Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa
File:                     f762dd36-62d1-35df-870b-392ba6f18911.roa (raw, json)
Hash identifier:          GjtKS4rPXNPcV+5UKJwcxG8vfbdUNCMVDnAPAb6PONc=
Subject key identifier:   88:51:86:6A:16:BA:D5:29:FE:13:73:3A:40:B9:72:AF:B5:55:DA:FD
Certificate issuer:       /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial:       010D0C9F43285847537B6D847B56950368576880
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     4476
IP address blocks:        142.232.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:6d:84:7b:56:95:03:68:57:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=ba7f7428-8fed-47b1-b804-495d33d4e219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:ec:40:38:95:54:9d:78:1e:5b:a3:dc:be:
                    cf:3f:35:f4:97:86:7a:52:34:72:0d:eb:46:19:88:
                    cb:7d:66:54:fc:16:51:a3:34:46:6a:12:ed:80:ec:
                    f4:c9:3d:a4:78:ca:9d:75:20:bb:61:d5:ee:25:be:
                    dc:f3:d3:2b:17:ed:01:8e:7e:77:7a:ad:c7:28:1f:
                    4a:09:c9:e7:81:17:d4:51:1e:de:48:27:e6:08:e7:
                    4a:9b:65:e9:ca:ac:cd:f1:ee:38:f0:be:f8:4b:3f:
                    81:96:96:8d:1a:0e:2e:67:96:10:bd:c4:02:68:21:
                    c8:72:21:6f:6a:9d:ca:01:a2:5c:f5:0f:8e:b0:ac:
                    b6:6f:d3:d7:c5:7a:67:cf:74:d0:8f:32:06:a2:04:
                    96:13:ea:7c:ed:68:d1:ce:80:ef:54:a8:b8:19:c2:
                    3f:10:76:22:f0:f8:b3:af:55:f8:50:6c:ae:29:bb:
                    5a:fd:a4:1d:17:44:da:bf:24:8e:94:d9:22:ef:62:
                    23:b1:cd:e9:7a:31:b6:eb:fb:06:7e:fa:ad:e6:63:
                    f5:d4:5b:b7:e6:92:c5:59:28:3b:fb:c3:dd:16:74:
                    d2:b7:5e:ff:54:e7:5b:7a:af:4b:e6:87:79:7e:d9:
                    45:e5:00:18:af:82:3a:ee:b0:09:1b:ca:a3:1f:94:
                    86:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:51:86:6A:16:BA:D5:29:FE:13:73:3A:40:B9:72:AF:B5:55:DA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/f762dd36-62d1-35df-870b-392ba6f18911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl

            X509v3 Authority Key Identifier:
                keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:23:da:3f:74:35:17:d1:c5:9a:dd:04:e3:d5:77:6a:45:fb:
         72:e0:fe:ca:2e:69:0f:ea:47:70:bb:92:77:18:87:d6:54:3b:
         78:18:6c:a4:f8:58:01:7f:b2:05:84:cf:77:65:c5:24:0c:34:
         d8:9b:e3:58:54:8b:a6:25:f3:34:18:6b:94:12:d1:9b:c5:e2:
         a5:26:77:9a:f9:05:01:68:ff:56:34:89:f5:56:c8:9d:e6:73:
         38:d2:f2:af:10:e9:e2:e3:86:8d:9f:21:b0:ca:7f:fd:3d:20:
         a5:2f:17:a5:92:cd:7e:ad:4a:45:b3:81:71:c7:b8:fa:9c:1c:
         11:99:a8:7e:dc:dd:0b:04:75:f8:95:9a:9f:23:dc:0e:56:55:
         5d:ca:8f:50:d9:f7:0d:54:df:4b:4f:e4:56:72:09:fe:79:57:
         f0:b2:b8:f1:db:4b:37:ab:40:ee:e9:24:70:94:1e:81:36:6a:
         b4:fc:77:d1:1b:b8:71:93:41:91:45:34:8b:66:29:ee:71:f0:
         67:7d:4a:79:41:07:76:8c:18:94:49:52:46:e5:15:e1:7e:3b:
         41:91:8a:54:a8:65:53:26:7e:e2:a0:a6:49:7f:ba:30:51:48:
         54:94:3c:eb:94:e3:0d:45:fe:f0:d3:06:a9:b5:07:5b:07:79:
         3a:50:70:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:41 2024 by rpki-client on console-fra.rpki-client.org