Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
File:                     064a5eec-8029-3054-85ec-74c43a35dabf.roa (raw, json)
Hash identifier:          hMqThbE5R6iMfNPvKYMGGt00hM+S1CidcvlTu3UYzLE=
Subject key identifier:   DC:4A:27:22:2F:91:5C:84:93:ED:8C:77:DB:14:26:98:3A:95:5C:BA
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F432858475A762DF6F43979C13EC3DC80
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     20205
IP address blocks:        158.247.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:2d:f6:f4:39:79:c1:3e:c3:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=9e966342-1345-4b3c-9e61-36d18f40cde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:68:d2:3c:26:23:03:c5:42:f8:97:7b:64:
                    7e:c9:e7:15:84:f6:23:fb:6b:9a:8e:4c:98:27:50:
                    6d:fc:04:e4:1f:83:95:a4:9c:e9:36:45:ff:ec:ce:
                    6c:59:33:1c:7e:33:e6:80:94:96:81:a1:c6:de:8c:
                    ea:d9:9c:e4:ff:f9:0a:77:7c:ee:9b:27:c4:5a:ba:
                    12:8d:51:4c:17:96:f1:d0:54:a1:61:9f:e0:44:15:
                    39:ab:c0:a9:74:2a:2b:70:28:ea:8a:8a:35:60:b7:
                    59:a9:97:15:64:2d:0f:e7:15:8e:a6:21:a6:96:af:
                    ae:e5:fc:eb:e8:a1:1c:48:11:03:0e:33:c9:52:68:
                    6f:ba:2c:10:70:01:a2:11:45:47:a8:11:11:15:dd:
                    ab:01:26:5f:48:c3:ef:3c:d4:9d:f1:c3:d5:fa:15:
                    96:77:b2:33:82:2d:5e:f1:f0:93:94:e5:19:9f:14:
                    08:42:78:45:c9:95:d2:61:8c:f8:62:03:06:9f:2d:
                    03:99:b2:c4:18:73:7a:ee:97:42:08:5d:c5:79:30:
                    8c:27:a5:14:58:2e:1b:ea:79:02:97:39:46:b4:90:
                    75:2c:12:dc:b0:bd:db:ea:19:ec:a7:99:d5:fd:a6:
                    10:02:bb:08:6a:95:b9:63:3a:5a:ac:d8:1b:60:a6:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4A:27:22:2F:91:5C:84:93:ED:8C:77:DB:14:26:98:3A:95:5C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/064a5eec-8029-3054-85ec-74c43a35dabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.247.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:1e:ef:d9:41:e0:7e:99:2b:99:09:63:44:31:f1:08:dc:
         da:05:7f:d9:d9:32:c2:9d:e3:3f:86:07:4c:0c:da:d9:1a:08:
         c8:a5:d6:11:c0:bc:62:c1:6d:b3:59:0d:4d:d7:7b:4c:64:ed:
         1c:a0:b3:80:38:e6:cb:6a:1c:34:1a:e0:15:03:1a:6c:bd:e4:
         7a:c9:d3:b7:1d:89:f1:e5:e5:24:6f:d5:b6:68:44:57:1e:68:
         99:1e:33:36:8d:2e:5e:48:39:23:27:4b:43:be:86:49:a3:3e:
         ec:88:36:29:d1:3a:d3:67:ad:79:98:b8:46:be:66:29:90:4c:
         0b:68:c7:71:b2:30:b6:7b:99:15:ce:f1:f9:64:b0:78:8a:ef:
         4f:f8:35:a5:88:cb:47:92:66:0b:95:73:ee:3f:9e:e9:3c:c8:
         e8:fd:6e:fc:77:cc:f9:88:73:77:87:aa:a8:52:16:61:74:1c:
         f7:60:fc:b0:8f:a7:8b:ab:0b:fd:67:29:60:d3:0d:e9:d6:eb:
         9c:4e:2a:03:45:a4:d9:4c:f5:34:97:a9:4d:6c:3d:d6:c6:1f:
         8a:8e:63:73:ae:1a:d7:87:77:0f:84:8d:f9:c1:ea:84:05:39:
         51:26:11:e8:d2:14:c9:4c:0f:63:e8:11:2a:a4:60:14:1a:9c:
         5e:f1:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:49 2024 by rpki-client on console-fra.rpki-client.org