Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa
File:                     f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa (raw, json)
Hash identifier:          HNuMaOV1rv+kB96pmSHnMvHrTcMRqaLPLX04XO3NMdo=
Subject key identifier:   DE:A6:23:0B:B2:9D:49:3B:0F:53:7E:73:82:E8:9F:B4:F2:41:B6:F1
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F43285847A0414AA16E9E40651C74C500
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     398427
IP address blocks:        185.172.188.0/22 maxlen: 22
                          2602:fd35::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4a:a1:6e:9e:40:65:1c:74:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=09b63103-257f-4439-b80c-7aeeac8ab19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:79:87:37:92:85:2e:9c:ca:92:ef:55:11:
                    53:83:54:ac:55:ef:22:cc:fd:69:98:6e:83:d3:b6:
                    9a:3e:73:9b:8a:2f:c3:49:dc:2b:88:d6:09:cd:c6:
                    da:4d:6f:be:74:d6:44:8c:23:66:49:04:50:e6:20:
                    7b:1b:62:9f:ac:0e:23:3e:09:70:ed:66:4c:32:2b:
                    dd:52:3a:65:e2:08:d7:61:b6:cd:6c:88:58:d9:9e:
                    83:da:ac:73:07:4c:e9:80:a3:e1:62:71:1f:b1:f3:
                    16:aa:d3:1a:c9:44:0a:aa:67:38:37:91:cb:3f:0d:
                    d0:55:d8:8b:59:c7:b4:ef:c5:07:95:89:46:78:79:
                    70:9a:a2:72:be:10:a9:d0:9c:14:94:71:0d:65:0a:
                    96:49:d5:26:14:26:e1:85:04:2f:a7:ef:d1:47:1a:
                    22:50:1d:ec:83:20:ec:a7:6e:10:4d:93:00:ff:65:
                    f5:bf:64:9d:05:a5:cc:52:35:6b:80:91:bf:10:1c:
                    d9:bb:53:e9:db:03:b0:79:d8:47:6f:64:90:e9:6d:
                    f7:61:e8:a6:d0:57:09:7d:82:bc:50:49:9c:77:73:
                    40:db:c5:e8:86:76:05:5f:9e:c2:fe:44:c6:3a:a3:
                    e2:ff:81:67:54:9b:74:0d:b2:98:4b:10:b0:f6:eb:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A6:23:0B:B2:9D:49:3B:0F:53:7E:73:82:E8:9F:B4:F2:41:B6:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f924ec45-7c4b-3c98-9c42-2cb1686db58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.188.0/22
                IPv6:
                  2602:fd35::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:58:9a:84:67:19:b0:d3:ba:34:b8:7d:c4:d9:46:85:a5:54:
         92:76:bc:a6:96:0a:36:15:fc:b8:30:63:eb:31:05:44:c1:57:
         1b:49:d1:de:90:77:64:46:a0:aa:89:49:12:83:43:8a:03:e5:
         51:c9:c8:45:39:51:c4:f3:3a:66:6b:f4:e9:fd:92:12:1c:98:
         f3:a1:f3:b9:f0:11:09:7e:60:b6:b4:a6:69:ef:7c:bd:f5:11:
         d7:be:26:29:74:7b:61:07:aa:e0:95:f2:03:8b:f9:2d:9f:b5:
         13:64:21:d8:b2:60:26:50:13:45:54:76:db:f6:c5:df:ad:ee:
         f5:0a:93:c1:0f:9d:0b:10:1e:22:c2:fd:24:19:fc:41:29:23:
         3b:0b:ad:0a:c9:91:87:2d:c9:44:c6:7f:53:18:d8:db:48:12:
         0a:98:03:f3:b9:3f:24:fe:de:8b:bf:23:f5:81:3f:b8:9f:42:
         9f:6f:13:fd:03:9c:b1:3f:0f:e6:bf:27:7b:eb:77:47:a3:db:
         b6:04:34:bb:83:4a:a2:dc:6e:7b:0e:ba:f1:6f:04:00:b7:0b:
         38:03:a2:69:28:8c:0d:de:b5:b7:49:24:7e:e9:40:34:28:38:
         9e:dc:a6:5f:a1:50:fa:5b:17:be:fb:73:93:16:73:ff:91:fe:
         0f:20:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:24 2024 by rpki-client on console-ams.rpki-client.org