Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
File:                     b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json)
Hash identifier:          I7PDjyl5c/5/pBSSs+rlkR8xg0yh6s2/jtp6b7t/sxE=
Subject key identifier:   A2:6C:62:55:9C:6C:38:4E:CD:D6:6B:C6:37:43:11:00:FC:69:2D:1D
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584774FB96839CEED3262098B800
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     33208
IP address blocks:        170.133.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:96:83:9c:ee:d3:26:20:98:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=e9cba838-6611-4901-b145-2c292827da2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:9a:10:a5:11:78:0f:1d:74:95:79:fa:5a:
                    8c:4e:fe:5e:43:87:f7:3b:74:38:5a:6a:2f:fc:12:
                    df:c6:52:a6:a3:45:aa:6a:4a:be:00:28:69:37:d2:
                    23:db:df:26:d6:64:0c:15:22:7c:e6:7e:50:56:92:
                    27:6f:4c:dc:d6:ed:28:10:5c:16:39:af:12:16:52:
                    99:aa:82:c7:7e:27:77:6a:e3:1e:9b:a8:44:cb:b2:
                    8c:42:64:d9:08:7c:b6:d5:cb:34:ba:8c:4e:f5:ce:
                    a3:d0:37:98:af:f5:96:70:13:df:33:86:31:65:e9:
                    e2:36:e4:08:98:c8:e2:8a:54:fa:4b:83:c4:ac:83:
                    00:21:b1:5d:1d:67:c6:2c:6a:28:32:28:7c:44:8a:
                    ba:51:f5:c1:28:26:46:67:6d:3e:a7:93:59:fa:5a:
                    f9:ab:a6:0e:5c:41:77:43:cb:19:a0:a0:84:57:a8:
                    f3:1e:f3:d3:7a:51:9c:e8:f1:4a:53:00:f9:b7:45:
                    2a:60:07:7c:0e:28:80:e7:76:6c:99:07:2e:35:64:
                    b6:cf:69:c5:90:bc:70:25:32:90:b2:78:d5:e7:15:
                    9e:85:0e:fc:6f:1a:b5:1e:69:d3:00:a1:c6:13:ee:
                    fb:df:0a:63:e5:50:5a:27:af:05:65:05:1f:00:51:
                    3a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6C:62:55:9C:6C:38:4E:CD:D6:6B:C6:37:43:11:00:FC:69:2D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:26:48:34:d6:61:de:d0:23:3e:bf:e8:53:40:28:a0:3e:
         07:55:23:93:a4:22:04:6c:9a:50:8b:63:27:b9:32:73:69:22:
         f5:77:c7:4a:6b:55:3c:87:a5:a6:3d:64:e8:05:46:12:63:20:
         1a:07:6c:6c:f7:a0:cf:7d:9c:bf:f2:03:52:de:ba:31:ba:52:
         59:84:39:69:d7:6b:75:0b:f6:f6:21:fd:ab:78:3a:2d:9c:95:
         6c:09:3a:a0:a4:ed:45:b3:4e:d4:de:3f:44:ac:8e:f9:86:96:
         89:c0:ab:44:67:0d:1c:c0:25:d9:ab:be:73:5a:2e:8a:74:12:
         7c:0d:78:74:a9:e8:31:5c:02:65:2c:6a:49:22:c3:bd:b1:e4:
         93:69:a8:17:8a:b7:bb:07:94:eb:91:ab:fa:00:87:a0:ec:ce:
         1e:05:d2:f5:53:95:61:89:81:17:8b:d0:d9:78:75:ea:e5:99:
         53:74:d2:00:0f:09:15:6c:2b:8b:00:e0:5c:4a:e1:19:55:28:
         36:b9:69:6f:eb:c3:8a:1f:23:86:dc:f9:a9:16:e0:0e:d6:9a:
         32:af:47:2e:61:d8:49:fc:56:9e:a7:e8:ef:02:ba:c7:5c:ef:
         cc:ca:0b:b5:eb:28:f6:ac:32:44:b0:2a:d8:d9:9f:66:28:e8:
         6c:12:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:03 2024 by rpki-client on console-fra.rpki-client.org