Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa
File:                     a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa (raw, json)
Hash identifier:          sysjvqe/HB67GVy9HAK/oneFOxAfbvBJgeNogVrrrIQ=
Subject key identifier:   61:53:AA:B1:4B:2E:07:8A:A8:94:25:AC:6B:0F:1C:ED:11:AD:DB:8C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5FD9DBC6A80962C5F6980
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     33363
IP address blocks:        107.144.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:fd:9d:bc:6a:80:96:2c:5f:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=93ae27f0-58ef-4cfd-80c4-ce44bd258a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:2c:11:bb:70:ef:32:c9:29:d4:bc:7f:47:
                    89:02:81:06:e9:74:f3:9a:b4:4c:07:e5:4e:03:0e:
                    2e:9a:c1:4d:22:f1:b2:54:4e:d5:77:8f:d9:92:7a:
                    ad:55:13:e6:e1:56:e6:bc:66:98:e8:6e:44:fe:c0:
                    95:1e:4a:e3:ca:2f:be:74:82:8c:f1:df:31:09:22:
                    56:21:ed:1f:fa:f1:30:41:9e:f6:bc:f8:4f:8f:c4:
                    72:44:3f:29:13:df:e6:c9:93:8e:d9:3e:85:29:ab:
                    1e:43:cb:1f:59:e6:0c:ca:70:02:dd:59:3f:2e:f4:
                    16:3f:70:a0:3e:31:29:d0:25:1b:35:f1:bc:67:17:
                    30:90:b0:8d:6a:7b:1a:bc:0f:a4:b5:53:2f:9a:db:
                    5e:1d:35:6d:f2:83:dc:ed:56:46:1f:83:1d:17:33:
                    6a:68:4c:93:b3:51:55:2d:64:ed:6b:20:24:5d:3a:
                    b8:5a:23:0a:d8:2e:d7:38:aa:b8:72:24:ae:22:16:
                    04:f8:28:03:74:03:7d:b3:6a:b5:00:35:77:66:5b:
                    b7:38:97:09:39:a7:fc:e5:80:48:3d:a9:b7:af:93:
                    d7:2f:60:d2:48:e8:4a:63:95:c4:56:0a:e6:70:99:
                    a7:1a:bc:b5:ee:87:54:2f:1f:f7:5f:b5:3e:54:71:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:53:AA:B1:4B:2E:07:8A:A8:94:25:AC:6B:0F:1C:ED:11:AD:DB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a85dc9ed-8887-3c48-acc2-cfba5e8de396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.144.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:8b:55:52:6b:01:c2:27:7a:9e:41:49:b7:5f:91:b0:8d:a7:
         8f:1e:f0:05:64:5b:2d:04:b4:3c:0e:8c:2f:94:c5:20:54:e4:
         32:bd:c9:e2:f7:6b:e8:29:df:95:f7:02:9a:3c:f4:0e:d2:71:
         c9:cc:0e:f7:d3:93:2d:4a:09:13:49:38:a3:d3:4f:3c:3c:10:
         b4:01:51:2a:27:e6:2e:43:0f:0f:14:6c:9d:c6:46:96:4d:83:
         90:ef:57:eb:42:5a:85:ce:9a:ff:4f:79:14:9e:db:ea:5a:e7:
         22:37:83:87:9b:d0:cc:b2:d3:1f:ab:28:b0:38:80:29:b5:26:
         08:93:fe:ae:d4:e7:2d:b2:bb:91:58:fa:a1:17:f7:91:f0:87:
         97:5f:b5:5c:ee:f9:04:54:4a:76:99:ea:11:d1:14:ee:ee:aa:
         01:06:46:62:d3:be:8a:51:85:3d:ab:f0:0f:ec:e9:c0:92:7d:
         e3:d9:00:37:e7:44:20:83:56:3c:e7:5c:14:82:db:66:9a:5a:
         a1:64:e5:97:a1:cf:70:a3:f9:e4:34:e5:11:34:4b:4c:3d:4c:
         d4:6d:53:09:0a:05:44:9d:64:8f:bf:a7:15:19:9f:14:46:44:
         0a:91:28:9f:4a:3e:ab:0a:55:5e:0f:1d:9c:46:34:73:18:6c:
         9a:84:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org