Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1e1eb0e8-2a8b-321a-9606-f8222ecb2b59.roa
File:                     1e1eb0e8-2a8b-321a-9606-f8222ecb2b59.roa (raw, json)
Hash identifier:          zT8rurinfj4rHl1fwp8xlF7lzBK6fEc8r4ah1I+x13Q=
Subject key identifier:   0E:CD:BD:6C:19:3C:6E:CA:38:0F:68:B1:FD:91:8A:A7:0B:3F:66:6B
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285847E62B3BD98D93267F664D8E50
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1e1eb0e8-2a8b-321a-9606-f8222ecb2b59.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        172.102.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2b:3b:d9:8d:93:26:7f:66:4d:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=8aebce5c-ae7a-45a2-9d25-ae4792e73622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:1a:54:5e:ee:23:2e:3c:de:14:0d:86:1d:
                    38:8a:c9:55:2e:ab:37:0b:2b:e4:a3:77:f6:4a:82:
                    5c:a9:94:3a:08:01:01:8f:45:60:44:26:c0:8b:67:
                    82:ea:e3:af:d3:73:6c:fb:2f:24:fd:04:08:50:9e:
                    e9:84:2f:86:77:e8:f4:4e:f9:d2:e0:98:b8:ba:ef:
                    f9:0d:91:82:7c:70:e4:7c:3b:c0:b8:38:4a:ba:f0:
                    ef:6d:01:5a:ec:cf:71:dd:5c:49:8e:a9:d8:47:50:
                    97:f8:86:ff:0a:46:a2:98:bc:73:89:ae:03:ef:de:
                    a1:42:d6:93:34:d3:3b:6d:cf:db:8f:c5:73:ea:eb:
                    b2:fa:52:42:17:a8:8a:20:79:6f:66:7d:e5:3b:19:
                    9f:ae:af:d8:e7:74:78:b2:8c:48:d0:a1:a6:55:c9:
                    bb:b7:36:73:20:21:6d:68:c2:5c:c5:00:c8:f9:81:
                    aa:ed:e1:cd:90:7c:9d:aa:a4:d4:23:b4:f7:54:55:
                    75:25:32:4e:8d:fe:65:fd:5f:69:6b:00:b3:3d:c4:
                    ce:4f:63:25:e7:7d:c6:ac:92:d1:ab:a8:e4:72:a0:
                    4b:a9:01:6c:7d:00:3f:63:2a:39:97:fa:70:70:bd:
                    14:30:ca:a1:c0:d8:82:5c:6c:a1:01:e0:5d:ad:64:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CD:BD:6C:19:3C:6E:CA:38:0F:68:B1:FD:91:8A:A7:0B:3F:66:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/1e1eb0e8-2a8b-321a-9606-f8222ecb2b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:25:b2:16:8c:35:7f:7e:31:59:13:0a:3b:53:a9:be:f9:
         ec:c2:54:65:3e:fe:84:fb:e5:a9:5d:f3:ee:b8:73:d1:f0:1b:
         17:7c:b7:c8:8c:36:d5:c2:8d:ba:30:ae:d3:ab:fa:1e:36:73:
         b3:69:fb:7d:8a:8d:8e:49:98:74:45:2a:19:07:0a:37:3b:c7:
         6c:62:f5:4d:71:db:a8:03:18:32:20:11:9f:59:e1:41:d9:a2:
         41:7c:95:df:45:33:0e:93:d1:ac:34:07:f0:ed:f7:61:63:43:
         96:45:86:79:52:97:2e:fa:3b:7c:e5:d5:6f:5b:d5:0d:0e:7b:
         69:b2:cc:45:c4:91:c7:95:89:c0:48:30:2f:93:07:d9:84:05:
         54:52:c5:d1:5b:e8:df:fa:0e:38:f9:26:ac:b0:0c:bb:fc:aa:
         1b:f5:f1:e3:5b:5c:67:6b:2a:87:a2:da:4e:51:ed:27:25:fe:
         f0:fd:d9:45:86:72:d6:dd:69:3c:87:51:77:9b:bf:7d:5f:42:
         a7:62:d7:78:33:b2:18:74:2a:61:3f:fa:5f:73:83:12:84:b2:
         ac:dc:0e:21:a3:ec:57:96:2c:14:25:ba:87:ed:9f:3d:d0:78:
         b4:ce:de:44:97:17:53:c7:9d:00:71:ac:8f:e2:0d:23:af:8d:
         de:1c:5c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:15 2024 by rpki-client on console-ams.rpki-client.org