Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa
File:                     205fbb5d-308e-337c-8698-5973a496fa92.roa (raw, json)
Hash identifier:          QKCKFsb7p2rrzSO9tg1mK2grfF0JQnVcRPSnS3ih+JA=
Subject key identifier:   B6:6E:D8:DF:9D:0E:41:BD:22:36:EC:91:43:AD:4D:FC:C0:98:AF:9F
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285847C1DF5D5D35D04B6EF1C0CC00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     21859
IP address blocks:        157.185.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5d:5d:35:d0:4b:6e:f1:c0:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=8df5cd00-3942-4d48-98a6-bb8bb023c448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:43:b0:f9:66:65:6a:ef:47:7a:90:77:13:
                    8a:af:ec:80:aa:2e:5f:00:02:87:ce:be:fc:b2:5b:
                    29:f7:f3:ec:bd:bd:53:01:4b:4c:a2:b5:6b:11:05:
                    80:35:f6:24:e4:01:3d:d6:79:c9:3a:35:96:5f:58:
                    92:a2:29:90:1a:97:e7:a0:0d:ea:53:40:05:b0:88:
                    45:61:28:12:59:0e:f7:fd:dd:82:03:38:89:e2:3b:
                    44:5d:99:49:af:58:4e:70:0a:ba:4b:6a:37:df:74:
                    be:be:d3:45:37:87:ac:99:cc:86:5f:d3:42:4a:f7:
                    e9:c0:21:7b:0d:10:83:15:58:f1:6d:a5:ee:f4:45:
                    7c:ce:6e:94:c1:44:61:12:c4:a8:18:10:55:64:32:
                    e0:40:5c:2e:4a:e2:0c:d4:46:ae:f3:a8:81:c2:a2:
                    a3:89:31:f2:b0:d0:eb:df:37:d1:e9:d6:fc:00:bc:
                    68:3d:ff:b0:7a:02:c4:9b:b0:6c:c9:de:7f:e7:35:
                    fa:bc:07:66:07:97:95:4e:0f:45:59:72:72:f0:e9:
                    98:16:23:f6:ca:8d:61:bc:4c:bc:39:d6:8f:6c:1a:
                    a6:67:9e:7b:bd:05:8b:d0:e9:a7:a9:81:58:33:ae:
                    81:0a:6f:91:53:55:b5:a9:8d:4c:e2:cc:61:1d:9d:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:D8:DF:9D:0E:41:BD:22:36:EC:91:43:AD:4D:FC:C0:98:AF:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/205fbb5d-308e-337c-8698-5973a496fa92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:54:c4:8c:39:33:b2:ba:eb:fe:fc:aa:05:97:21:d7:c2:38:
         eb:21:5c:62:8e:e4:6f:a8:fa:70:b2:a0:2e:43:9a:85:5d:86:
         24:c5:d2:07:6c:8c:35:6d:ec:4a:38:46:8f:58:a9:a1:6a:13:
         da:14:0a:2d:03:3d:ce:17:99:fc:7d:21:02:73:e2:5b:f6:3b:
         64:ce:a4:1d:9e:aa:ce:5c:c3:c3:be:32:4f:de:dc:1a:92:90:
         13:49:d2:ba:b4:5f:70:72:88:33:8d:01:fc:86:4f:90:b6:bb:
         6f:59:d3:55:b3:2c:63:2f:a9:61:64:e0:be:3c:a7:22:01:c3:
         59:60:b4:7c:a6:71:9b:d6:63:04:95:6b:a8:50:03:70:9b:ae:
         5a:63:f4:d2:28:62:85:d3:17:17:ab:0a:4c:15:02:b2:b8:7d:
         9d:4e:c7:ec:60:33:ae:d2:c6:b1:f9:db:dc:5a:b2:b8:9a:9b:
         f0:22:99:24:a8:b0:2e:e7:9f:8f:72:ed:19:98:2f:a5:97:7b:
         4c:81:63:f3:0a:ba:d1:5a:c3:d6:c6:9e:8d:be:0a:df:45:79:
         07:4d:d5:1b:91:9c:7e:8d:60:bc:5a:de:23:f7:b0:4c:a8:fc:
         dc:51:02:6f:ff:1a:68:97:68:57:bb:9b:a2:54:dc:a6:64:b0:
         71:70:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:07 2024 by rpki-client on console-ams.rpki-client.org