Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa
File:                     24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json)
Hash identifier:          SXhgOSC+oHMuk4ycwVlB7sfPIiELq8yq2frQejnQCF8=
Subject key identifier:   89:08:13:BD:C3:13:E2:79:A3:A4:D5:63:A4:E6:A5:5C:94:45:9D:D7
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285847AE36C3900F35B9B69208B0C0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     400104
IP address blocks:        157.185.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c3:90:0f:35:b9:b6:92:08:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=71979b84-145e-42ca-9c90-31a91bb8004d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:0e:ae:76:43:73:c7:fb:dd:fd:b7:68:3a:
                    19:3e:d1:1a:20:7b:d4:cb:e9:56:b8:16:23:b4:25:
                    bf:be:56:db:f1:59:a9:a3:cd:d5:9f:95:c9:78:82:
                    37:93:ee:75:30:70:0c:b0:bb:71:b9:bd:67:f6:34:
                    42:8a:ce:ab:d3:b0:91:ee:2c:b5:71:04:59:a3:43:
                    c5:15:71:39:3b:37:4e:f3:0b:b5:66:cf:6a:ee:04:
                    8c:dc:ed:67:19:95:c5:19:ec:73:5d:9f:b3:08:74:
                    73:52:9e:59:fe:2d:24:18:99:55:88:9c:ca:c4:ed:
                    e7:04:91:fa:c8:90:7e:64:65:45:4e:a3:61:d2:3d:
                    09:c4:c7:52:16:41:68:bd:9b:21:44:a2:6f:1a:92:
                    af:f9:e3:b3:af:b2:3e:bd:ec:55:8a:69:4b:76:56:
                    2f:1a:fa:05:c1:78:89:29:61:48:ae:b3:f2:48:98:
                    ca:8d:b1:ce:2d:f0:af:cd:3e:a8:fa:b3:de:8f:37:
                    03:b7:75:54:55:21:6f:3a:eb:e7:2d:e0:9e:de:7a:
                    f1:92:60:2d:cf:cf:ad:a0:8e:c5:48:d2:c0:f4:1d:
                    fd:bc:c0:02:39:3f:8b:f4:f1:05:06:22:bc:54:6f:
                    a7:24:fe:a2:cc:dd:14:e6:71:f2:5b:3e:7d:5e:0f:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:13:BD:C3:13:E2:79:A3:A4:D5:63:A4:E6:A5:5C:94:45:9D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:3d:28:d5:83:3d:01:ce:b8:76:bf:6b:d5:b2:18:22:60:
         68:99:ac:b6:52:8d:f9:c7:5d:1e:ee:b1:00:d2:40:d1:1e:1b:
         eb:31:9f:3e:b5:86:a5:50:ae:fc:80:bd:63:af:25:f5:2b:ec:
         93:ad:69:bf:71:00:5b:23:67:f5:70:2d:58:5b:21:f1:25:6b:
         59:5e:1f:4c:34:70:19:4b:24:a5:a2:c3:7b:7c:66:6a:8e:af:
         60:34:7a:36:97:77:27:1e:b4:4f:e5:8f:18:bf:bd:62:03:e1:
         43:ed:8f:e2:00:99:28:d5:43:1e:ba:4f:c5:4a:82:51:b9:3f:
         4b:a4:5f:55:ad:6a:fc:72:1c:ff:2d:da:ca:9a:ff:3b:d9:46:
         34:cb:8c:d9:30:50:38:90:0a:e9:84:13:d9:33:18:46:a7:6c:
         c4:42:c4:80:8b:13:bc:12:14:a2:e4:a6:13:4e:44:71:7a:65:
         a2:b5:a6:c1:39:45:44:e2:f8:05:f5:3a:c2:61:d0:4c:19:d3:
         a2:3a:3d:32:8c:09:68:b6:a0:8a:4f:65:ce:da:15:80:a2:b2:
         41:52:ae:22:b4:24:57:d2:00:2e:a4:0b:fb:eb:ea:73:37:f5:
         27:87:2f:10:61:7f:2e:b2:51:89:1a:26:c3:1a:b4:df:29:3b:
         64:8e:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:01 2024 by rpki-client on console-fra.rpki-client.org