Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
File:                     d4270aa3-b47c-3342-a435-e6733dda251f.roa (raw, json)
Hash identifier:          iHKQFlDBGCy5n69ljWqV6HMH+kTJKjKEZai5a0B8nXQ=
Subject key identifier:   75:08:6A:4D:5E:FA:C9:9F:F7:D7:0B:F5:E2:FA:5D:7E:39:46:32:D8
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285847E62AABC3607C7B8DB496EA80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     36492
IP address blocks:        172.102.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:ab:c3:60:7c:7b:8d:b4:96:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=a62927f9-69ee-4242-981a-93475d077bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ce:ae:0c:5e:a6:13:00:b2:22:95:14:d2:9b:
                    85:9a:12:fd:66:8b:2d:96:ec:ec:fe:cc:cd:f8:39:
                    1f:2e:07:1d:7a:2c:f6:7c:12:ee:6c:cf:df:d3:58:
                    b1:c9:7f:62:73:4a:61:cf:d2:bc:e4:6f:ef:0c:89:
                    95:61:d8:7c:de:8b:d7:cb:73:e3:e7:e6:bc:dd:d9:
                    b5:87:cd:b6:6b:5a:27:2f:0a:87:51:19:64:4d:63:
                    77:b4:2e:a2:2c:85:7b:d0:68:59:de:72:ce:4b:f2:
                    f8:da:a2:9c:95:73:b5:42:e3:9f:ee:39:39:18:f1:
                    d9:33:2c:43:34:18:d6:fb:3b:fb:96:aa:ea:9a:cf:
                    23:67:77:25:56:34:13:23:c3:3a:91:dc:f1:52:f4:
                    2e:c2:14:a0:1b:ee:b5:72:79:ad:58:76:52:f6:e1:
                    95:68:98:16:3f:6c:28:45:b8:22:42:6b:e8:a6:4a:
                    80:ce:6a:76:4c:c8:30:df:2b:43:40:30:9b:82:1a:
                    d4:c5:27:1e:4d:57:fb:b2:8a:95:ba:f7:b1:41:eb:
                    85:48:96:de:0f:3b:18:23:db:43:26:ba:7c:98:48:
                    66:00:ef:73:ac:d6:af:af:3d:1e:6b:69:0f:50:75:
                    77:9b:d8:87:80:e0:69:ac:ee:38:15:a1:2d:1d:da:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:6A:4D:5E:FA:C9:9F:F7:D7:0B:F5:E2:FA:5D:7E:39:46:32:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/d4270aa3-b47c-3342-a435-e6733dda251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:10:d2:55:e7:eb:e9:f2:f9:c0:72:68:96:18:28:31:67:
         09:ae:ed:a7:1a:14:95:7d:4c:cc:43:67:f5:88:10:39:bc:6b:
         86:71:4c:d7:91:fb:9d:5b:f9:c1:8b:94:ab:16:ad:6e:d7:bf:
         6d:0e:47:55:83:9d:78:2b:cc:ce:7e:34:4e:9d:aa:e8:69:f3:
         3f:21:de:9e:4b:72:e9:0d:a8:39:38:32:20:67:ef:f3:db:e7:
         95:2a:9c:fb:3b:72:41:46:28:77:1f:ce:f7:8e:9c:22:90:76:
         2d:13:2f:73:2f:89:1b:60:0d:47:35:4f:bf:f0:ad:ff:b8:a9:
         90:7a:a2:4f:15:3e:4b:53:ed:e0:c9:42:0b:72:ac:b6:e8:b4:
         51:8a:d6:89:de:e9:61:fe:b4:5a:49:fa:55:10:b3:57:90:cf:
         b8:e5:fe:d3:af:e0:eb:ab:aa:24:e5:c7:bc:26:59:bc:b2:b1:
         41:67:07:36:26:50:4a:90:e8:a9:8c:38:0d:2a:16:92:e3:77:
         d8:ce:20:b5:be:85:66:48:3d:ef:c7:a3:46:2d:a5:e2:83:c1:
         90:a2:d4:ce:03:95:03:64:75:fb:5c:9d:63:5b:d7:39:3e:51:
         25:b1:5d:b0:37:64:66:eb:65:9e:62:87:25:68:a5:45:a5:27:
         26:62:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:32 2024 by rpki-client on console-fra.rpki-client.org