Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa
File:                     b45d95f8-9120-3572-a0e2-479b1f47e51b.roa (raw, json)
Hash identifier:          l1N7IIdRBBNb0KwMGmKvgVrk+u+dyQ3Aw+U5bUcypNw=
Subject key identifier:   7F:85:65:56:0F:64:0D:2C:18:A9:D8:44:31:96:34:0C:B3:49:CE:44
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584789EBF9EDF7A5D5B3DFD0B6E0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     46261
IP address blocks:        207.230.96.0/22 maxlen: 22
                          207.230.100.0/22 maxlen: 22
                          207.230.108.0/22 maxlen: 22
                          207.230.120.0/23 maxlen: 23
                          207.230.122.0/23 maxlen: 23
                          207.230.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f9:ed:f7:a5:d5:b3:df:d0:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=bc5deca6-20aa-40db-a9c1-8683c3bee874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0a:5a:6e:d2:1c:81:9d:63:b9:e4:b6:72:d4:
                    e2:e6:58:2c:2b:15:5e:f2:80:02:45:7c:0b:54:0a:
                    99:d7:ee:a3:1f:17:ac:4f:5c:fe:10:5b:5f:3c:e4:
                    cb:54:92:5c:06:5b:4a:62:7f:9a:31:22:7a:62:74:
                    95:79:f8:1a:70:93:d0:a5:6e:9f:11:06:9b:f5:2d:
                    5e:e0:77:59:08:1f:ff:f4:35:a0:32:4d:23:d0:27:
                    51:4b:2d:26:a4:e0:08:e9:85:6e:f2:56:c8:6a:a4:
                    21:d4:8b:09:15:7c:4b:4e:4a:80:3b:1e:62:34:14:
                    8c:9c:3e:f8:e5:c0:0a:e7:e6:e5:f9:62:ba:08:4c:
                    bc:b3:e6:61:28:72:29:27:cb:ae:b3:2d:75:ca:e9:
                    a1:63:89:02:01:52:12:74:1f:24:26:d3:87:4e:1e:
                    e8:79:d3:5c:c4:d3:00:ea:8c:d0:5c:99:e6:4b:6a:
                    7f:11:f4:5a:68:fd:f6:cc:1c:e8:bf:b2:7f:4e:dd:
                    e1:88:9f:aa:77:d0:25:28:18:0e:78:c8:b0:f8:44:
                    46:2d:ca:16:2f:4f:60:27:f9:70:cb:ea:3c:a8:a1:
                    59:a1:85:8e:dd:4b:e5:a3:65:38:84:14:3f:83:0e:
                    14:34:36:eb:b1:bc:bb:a0:7b:9a:b4:db:06:6f:ce:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:85:65:56:0F:64:0D:2C:18:A9:D8:44:31:96:34:0C:B3:49:CE:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b45d95f8-9120-3572-a0e2-479b1f47e51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.96.0/21
                  207.230.108.0/22
                  207.230.120.0/22
                  207.230.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:8b:91:60:ef:0e:ff:64:ac:b3:d3:1c:ea:43:47:90:1f:
         4a:d0:3c:af:20:04:6a:fc:3e:1d:fd:4f:9b:cf:f4:4d:55:c0:
         d7:ea:53:80:3b:af:ed:5c:e6:2e:75:8b:23:13:4e:83:11:b4:
         7f:88:90:dd:d6:e9:d0:4d:9b:71:00:7a:57:1a:3b:ec:b6:0e:
         e6:e8:62:21:2d:e3:ad:49:78:bd:ac:f1:9e:82:48:53:0f:45:
         ac:a8:b2:34:64:00:19:b8:fa:63:5c:64:1c:f6:ac:51:5e:47:
         16:0f:20:3b:48:e9:2f:f8:fd:47:65:5c:e2:db:bb:d5:69:2e:
         ff:eb:73:1c:fb:a9:a8:10:6c:c8:b9:cf:8b:c3:30:0a:60:33:
         9a:3a:0e:47:29:51:01:72:ee:9a:af:fd:40:56:69:81:9b:c3:
         d2:39:5f:55:16:03:8d:59:72:50:cd:b1:df:26:7c:9e:14:bc:
         8b:d4:2d:13:c0:45:9d:cc:ee:82:a9:66:06:c6:06:8c:e4:53:
         2f:b4:da:67:52:6f:c9:b9:21:cb:4a:00:d5:c7:92:6b:3a:18:
         5b:11:e6:13:e8:cc:9d:91:bf:ff:6b:f1:6a:b7:4d:2c:15:57:
         07:77:fe:19:d5:80:54:42:4b:bb:5e:9d:5a:04:3c:18:ed:af:
         20:2a:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org