Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa
File:                     d61d4995-a2ee-3c32-8651-31152a3cad87.roa (raw, json)
Hash identifier:          PVz/HYTvHImhl+s3fy9RbiiQDqDSKpsh3w55kTwjjYg=
Subject key identifier:   70:96:6A:55:BF:52:A0:C6:01:34:B1:C1:43:0D:4F:D2:87:63:27:86
Certificate issuer:       /CN=47a49b6d-2825-4496-8656-b42ba516140a
Certificate serial:       010D0C9F43285847B961711CE4E1B28CECAB1660
Authority key identifier: 08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     3257
IP address blocks:        107.182.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:71:1c:e4:e1:b2:8c:ec:ab:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a49b6d-2825-4496-8656-b42ba516140a
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=605d7d12-3532-4905-944f-15235ca56ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:22:92:51:c5:dd:c4:b6:a1:d4:5d:26:02:
                    b0:f3:70:ff:56:f6:a7:4d:88:e1:89:8b:92:53:16:
                    ce:f9:d0:a9:d3:23:59:8e:68:94:a3:70:fa:f1:6f:
                    5b:10:05:79:07:66:05:9a:cd:09:c2:b3:ca:cc:2c:
                    01:2c:2a:a2:fe:ae:59:c7:91:3d:89:b2:0b:1d:ab:
                    6f:a1:a1:e2:4a:c0:67:bf:5e:ad:70:67:54:70:55:
                    45:c2:17:79:a4:4d:cd:62:46:23:dd:b7:03:27:34:
                    13:aa:ec:e5:fc:50:84:a0:88:9b:bc:b5:e9:30:a2:
                    40:67:68:6f:c4:90:35:fe:2b:20:bf:3f:c2:74:b2:
                    27:8f:8d:84:9c:b7:0b:80:dd:5b:72:c4:93:4f:1e:
                    7c:39:86:5b:cb:da:30:7b:7d:2d:32:b3:3d:66:e3:
                    2d:42:8f:7f:86:8c:17:1d:96:a5:96:e5:44:be:ae:
                    80:ec:5f:ab:fb:57:45:46:d0:d7:05:c7:ce:7d:5e:
                    4d:ec:7a:92:6b:58:95:bf:9f:61:e6:5f:89:ad:c5:
                    99:b9:73:f1:99:49:93:8e:45:22:95:fc:57:f1:3c:
                    0d:27:1f:ac:a8:de:fe:78:8e:7c:28:a3:bb:ae:7d:
                    f0:a7:a3:1d:cf:4d:26:df:72:36:e3:14:b5:2c:bd:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:96:6A:55:BF:52:A0:C6:01:34:B1:C1:43:0D:4F:D2:87:63:27:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/d61d4995-a2ee-3c32-8651-31152a3cad87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a/47a49b6d-2825-4496-8656-b42ba516140a.crl

            X509v3 Authority Key Identifier:
                keyid:08:D8:A5:5C:65:92:8C:A1:67:51:31:D7:0A:C5:9D:A1:EB:22:06:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/47a49b6d-2825-4496-8656-b42ba516140a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a6:72:ec:1e:01:ab:c9:d9:53:6a:21:03:de:b1:6c:d1:55:
         7c:d2:81:87:a4:74:57:d2:6f:19:78:2b:da:74:56:d9:7f:44:
         ea:5f:a8:e8:ca:84:d8:ef:05:d0:c8:88:ca:ec:4a:d8:a8:57:
         d4:84:e9:b3:a9:45:b5:ed:44:f5:d7:53:5a:b7:70:74:d3:ba:
         81:41:d5:da:1b:fa:4c:71:5a:46:9c:7b:d5:c7:83:37:91:e6:
         ca:2d:e1:6e:fa:90:91:a4:b3:2a:58:b6:8f:09:f9:ca:e8:c6:
         6e:6a:59:78:c7:62:c3:45:af:b6:d4:3d:5e:5c:53:d1:bf:39:
         c8:02:de:81:79:76:30:c0:51:5f:4f:99:78:c7:8a:75:0d:be:
         c6:c2:6f:74:a9:c3:77:a5:c0:f9:47:bf:a6:d6:99:4e:15:cd:
         d9:50:1d:f6:dd:4c:8b:b2:1c:d2:e0:5a:bb:88:13:5a:54:d9:
         a8:be:82:b2:32:00:cb:43:73:7b:a5:f9:0b:dd:ab:8b:41:d7:
         03:15:f7:ca:a9:8c:d0:d9:27:fe:ee:c3:85:21:ea:3b:b5:1d:
         9c:8e:32:e8:41:db:e9:91:06:ed:57:82:98:01:9b:76:7f:1c:
         b2:0f:e2:4f:d8:45:ec:41:08:d5:7a:54:87:ee:d4:00:36:a8:
         fb:ec:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:20:15 2024 by rpki-client on console-ams.rpki-client.org