Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
File:                     20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa (raw, json)
Hash identifier:          ZOdvA/iBaRjqoj9co0+BsKtfA4QjVlFIl5ZMtukUrlE=
Subject key identifier:   6F:2F:6B:3A:05:BC:FC:D8:F2:65:DF:E8:92:61:DC:F8:F0:1C:D0:9E
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F432858473A5B964D67A8E94BF4236F60
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54994
IP address blocks:        157.185.131.0/24 maxlen: 24
                          157.185.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:96:4d:67:a8:e9:4b:f4:23:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=077781f2-c99b-41b9-b4a9-f6875d3cf0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:b3:94:4e:83:2b:d6:51:96:11:1b:1b:52:
                    83:05:1f:7a:b5:92:a4:5a:06:70:ab:71:15:2a:e9:
                    c3:cb:eb:b8:17:34:de:f9:59:76:69:c4:31:52:ef:
                    90:52:21:73:5c:2d:04:d6:5c:47:a8:c5:f3:5b:ff:
                    bd:5d:27:8f:55:e5:a1:7d:30:03:d7:63:24:83:8c:
                    2e:a2:eb:81:06:a9:58:bb:2e:41:ec:6f:30:21:4f:
                    8f:65:3e:7a:c8:ee:6a:ff:57:e3:34:0b:80:45:79:
                    d3:9a:53:93:8b:66:e9:ef:86:10:10:4e:af:d7:85:
                    e9:7f:1c:ba:c3:86:1e:2c:1a:a1:00:5d:e1:57:71:
                    69:7b:1e:58:7d:e7:50:cc:87:15:5a:51:23:55:57:
                    15:e0:79:2c:ad:af:57:ec:e9:7c:a8:20:96:c4:ff:
                    62:b6:98:1c:da:56:85:73:1f:c0:bb:5f:b2:6f:8b:
                    6b:81:47:a1:88:28:a3:72:38:8a:b1:ce:d4:8c:4c:
                    42:95:45:ed:b3:9a:97:1d:30:63:30:37:98:64:6c:
                    6f:e0:e1:71:dc:19:7b:c6:48:f7:5c:20:c0:2d:83:
                    1e:8b:d4:64:6a:30:99:53:4b:0e:1e:06:47:ac:5d:
                    73:84:8f:e3:91:8a:2e:db:88:47:3e:c5:7d:8e:35:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:6B:3A:05:BC:FC:D8:F2:65:DF:E8:92:61:DC:F8:F0:1C:D0:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/20eb9a8d-bab5-3e5c-a036-79a8349ab896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.131.0-157.185.132.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:50:8b:4d:9c:d3:76:71:f0:fc:42:59:a7:22:bd:7a:33:ed:
         cd:d1:8d:bc:f0:47:6e:44:24:84:34:2d:1f:4e:66:c6:39:b1:
         9a:ab:ec:b4:1a:1c:a8:84:95:17:ba:96:2b:5f:77:67:bc:06:
         dc:52:87:aa:68:05:b9:3b:44:a8:26:86:2d:5c:05:40:f3:a7:
         2d:fa:91:c8:a9:f5:a9:c0:e6:ed:b8:42:1a:22:aa:37:07:54:
         1a:ae:0c:6d:bc:ad:dd:fd:36:5a:80:63:db:01:03:5b:95:3a:
         ed:86:6d:2b:90:5a:27:ac:5b:a0:85:1c:88:16:aa:53:0e:4a:
         eb:72:9e:8f:b7:3c:83:ac:33:39:d8:f1:60:0c:81:9e:03:fb:
         c8:5d:ff:ec:9a:28:99:e2:2a:fb:ce:2d:53:1f:6b:1a:fd:5b:
         a7:48:bf:64:34:16:8d:fa:a2:e9:0e:26:83:67:04:e0:90:ad:
         94:7f:ff:c6:65:a3:3a:76:61:4a:14:87:35:60:a7:88:17:56:
         8b:7a:76:2f:30:90:26:e8:e7:95:2e:f5:7d:72:eb:54:6a:92:
         c3:3a:5e:cf:da:83:3b:bf:d8:cc:02:53:80:18:08:6a:c8:c7:
         61:2a:2a:64:fd:da:34:88:8a:e0:c8:86:a4:88:a1:c5:6b:e3:
         d4:63:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:50 2024 by rpki-client on console-fra.rpki-client.org