Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/b37b152d-40e9-3a4c-b44d-474b5ae0aa64.roa
File:                     b37b152d-40e9-3a4c-b44d-474b5ae0aa64.roa (raw, json)
Hash identifier:          RJKe8ihrnm4Uan8etBaAB3lTuidkZCmHszWe1YuC4yw=
Subject key identifier:   D8:8A:77:44:0C:DE:14:D3:F5:12:66:7C:27:2A:59:44:0E:8E:6E:68
Certificate issuer:       /CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
Certificate serial:       010D0C9F4328584750B0A7AA99C6FEBC31C4F1C0
Authority key identifier: 2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/b37b152d-40e9-3a4c-b44d-474b5ae0aa64.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     393906
IP address blocks:        172.81.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a7:aa:99:c6:fe:bc:31:c4:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e149c4e5-ddb0-4d5b-a074-8d72fceaf83a
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=1fbfc7ff-22dd-48f6-babe-f9d2ca9a3d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5c:11:0a:cb:53:c4:75:46:48:51:ff:28:5f:
                    49:9a:d0:a5:f6:88:19:b1:b7:ee:e3:bd:67:3b:47:
                    21:df:2a:b4:63:08:d1:78:f7:92:37:40:32:e2:82:
                    30:e6:7c:5a:e4:e6:73:0e:59:d1:3f:1d:0b:ff:16:
                    f8:82:a7:95:ae:82:63:c0:7f:cd:0a:a4:04:a5:80:
                    24:da:12:92:be:dc:5a:d8:06:9a:72:21:25:16:6f:
                    d4:1a:4d:a0:f2:c6:7f:6f:a7:7a:9c:e1:74:21:54:
                    fe:91:d4:20:04:eb:8e:c4:4a:09:da:a6:f6:76:de:
                    47:4e:6c:91:ae:78:ef:bd:40:f6:ad:6b:9f:be:c6:
                    c8:30:a4:af:cd:ac:bc:51:26:ba:2b:52:5d:7d:ef:
                    3b:61:0d:df:95:eb:0b:bb:30:38:e0:3f:c4:9b:14:
                    bb:4d:c0:32:fa:b6:18:ed:22:0b:f7:f4:bb:37:0b:
                    d0:51:53:89:58:ef:29:a9:c5:ac:5f:8e:c6:ec:8a:
                    6c:9f:cb:28:6e:b8:33:6a:04:79:87:bb:8f:d2:f1:
                    bc:88:6c:74:5c:81:bc:04:3d:f0:49:52:43:85:dd:
                    38:0f:34:41:49:db:4a:2b:58:b3:a7:ba:97:8d:1c:
                    fb:b4:7e:13:87:7c:8e:5f:97:d3:06:0a:13:92:66:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8A:77:44:0C:DE:14:D3:F5:12:66:7C:27:2A:59:44:0E:8E:6E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/b37b152d-40e9-3a4c-b44d-474b5ae0aa64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:2E:80:20:42:1F:A9:57:48:62:1D:95:DA:F8:C1:FE:E2:38:21:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e149c4e5-ddb0-4d5b-a074-8d72fceaf83a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:68:14:28:60:5f:5a:e6:76:15:f3:c5:3f:1e:72:d0:87:2a:
         e8:03:f1:74:8b:b9:63:3e:d3:e0:0b:dd:2e:a5:00:aa:61:c6:
         3d:9d:eb:08:68:dc:c8:97:a7:ae:71:8e:ed:15:8a:13:82:90:
         51:85:c2:ec:75:74:66:7f:e8:a8:eb:dd:6e:f5:e5:89:e3:ec:
         3a:49:64:f8:3d:8f:a1:f4:42:22:39:a5:e5:7c:0b:88:2b:e9:
         0d:2d:3a:8b:1e:e2:6f:f1:63:a1:8f:8c:fd:77:60:9c:62:a0:
         cb:65:62:2e:da:64:43:53:48:ab:aa:b4:0c:05:fc:ef:be:8c:
         08:6b:e4:91:3a:bb:56:e5:86:82:c8:ed:eb:2f:86:d5:16:d9:
         93:27:d9:fa:6e:b8:39:6e:44:60:7e:c0:a8:25:25:c4:28:b7:
         78:a6:df:f9:5b:2d:c4:e0:68:84:f2:e8:10:24:0d:cc:f5:36:
         50:85:26:68:61:23:8d:f3:d6:04:63:bc:7d:1c:67:b6:5d:b4:
         1e:bf:91:07:5e:cd:90:12:8b:c1:4b:11:93:f5:35:43:18:5b:
         e2:b1:ee:4b:d4:47:01:4f:0d:3e:1f:38:fe:6e:21:24:59:e0:
         7d:2b:8a:74:25:a7:c8:24:4c:25:41:52:16:3c:2f:03:af:24:
         c9:c7:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:20 2024 by rpki-client on console-ams.rpki-client.org