Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e3f29e4-3799-32b9-a02b-3ee2626920ac.roa
File:                     3e3f29e4-3799-32b9-a02b-3ee2626920ac.roa (raw, json)
Hash identifier:          /CLPdS6siNGTI1iL78fNWiyLIbhJ4Yp/KaH8/yk+5sA=
Subject key identifier:   8F:91:E8:94:77:50:04:D1:D1:08:59:5A:8F:03:CA:7B:DA:9A:47:D7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285838AC0A80BFA8696B8923BF7178
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e3f29e4-3799-32b9-a02b-3ee2626920ac.roa
Signing time:             Wed 20 Jan 2021 05:00:00 +0000
ROA not before:           Wed 20 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Jan 2027 05:00:00 +0000
asID:                     33363
IP address blocks:        107.145.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:ac:0a:80:bf:a8:69:6b:89:23:bf:71:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jan 20 05:00:00 2021 GMT
            Not After : Jan 13 05:00:00 2027 GMT
        Subject: CN=b99ec35b-6a59-414e-a88e-819940767116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dc:82:75:13:12:49:cb:10:1c:95:f0:eb:79:
                    9a:9f:6e:a9:01:1c:ea:46:be:ad:2d:90:70:83:4e:
                    41:d9:d9:2d:fa:d8:4f:e7:e5:5c:5f:ff:0e:c0:0c:
                    ea:12:4c:75:d9:c0:54:23:dd:91:85:e2:0f:2b:9b:
                    9a:46:6f:cd:9e:76:f2:da:18:35:7b:01:18:da:4f:
                    e4:41:38:9f:a7:27:cb:69:bd:49:24:bd:2f:2d:bf:
                    30:8b:e4:c8:67:d6:1d:1e:4c:b4:36:1e:a0:6e:9b:
                    7f:06:d8:cc:09:e7:9f:09:2e:48:37:6e:ac:2c:66:
                    d8:e5:05:2b:7a:28:16:d6:ee:ea:8b:24:47:14:ad:
                    60:08:24:45:09:ec:e0:b2:83:7f:16:f3:5b:05:e0:
                    81:dd:47:52:fc:a3:3b:ac:35:1d:a5:e6:4e:40:d2:
                    e4:66:da:ce:50:7a:ac:5d:0c:25:33:b3:30:81:09:
                    48:a5:a5:c5:1a:75:19:2d:aa:03:b1:b1:43:fb:a2:
                    3e:00:e4:7d:87:a1:46:e0:2f:33:75:6a:41:52:5c:
                    2f:ab:ed:23:92:28:1e:a3:d4:56:a1:8c:26:6f:d0:
                    df:48:75:8f:93:d5:15:13:93:39:51:cb:28:b3:cf:
                    79:7e:39:da:a6:e5:35:3f:64:e1:80:ba:11:2b:df:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:91:E8:94:77:50:04:D1:D1:08:59:5A:8F:03:CA:7B:DA:9A:47:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e3f29e4-3799-32b9-a02b-3ee2626920ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:56:10:aa:fe:68:bf:ec:c0:82:95:99:fb:8d:01:77:a8:
         06:37:e3:17:eb:67:ee:1e:2c:e3:5b:fe:27:2d:02:0e:7c:28:
         c5:07:5c:ab:5c:d3:b1:de:82:2e:a7:7e:65:bc:f0:68:01:f9:
         ae:36:94:8a:f3:ac:14:09:d1:88:fa:ee:39:06:d7:c0:75:96:
         1f:7a:1a:76:a2:9d:18:ba:d9:69:a4:94:81:36:43:5a:fa:d0:
         37:f7:d2:a9:86:3e:1f:ee:ae:90:bc:5a:72:ed:bf:79:84:43:
         11:eb:70:4a:a9:d8:49:e3:59:fb:78:e9:a4:c1:93:d9:8b:90:
         d3:14:7d:5c:91:c8:97:c8:bf:20:6b:bf:f4:84:33:bd:f3:0b:
         85:9b:fd:4c:79:74:ed:96:68:1d:e2:e8:48:53:30:38:01:c8:
         59:67:c8:07:22:0b:d2:bf:51:cd:4a:38:d3:31:ee:b4:d8:70:
         87:e6:99:68:14:8c:e9:20:06:28:f7:e4:38:4f:76:97:ec:a4:
         dc:26:18:76:eb:2a:d5:91:79:02:70:1c:2c:fc:66:16:79:a2:
         f7:5f:5d:b9:75:ad:a7:a8:5a:b3:25:1a:bf:00:53:8b:ce:3a:
         0c:f1:96:ff:97:4c:5f:20:21:ca:9c:ea:97:b5:b7:e2:5c:f7:
         72:2f:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:23 2024 by rpki-client on console-fra.rpki-client.org