Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
File:                     efbeebc8-e654-325a-9221-7b430f463318.roa (raw, json)
Hash identifier:          JsvDKJqYof3JVpxChQlmnAg1gzvLAqLZ0iMES9Vk2WM=
Subject key identifier:   98:64:64:09:4A:D5:4E:AB:1E:F9:4E:DB:91:91:98:41:C9:2B:B0:A2
Certificate issuer:       /CN=22d4b872-8325-44d1-958d-897bd254f68b
Certificate serial:       010D0C9F43285847A73BE9F68486F535B7E205C0
Authority key identifier: A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        107.180.146.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e9:f6:84:86:f5:35:b7:e2:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d4b872-8325-44d1-958d-897bd254f68b
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=6ad6b427-a650-4992-8472-5810f8e3bd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:0b:dc:ad:a1:df:a5:c2:03:d9:94:0b:36:
                    41:5c:d6:e3:a4:5b:ff:d3:7a:ca:85:6a:49:10:42:
                    a9:0a:83:38:82:be:cf:06:4b:b1:ec:04:ba:91:23:
                    ee:7f:47:e0:d1:fc:3b:f1:e6:88:3b:84:60:1c:10:
                    79:a0:b2:2f:04:0c:1c:13:a2:06:c7:19:da:34:f0:
                    a9:59:88:b6:0e:10:98:8a:74:48:06:da:16:a1:86:
                    88:9d:76:2f:0c:48:b7:a6:13:d4:d6:7c:59:ff:43:
                    71:bc:0b:10:e1:08:77:0b:49:3b:08:e6:32:da:a7:
                    d3:d2:4f:11:f2:29:a5:7c:9a:49:f0:23:1c:d5:a5:
                    06:40:25:26:41:52:dd:06:2e:7b:4e:80:a5:b0:1d:
                    e1:b5:4a:91:10:8a:84:31:99:bb:6d:a8:ec:88:e5:
                    69:6c:c8:cd:5d:23:10:34:68:90:c9:fb:0f:d6:e1:
                    06:03:18:4b:a4:cd:e8:50:38:3c:5a:57:8d:b3:a7:
                    f8:4c:3e:f6:a7:5b:82:bf:20:74:cf:aa:bb:66:19:
                    ce:76:31:02:46:0d:75:a3:70:68:81:53:78:37:64:
                    5e:67:85:e7:9f:e1:d6:26:0a:2b:bc:4c:22:c8:07:
                    08:53:71:3e:f1:fa:b2:b3:79:17:bf:b8:57:82:b8:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:64:64:09:4A:D5:4E:AB:1E:F9:4E:DB:91:91:98:41:C9:2B:B0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/efbeebc8-e654-325a-9221-7b430f463318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b/22d4b872-8325-44d1-958d-897bd254f68b.crl

            X509v3 Authority Key Identifier:
                keyid:A1:EB:27:37:68:9F:C8:9B:9E:E2:30:E3:C8:05:C7:E2:EE:8D:8E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/22d4b872-8325-44d1-958d-897bd254f68b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:58:59:7b:2d:52:4b:4f:88:c4:97:14:91:7a:1b:ca:de:0c:
         b3:c4:05:f2:1b:ca:cb:0c:71:03:53:0f:1e:e7:fa:fa:48:49:
         e7:57:47:29:46:2a:18:6d:0d:4c:95:85:ab:d8:38:c5:12:16:
         a5:3b:90:72:20:69:6f:05:bd:f6:43:f5:17:2a:1b:98:70:12:
         03:31:08:0a:fe:4c:d0:01:21:d3:37:8d:a2:9f:7f:0d:66:7e:
         07:13:55:e3:f0:4f:09:a6:6d:1a:78:40:12:84:d0:96:a6:c1:
         4c:b3:64:6c:cc:47:67:94:6a:0d:23:7d:80:39:0c:85:5a:8d:
         d3:b6:c1:08:30:51:50:f7:86:f2:1b:f7:be:a5:16:4f:53:a9:
         6c:b5:2e:2a:16:01:7a:fb:6f:1d:ca:e6:15:c4:8c:2a:64:fa:
         3f:b0:ed:47:9c:f7:dc:0a:2b:69:02:98:78:cf:c1:91:c8:f5:
         9f:48:fe:9d:91:7a:b4:32:3c:86:52:2a:39:ae:5f:3d:3d:46:
         a3:55:c4:aa:58:98:03:05:5b:12:9b:99:c2:57:aa:c3:e7:03:
         44:d5:ca:e3:9e:5b:5b:17:14:01:49:92:62:50:63:a9:0c:fb:
         c4:7a:a2:ca:f6:de:11:21:35:97:ec:f7:dc:d7:f5:78:21:e4:
         ae:af:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org