Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa
File:                     844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa (raw, json)
Hash identifier:          R7xlI0EsakRhWOK7CI1Df/T2NOLw46fjQBZQzQCogN0=
Subject key identifier:   A8:B4:0B:D5:8A:5C:F8:85:54:2E:8F:82:A8:D4:7F:73:1C:D5:45:67
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584754E0EA44D6C05F7367271880
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     33182
IP address blocks:        107.190.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:ea:44:d6:c0:5f:73:67:27:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=30b94e88-7830-4238-9347-1e6df1702217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:3e:a6:43:24:87:19:95:ce:ff:1a:ca:a7:
                    08:68:f4:3f:ec:7d:83:67:65:20:86:62:e9:dc:1e:
                    c8:0e:f4:24:96:01:02:c9:bb:4f:24:43:7d:08:fb:
                    93:f7:c1:99:95:3a:0f:7f:a1:d0:c1:05:c6:37:81:
                    23:20:dd:b2:a8:09:b5:91:31:42:7f:f6:12:9c:2e:
                    39:d4:e8:c6:d9:e2:82:9b:45:c3:db:58:d3:0e:ed:
                    80:d5:ee:9b:73:ed:9c:a9:fc:e5:87:3d:28:b7:6f:
                    5c:7e:68:6c:c2:50:6a:1f:20:55:92:86:34:3c:f5:
                    16:81:8d:60:1e:ad:d8:49:de:b4:72:fc:5b:e0:32:
                    12:3f:2c:06:69:d1:f9:de:e8:30:7d:a7:b9:79:55:
                    eb:ce:89:8c:66:f0:f8:c8:de:f5:b5:fe:73:ec:71:
                    99:0c:1f:b5:ab:e4:f5:98:63:ad:93:52:2c:29:b6:
                    a8:8f:ac:32:ec:b5:f7:de:4e:2c:2e:bc:05:1f:5f:
                    98:d6:ce:cd:a6:f1:d8:90:75:07:f9:4d:94:98:51:
                    5b:33:b5:99:1c:38:e1:72:34:78:e9:20:14:68:ee:
                    63:80:44:5c:d6:fb:79:10:11:88:2d:6d:cd:8f:a5:
                    6b:5d:a1:3b:9a:55:47:74:55:18:32:72:f7:a9:7c:
                    25:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:0B:D5:8A:5C:F8:85:54:2E:8F:82:A8:D4:7F:73:1C:D5:45:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/844f5ed1-c66f-38a2-b351-46bc8a0d71a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:5f:b3:d7:f3:c7:6e:8b:cd:96:48:f1:91:74:99:a2:98:
         22:64:8a:ee:07:d7:40:cc:24:20:92:80:9a:55:f0:a6:ef:44:
         2b:a2:f6:7b:28:01:c9:fc:a3:e7:6d:b9:60:35:9f:48:bc:9c:
         59:c4:cc:01:c8:ee:e0:55:0f:91:d8:d5:cd:b9:1f:42:31:2b:
         6b:d5:9f:79:33:68:e6:6b:37:e7:3b:b6:0a:64:b2:76:56:e7:
         76:06:17:d9:6d:6a:7a:5b:f9:df:9e:f2:ab:57:84:90:62:8a:
         3b:f6:31:07:24:e0:d2:9c:a3:23:f1:12:d2:74:83:2c:0e:be:
         66:24:e1:24:cd:37:7c:23:35:32:70:c6:5f:ea:66:c7:de:14:
         77:86:74:79:5d:c7:f6:14:42:09:d4:48:9f:89:b3:96:55:72:
         a1:c0:cc:03:7c:97:71:35:54:a1:bd:ae:fd:8f:f6:fa:01:78:
         0a:ab:6f:5b:22:aa:88:0c:b2:96:31:a0:a0:e4:bc:b9:53:19:
         68:51:89:ea:8e:18:7a:b6:ab:4b:da:2b:f9:2e:af:2f:2b:f6:
         76:e1:b7:b0:be:e8:ca:75:11:50:68:d9:d3:7a:c8:7e:5e:80:
         18:5e:20:1f:1f:b6:3c:28:10:1a:a6:64:6f:1d:bc:59:36:6a:
         0c:ce:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org