Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa
File:                     96b514fc-da6f-332e-8a0f-fb13840308a2.roa (raw, json)
Hash identifier:          0uFE/4QZ5USYE3aCNLcfFE69gXCk4MmBuwWFYFebiQ4=
Subject key identifier:   C7:65:F2:26:F1:EF:75:43:C0:1A:97:48:E3:51:D7:E6:6E:06:7D:75
Certificate issuer:       /CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
Certificate serial:       010D0C9F43285847C8D9E9791C16689D33636A80
Authority key identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     63023
IP address blocks:        172.81.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e9:79:1c:16:68:9d:33:63:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=48486c33-4077-40ac-bc33-5bfc4117aa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:7b:b8:f5:8e:24:4d:95:20:d1:2f:ec:08:
                    cb:06:01:3f:2a:63:7a:1b:09:4d:dd:4e:f4:3d:8b:
                    b4:90:f4:8b:b8:3e:b2:cc:b0:f3:6f:b7:5c:a7:4c:
                    86:4c:91:09:88:67:95:a5:8e:7d:7d:cc:11:3d:85:
                    6b:26:a8:05:2e:e5:46:e2:0c:bb:06:49:6e:ae:ac:
                    db:f3:4c:ff:14:b5:79:10:c4:6f:59:c6:f6:fc:b2:
                    a0:0a:45:4a:7a:14:21:00:57:78:7d:62:02:88:50:
                    a7:38:35:cd:e5:f5:71:c5:44:36:be:5e:df:60:ca:
                    ab:51:a6:aa:27:05:fc:38:96:b9:62:96:48:96:c2:
                    86:01:fb:26:30:26:41:68:45:e6:e7:58:6b:d5:42:
                    61:7e:b4:ce:e0:a7:ac:cf:d3:e8:42:79:20:61:3f:
                    f7:59:7b:1e:56:dd:1c:e5:d3:7e:98:b2:e6:29:6f:
                    98:71:f2:b5:14:90:83:2e:80:4f:b2:18:54:81:09:
                    58:49:0a:1f:af:5c:f3:50:1b:b3:77:fc:a4:18:c4:
                    79:47:59:c8:1b:21:b0:b6:35:27:1e:c3:ce:9a:60:
                    1f:fc:3e:b3:d3:e8:2b:20:c8:14:7e:9a:c7:8b:dc:
                    4a:9a:9e:d2:bb:4a:7b:ff:76:51:0f:8a:e5:6a:64:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:65:F2:26:F1:EF:75:43:C0:1A:97:48:E3:51:D7:E6:6E:06:7D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl

            X509v3 Authority Key Identifier:
                keyid:58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:c6:2b:dd:ba:f2:b8:63:49:6e:ac:60:7b:0f:a3:30:2c:
         f9:67:32:c4:26:3e:f4:3c:00:a0:c1:08:20:88:6c:64:31:59:
         f5:80:41:08:d9:99:68:47:5b:05:0a:4d:78:41:3c:99:39:3b:
         3d:37:46:e7:03:92:e3:de:dd:c8:8b:99:39:8c:ab:52:53:59:
         35:e7:d8:49:22:97:ac:65:2a:7a:57:6d:0d:97:d9:d4:6a:c2:
         92:6d:7e:2c:ee:ce:a4:4d:72:20:c3:f2:f6:fa:8c:86:59:c5:
         07:2d:cf:e1:c2:f0:5a:7d:fa:3d:5c:51:f3:08:bc:e0:33:2c:
         62:0c:aa:54:bd:dd:b4:ee:ff:f4:2f:81:63:ee:3d:91:9d:36:
         94:4e:8c:f5:df:15:d3:41:55:27:25:c5:5d:f7:8c:46:75:9b:
         fb:c8:26:61:79:55:a9:50:14:23:75:aa:ef:42:07:e1:77:f9:
         ca:a3:91:df:41:26:bb:aa:7e:94:03:af:79:05:53:17:a6:e7:
         f0:8b:62:59:a8:cd:09:9c:9b:c6:19:83:3d:f9:61:a3:0f:aa:
         48:8b:5e:fe:8d:17:8f:a2:41:ce:7c:d1:35:da:9b:d5:31:d1:
         63:10:85:a6:10:71:1a:73:67:c6:ee:ec:20:03:2b:d4:ab:36:
         2f:b7:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 17:35:25 2024 by rpki-client on console-fra.rpki-client.org