Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
File:                     1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json)
Hash identifier:          AFsw5wpUpcrJUhfBtBTI7U19Sq3sw5MDghwmYdwHsZY=
Subject key identifier:   CD:96:50:A6:CB:3D:DE:DD:0C:50:31:B5:8B:7B:F3:81:70:5C:A4:E1
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F432858471E70625E02989BD970BBFE00
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
Signing time:             Fri 06 Sep 2024 01:00:31 +0000
ROA not before:           Fri 06 Sep 2024 01:00:31 +0000
ROA not after:            Thu 05 Dec 2024 02:00:31 +0000
asID:                     7448
IP address blocks:        143.192.0.0/18 maxlen: 24
                          143.192.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:70:62:5e:02:98:9b:d9:70:bb:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Sep  6 01:00:31 2024 GMT
            Not After : Dec  5 02:00:31 2024 GMT
        Subject: CN=b294e65b-8a9a-4c87-aef6-d58b6f0f1757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:f4:6a:7b:fb:f4:6a:ab:37:ec:34:a2:e0:
                    f1:bd:21:91:1f:f4:b9:da:64:23:6c:6b:cc:1b:f1:
                    84:ef:fa:f1:99:7e:3b:f0:61:b9:71:e6:77:d7:0d:
                    5d:48:20:25:81:f3:78:24:6a:95:d4:66:d9:4c:4b:
                    f2:01:a8:39:56:cb:f8:35:f2:cc:51:15:6f:1d:b4:
                    c4:63:99:1a:b8:87:48:6d:0b:e3:f3:b9:a6:14:db:
                    25:a1:77:c9:2a:08:22:61:96:bc:8d:41:46:cc:d8:
                    0c:1b:43:a5:8c:66:e3:ac:88:e8:05:69:e4:57:88:
                    e8:88:c2:51:3d:7e:0c:8c:37:25:09:34:db:b7:88:
                    60:ea:03:f1:4a:00:68:28:20:d3:49:0a:97:17:26:
                    74:75:f2:eb:1e:0f:a6:c0:ac:01:54:6c:03:fe:f3:
                    07:a9:37:13:74:1d:fd:36:82:97:c3:66:d1:58:38:
                    59:c4:12:9a:56:98:62:6d:d9:2d:85:39:ac:ea:bf:
                    62:86:06:b0:7e:9a:f0:b0:15:d6:79:b2:56:d5:ca:
                    5f:6d:cf:09:1b:60:96:ec:7d:de:96:a8:ae:02:ca:
                    b1:2b:0d:34:4b:01:a1:e4:11:b9:8b:b0:a0:fc:89:
                    2a:e0:be:7d:36:3d:dc:f1:df:16:96:1b:e1:85:ec:
                    e6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:96:50:A6:CB:3D:DE:DD:0C:50:31:B5:8B:7B:F3:81:70:5C:A4:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.0.0-143.192.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:ab:4f:ec:5b:a9:2c:de:b9:19:e6:25:b9:9a:ef:1e:87:
         ca:2b:e2:59:36:96:c6:b3:73:23:f3:a7:a3:2f:70:cc:44:99:
         6e:f7:b8:a7:a8:82:27:9d:38:7d:51:30:fc:b9:03:0c:a7:97:
         ea:9c:24:ce:9e:88:61:d9:c0:ef:74:2f:4a:ef:56:db:50:7c:
         28:7c:e3:f4:e3:d6:74:a2:37:55:70:c4:79:87:42:a6:de:90:
         93:bb:ed:23:ff:ec:2b:b6:41:dd:7c:12:8b:d9:f4:11:10:ba:
         a1:23:cf:53:aa:b2:ee:60:29:70:a9:bc:a5:9f:53:23:63:72:
         f6:92:c3:58:70:28:0d:94:d3:3a:73:a0:37:ba:d3:ca:ca:b5:
         be:ef:db:99:27:0c:30:45:46:f5:8d:57:47:60:48:ea:6b:be:
         54:7a:5d:f1:fc:56:13:2c:cf:8d:f9:c3:bb:9f:2f:83:4f:42:
         85:a1:37:5b:64:b0:94:2e:90:43:a4:02:d1:38:41:bb:7d:d5:
         3b:d1:4f:c1:97:08:ed:f8:99:d4:0a:69:85:2b:36:6d:8e:a5:
         cb:d2:18:66:59:df:20:2b:73:27:0f:85:09:d9:d4:ec:e8:93:
         eb:9b:3e:66:fc:aa:42:60:4e:22:4e:01:e1:e9:e9:89:3e:0c:
         d6:7a:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:18 2024 by rpki-client on console-ams.rpki-client.org