Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa
File:                     7b7757b8-4651-3569-a743-24788a3666d4.roa (raw, json)
Hash identifier:          FpSpHsuaRLk8R/Va22sA08saRN1Fg+qIdjWoHpTS8Hc=
Subject key identifier:   AF:E7:C4:FB:44:21:AC:D0:DA:8B:9F:A5:82:7B:D2:08:03:0D:47:33
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858476F663B6297FAD8CBA10689A0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     7015
IP address blocks:        198.145.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:3b:62:97:fa:d8:cb:a1:06:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=5f73491e-3d79-4fdc-ac35-af6c62e6bc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:1a:dd:c7:07:fc:25:06:be:3b:d4:90:4d:
                    07:b4:3f:d4:0c:cb:15:38:31:15:c9:39:7d:79:1f:
                    e1:71:7f:ba:a7:8d:7b:1d:53:77:dd:19:c1:ca:5e:
                    65:05:0c:4f:90:98:e0:e2:4f:6f:cc:75:94:07:44:
                    d1:34:bb:f9:5f:ab:c9:6a:d9:98:34:c5:3c:e1:e3:
                    54:6f:df:d7:5f:cb:16:90:bb:b6:e5:cf:38:4a:6a:
                    81:5c:0d:a5:0e:8c:2b:2a:86:45:d2:b6:f8:21:67:
                    99:ab:f4:a9:d9:61:9f:a4:73:08:85:f9:c5:fb:b2:
                    57:c4:56:d8:45:28:23:d1:c0:8e:ed:bb:b6:36:b7:
                    db:35:63:94:74:93:50:a0:79:19:f4:2f:43:5c:2f:
                    67:73:4d:f2:90:87:6a:f5:12:ac:3d:2e:c8:27:bb:
                    0e:f5:59:a5:5d:8b:d2:2a:de:69:5c:91:a0:e2:91:
                    98:08:f3:4c:66:39:87:b6:bc:8c:1b:ad:4d:fa:1d:
                    1e:5d:d6:6e:ab:e0:11:5c:56:16:05:ab:dd:0e:1a:
                    35:fa:8d:60:d0:ac:d6:27:d2:df:f8:fa:19:d4:5c:
                    9a:35:35:ec:4d:9d:87:c7:23:fd:8b:5b:22:c6:fb:
                    71:8c:b3:a2:d4:76:69:5f:1c:46:d6:ed:cf:ff:ac:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:C4:FB:44:21:AC:D0:DA:8B:9F:A5:82:7B:D2:08:03:0D:47:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4a:3b:29:fa:21:1d:ef:3f:aa:cf:22:76:0f:d5:fa:0f:26:
         bb:61:4b:2d:10:98:ac:ff:50:c4:3a:22:bf:b9:85:cd:89:4d:
         61:b9:0e:3b:cf:aa:da:2d:a6:dc:6e:1f:bd:e0:cb:8b:ce:9a:
         c8:68:34:cc:a5:fa:ea:4a:aa:13:f3:35:59:8d:7c:6f:42:17:
         1a:6c:0d:16:dc:4d:ca:c1:be:8a:31:71:ba:59:e5:a9:35:35:
         ec:79:73:94:e2:df:db:c6:ed:c2:59:0f:00:c7:df:f3:1c:10:
         a9:92:03:72:5e:7e:2f:8b:5b:be:10:fa:39:1a:11:bb:17:f3:
         c1:bd:ab:e3:ff:0a:6e:38:76:cc:8d:78:98:cb:36:74:43:29:
         b1:bf:77:05:a9:7e:fe:9c:d9:31:cf:cc:c2:81:26:8b:03:12:
         6f:de:9f:03:8c:46:9e:80:33:b6:ce:b5:23:ad:8e:8e:35:b3:
         d8:58:64:0d:e9:4e:0a:c6:f6:b3:62:ed:06:d5:d9:cd:4d:f3:
         b8:f0:40:4b:7c:83:50:6f:70:6a:e0:7c:c6:eb:32:48:fa:63:
         ce:86:04:24:6a:65:c1:9c:1e:e8:6e:41:17:52:9f:87:f6:27:
         60:0e:50:c1:6d:5a:1e:68:df:18:bc:5a:1f:4a:2f:0f:88:f2:
         81:cb:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:39 2024 by rpki-client on console-fra.rpki-client.org