Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9e94b588-8e94-341c-a935-16a035f532b1.roa
File:                     9e94b588-8e94-341c-a935-16a035f532b1.roa (raw, json)
Hash identifier:          U/ydvEaXidTnY9AcOOdNzIX3IUUY+RzU2uIGJbOxKwY=
Subject key identifier:   F2:DD:F6:3B:0E:14:FB:D1:45:60:73:F1:0C:43:C7:94:7F:F6:D9:3B
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F43285847C4AA1BEC8F12F100852EE430
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9e94b588-8e94-341c-a935-16a035f532b1.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     21859
IP address blocks:        157.185.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1b:ec:8f:12:f1:00:85:2e:e4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=7fc34a88-78b8-49f7-8981-89f65efbfb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:3b:b2:33:a4:cd:39:1f:d0:39:18:30:17:
                    6e:73:53:36:09:bf:34:aa:64:d2:56:40:5f:30:9d:
                    8d:81:c9:08:66:98:84:68:ae:d3:82:0b:0d:6e:33:
                    6c:1f:1c:85:6a:0e:fa:5e:82:df:af:2e:d7:61:f0:
                    3e:6c:f0:92:94:47:62:a2:a7:9b:15:1b:7e:b5:d9:
                    1a:73:3f:63:ff:0d:09:49:0a:b5:b4:b2:a8:39:87:
                    81:30:62:a2:93:0b:85:76:6b:8a:ac:8e:06:3a:54:
                    6f:ca:5e:de:19:a7:57:1b:70:fe:f7:2c:69:fc:56:
                    22:3d:8f:9e:34:4c:19:ee:15:e2:5b:45:24:31:ce:
                    18:f5:29:26:22:b7:fd:98:cf:97:52:ca:be:c3:e5:
                    66:2c:3d:3d:91:be:e3:68:89:86:0b:44:c9:21:f1:
                    03:8a:35:ef:b4:2f:b1:3c:b1:bd:60:70:ea:5a:92:
                    89:f5:48:1a:8c:e3:bb:e7:95:17:26:03:29:3b:80:
                    1f:a9:5b:5e:ed:5d:04:f8:fc:7b:76:e4:c0:ea:cf:
                    69:57:ed:41:c4:e5:86:9d:09:92:5f:6e:80:39:20:
                    ee:88:68:2e:66:b0:15:21:ea:ea:87:95:00:07:53:
                    9e:7f:de:d3:b9:7b:ff:d0:2b:c6:b1:cb:ed:7d:ec:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:F6:3B:0E:14:FB:D1:45:60:73:F1:0C:43:C7:94:7F:F6:D9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/9e94b588-8e94-341c-a935-16a035f532b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0d:a2:66:75:6c:21:96:01:eb:4a:7e:04:e5:59:cc:5d:86:
         4f:34:71:d3:a4:f2:fa:a4:af:d9:c1:39:88:a9:e9:49:cf:8f:
         41:13:8a:18:59:41:48:99:ff:c1:3b:ef:4f:71:69:9d:51:84:
         18:57:67:b6:db:b4:77:db:e3:c8:bc:ce:41:6d:61:19:c3:f9:
         68:56:ff:b3:89:82:a9:84:7d:3b:06:9b:d2:39:7c:e9:60:4d:
         af:18:be:18:cd:0a:90:b3:c3:12:17:cc:5f:b0:f1:45:30:c4:
         a3:c6:ff:fd:36:34:ba:04:42:b5:44:f4:43:67:a0:a3:60:de:
         55:f8:89:32:dd:21:75:76:a0:5c:c7:9e:32:17:4f:94:76:8c:
         55:77:18:40:ed:f9:a8:25:b5:06:f6:e5:1a:f6:83:77:5c:77:
         a5:08:7a:1c:e2:95:ed:c8:6c:81:50:0f:54:e5:98:58:11:e9:
         54:73:7b:b6:61:f2:22:78:f6:6c:8d:d6:84:c3:bc:d3:a2:1f:
         8a:ec:e0:69:52:bd:22:c8:c9:a6:a2:d2:1c:e0:d2:c4:44:ba:
         c3:a6:6f:16:0c:4c:5d:e0:58:56:ee:a7:01:f8:b5:a5:c3:92:
         68:4d:77:85:ee:22:00:85:18:00:ab:4b:1a:66:37:91:5e:3d:
         97:85:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:07 2024 by rpki-client on console-ams.rpki-client.org