Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa
File:                     758605da-a950-3c7b-808b-b23cef708f68.roa (raw, json)
Hash identifier:          NxovT9+pDQAvpBFQj200iwJvDlImS5Z+m/nKPFq5XLw=
Subject key identifier:   63:3C:D4:ED:BD:DB:1F:5A:4C:71:F7:BF:96:57:16:1F:4D:9A:AD:AF
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F432858474C80C1FF04688544CB0CBA40
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa
Signing time:             Sun 22 Sep 2024 13:00:40 +0000
ROA not before:           Sun 22 Sep 2024 13:00:40 +0000
ROA not after:            Sat 21 Dec 2024 14:00:40 +0000
asID:                     54994
IP address blocks:        157.185.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4c:80:c1:ff:04:68:85:44:cb:0c:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 22 13:00:40 2024 GMT
            Not After : Dec 21 14:00:40 2024 GMT
        Subject: CN=2de2b8f5-aeaa-474b-b569-0aed61ee363a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:47:98:dd:72:c5:af:dd:ef:7a:cd:97:4f:
                    e2:12:8f:f3:ad:5a:04:ca:c3:a2:84:f4:38:ef:72:
                    7f:be:f6:18:1c:67:ff:2c:8b:62:60:5f:fa:fa:0a:
                    51:00:a8:42:37:39:d4:2d:63:de:02:ee:28:c0:4b:
                    d5:25:9c:61:45:59:99:b3:f5:86:43:7a:d2:7a:08:
                    e6:7b:ac:65:3a:4a:1f:33:43:36:26:f8:dd:e4:ec:
                    5f:44:34:b2:27:00:71:7f:51:2f:54:67:60:27:4d:
                    86:ec:84:80:1a:59:99:b7:de:c4:33:b9:ae:7d:86:
                    f5:52:56:6f:b6:78:a1:e4:41:38:68:6c:52:2d:a4:
                    f4:ec:37:ea:23:a5:9e:5e:56:3a:d3:88:49:e3:b1:
                    fa:56:ab:9e:03:f5:ea:91:58:b0:95:c3:c7:0b:d5:
                    3b:9e:0c:ec:8d:e9:f2:08:25:1e:1f:6d:4a:8d:e2:
                    3d:64:53:16:ef:8b:6c:b3:c0:95:ed:0c:d0:6c:cc:
                    9d:90:6d:c8:48:45:5b:b5:f3:81:33:f0:f5:9d:41:
                    98:20:25:46:2e:b3:5a:2c:e2:32:bf:86:83:ef:32:
                    f2:1a:02:a9:a5:57:03:10:90:3d:7c:38:6e:b1:72:
                    bd:5a:5a:a1:20:d6:d1:50:a8:77:e8:7e:fb:f5:74:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3C:D4:ED:BD:DB:1F:5A:4C:71:F7:BF:96:57:16:1F:4D:9A:AD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/758605da-a950-3c7b-808b-b23cef708f68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:db:e1:9f:2e:16:80:46:75:f3:65:30:23:b4:c2:00:5f:d5:
         39:21:cf:ca:d3:74:f9:0d:bf:e8:44:48:d3:c9:9d:02:c4:40:
         6f:d1:6d:62:17:45:ab:18:4f:21:fc:34:9b:85:41:9d:d5:1f:
         9e:6d:a7:15:6c:f6:5a:95:4c:8e:67:40:86:7f:84:bc:f3:e6:
         a3:bd:d8:96:9f:04:94:7a:de:21:ad:b9:5d:bb:c3:54:d0:68:
         63:89:0e:37:6f:da:ad:b4:98:1b:31:1b:b8:a6:1a:81:89:36:
         75:d2:f6:00:d7:78:ed:7f:cc:03:39:33:30:19:18:98:ed:65:
         57:a9:02:99:3e:10:f6:3c:f5:7d:1d:c0:a2:c2:40:f3:a8:84:
         75:fb:5c:b7:1e:f5:1f:44:fe:0a:b4:d3:16:b2:c5:d2:f0:52:
         d2:bd:76:1c:fe:7b:aa:cd:c4:5e:04:7b:f8:a5:47:44:de:25:
         cc:ca:39:a7:02:46:55:06:df:d6:33:01:2f:c5:5c:d6:2c:25:
         bc:16:df:19:c2:4e:af:dc:4c:3d:c6:cb:97:5b:38:67:1a:37:
         c2:a4:81:d7:69:65:66:3e:f8:ed:df:15:73:bf:eb:c5:1b:91:
         30:49:20:23:4f:4e:58:6e:39:54:72:f8:99:9f:93:18:66:31:
         93:0c:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:05:01 2024 by rpki-client on console-fra.rpki-client.org