Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa
File:                     146ef9ae-f845-3565-9b2c-e21a984d126d.roa (raw, json)
Hash identifier:          /FHzNjsl3CLeUoigHfqLtt/KdETjPAwtbY/iqpb50NA=
Subject key identifier:   DC:5D:C5:D0:72:D8:39:19:C7:50:FD:54:1F:55:94:CD:26:CD:4A:DC
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F43285847F2BA30D35DFEDA4FBA30FA04
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     53407
IP address blocks:        158.120.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:30:d3:5d:fe:da:4f:ba:30:fa:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=4a3e2909-da4d-4e6c-b4b6-22184ca97c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:a7:30:b9:58:04:8f:dc:0d:74:bb:19:00:
                    65:67:78:7d:6e:f2:68:d8:f4:ab:90:d3:97:3a:7e:
                    ba:f4:60:09:17:ce:c6:ff:e5:2d:c1:e3:fb:99:3f:
                    ca:10:22:e6:15:54:8d:d1:f9:13:56:4a:67:3f:31:
                    6e:f0:45:0e:ab:51:28:b1:bb:38:ff:e8:ad:65:8f:
                    69:fc:35:4e:1a:2e:39:80:2b:db:af:e5:b8:2c:6f:
                    0d:06:30:4b:85:80:58:16:35:01:56:04:8d:bb:e9:
                    04:8a:00:09:e8:c8:e6:a6:60:09:7b:c0:ee:31:00:
                    e2:3b:b7:b8:2c:ea:5d:53:c0:43:aa:c0:53:16:7f:
                    31:10:98:c0:52:36:81:81:06:d0:24:00:0c:d6:b2:
                    66:5e:77:5f:d1:19:72:ca:7c:22:e1:8b:5c:6f:0a:
                    66:f8:c4:be:cc:a5:d4:a6:33:7c:f1:1f:a9:f7:2f:
                    c9:57:61:a4:21:0d:23:5c:81:2e:04:02:34:66:54:
                    e9:95:08:3a:f4:a6:c7:45:d6:af:cc:18:88:52:de:
                    ad:0e:d2:27:ca:19:eb:a0:64:8f:60:ab:af:a9:2b:
                    1c:1e:15:d8:5a:5d:0a:86:0f:2f:32:d0:77:e9:39:
                    1c:75:e9:fb:91:62:d2:a3:8b:0a:34:f7:a2:1e:0f:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5D:C5:D0:72:D8:39:19:C7:50:FD:54:1F:55:94:CD:26:CD:4A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/146ef9ae-f845-3565-9b2c-e21a984d126d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:47:15:49:4c:58:fd:64:cb:2b:ad:5d:9d:fb:1a:36:b5:26:
         eb:db:63:fc:94:98:e3:79:58:a3:17:e0:93:60:03:eb:e9:c3:
         01:35:a5:d5:b1:97:02:22:bb:06:86:82:aa:1f:fb:7a:aa:07:
         ce:c3:02:e8:6c:85:c3:42:14:c1:ae:9f:64:6b:b1:99:0a:c0:
         81:ba:08:9a:40:72:b8:9e:16:7a:bb:fc:e7:5f:f1:e1:ae:07:
         4d:62:e6:df:50:50:c5:59:c3:50:5b:b2:bc:48:3a:60:9e:c0:
         0e:80:82:a7:f9:de:c7:f6:ee:f5:3e:41:42:87:dc:2b:98:66:
         60:be:6f:1c:60:fb:cb:5a:c8:1a:ae:ce:06:ea:da:c7:94:e1:
         9c:18:e3:01:c3:bd:76:97:ce:0c:84:49:68:c9:e1:5e:39:a9:
         90:1e:33:cf:c7:15:13:46:b5:96:9a:9d:0e:12:bf:7e:dd:a8:
         b8:df:33:c2:01:81:67:0e:83:a4:91:37:0e:82:a1:c2:32:92:
         ee:28:67:6e:4a:2c:bd:63:7e:6e:30:56:44:c7:e7:30:46:09:
         66:56:72:6d:50:c4:0e:9f:5b:99:b1:09:39:da:28:9d:13:e1:
         0c:d8:04:df:79:48:d6:6c:a4:d9:e1:14:64:2a:ed:e6:c0:04:
         5a:a2:1a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org