47:09:0D:A2:63:B1:4E:2B:66:81:06:30:3C:31:D1
Certificate issuer:       /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial:       010D0C9F43285847C34495055E60C5D8128E5680
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     399195
IP address blocks:        107.148.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:95:05:5e:60:c5:d8:12:8e:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=879abf81-75e2-4346-8cb9-c1a25f9adc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:c4:55:d7:11:92:2f:6e:bc:54:b1:93:0a:
                    6c:36:98:fa:b1:12:53:3f:63:7c:37:1e:16:d9:a1:
                    38:ee:ae:f7:7a:e1:64:95:a1:be:ed:fc:00:05:b8:
                    e8:06:c5:7b:b3:17:f0:69:73:70:e3:ea:55:aa:09:
                    2f:06:cf:a2:68:ac:ae:7a:bd:02:99:78:c4:7b:5f:
                    ef:17:a9:ed:c7:85:c1:08:7e:38:cc:28:dd:f7:8f:
                    32:70:9d:50:1d:dc:35:92:51:ce:b2:db:a7:ad:7f:
                    1d:70:b7:dd:6a:b0:04:97:75:a9:20:93:c6:d3:f7:
                    11:0d:ad:49:06:84:ba:97:9d:07:27:77:79:3a:ca:
                    93:61:56:8d:fb:f1:86:c5:90:6d:c3:68:c8:09:52:
                    25:8b:2f:26:18:75:a0:e2:22:25:09:f9:e9:76:ea:
                    6d:90:cd:7f:08:56:2a:74:08:d9:33:6f:26:6a:27:
                    8b:5a:f1:8e:18:e7:a9:45:39:03:e4:ba:54:99:9a:
                    39:b7:dc:a8:36:55:f5:07:a8:06:1e:5d:01:9f:ff:
                    30:a8:84:8c:ca:c7:6f:8d:b1:ce:ba:91:2a:d9:05:
                    f1:80:9e:1c:7a:48:a3:e7:b3:4c:56:a6:54:56:21:
                    34:36:57:2d:e8:2f:2b:a1:bd:9b:19:db:fc:af:0d:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:12:0D:D4:47:09:0D:A2:63:B1:4E:2B:66:81:06:30:3C:31:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl

            X509v3 Authority Key Identifier:
                keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.148.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:d3:82:b1:8c:ea:54:b4:db:3a:b9:ae:cb:7f:d8:92:be:
         c0:7e:7a:21:af:3b:2a:7b:e9:34:a5:ce:a0:bf:6b:20:43:b6:
         5e:69:8b:5d:0c:c5:41:99:06:f0:12:72:70:38:95:6f:fc:c6:
         54:47:f6:00:47:cf:89:2f:a0:cb:fc:39:11:55:02:b9:03:b5:
         55:88:fa:a7:37:16:56:12:15:3f:21:1b:0d:d8:d9:a5:ce:bd:
         a0:7a:e7:3d:ba:fa:56:5b:1b:60:f9:64:87:0a:3b:5b:28:0e:
         df:db:ff:71:1b:0b:11:69:ae:e4:82:30:53:1c:c6:50:a4:b7:
         95:dd:bb:b4:4a:87:f9:35:38:9d:d1:10:a1:0d:a6:a9:40:5c:
         f5:de:d2:9c:3c:c6:26:51:34:cc:25:e7:b5:04:26:84:1c:08:
         a1:51:af:91:29:19:a1:96:6b:a1:1f:a2:fa:c9:e3:79:b3:ae:
         9c:7b:1b:b0:f6:dd:cb:6e:a5:ad:d8:96:d6:c8:6e:ab:4d:dc:
         72:33:a0:44:2e:09:1f:ef:92:04:bf:c3:70:a0:db:d2:80:0b:
         19:07:a5:b7:08:3a:32:ae:f9:f5:9d:18:06:f9:2a:ba:d2:b4:
         b7:f3:7e:6f:de:ac:9b:7a:c5:b8:f7:ff:f0:41:f7:8e:29:17:
         02:be:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:40 2024 by rpki-client on console-fra.rpki-client.org