Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
File:                     4a085550-2955-396e-9f1c-930034bb2305.roa (raw, json)
Hash identifier:          a9Z3ZjU87r+97cilsPJEfTyuSk19DA8g4eKld8vOzKI=
Subject key identifier:   ED:41:4A:6E:F6:68:88:58:E4:94:75:0A:55:6F:CB:0C:4E:53:87:01
Certificate issuer:       /CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
Certificate serial:       010D0C9F43285847B3CC0AF53B8E944A5BFC6D00
Authority key identifier: D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     14183
IP address blocks:        144.167.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0a:f5:3b:8e:94:4a:5b:fc:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=0741e1bd-a0a1-4e8c-a929-8252f131a3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:5c:ef:37:ec:f7:5e:83:e0:80:24:2e:a3:
                    97:31:41:cc:04:22:f8:d4:90:41:81:e7:35:98:1f:
                    87:5d:3b:c9:73:97:e7:52:cd:60:7d:ad:a8:3e:cb:
                    ec:a0:47:b7:6c:b2:20:4d:e0:bd:2c:ec:01:c6:46:
                    0d:70:12:9f:b5:af:1e:79:3d:7e:78:b6:58:e7:cc:
                    26:48:07:48:de:ee:81:e7:08:5a:e2:cc:8a:e7:63:
                    f8:b4:65:51:fc:4d:a2:ab:57:23:ea:ed:c9:84:7e:
                    e9:fe:7e:2f:74:83:d0:4a:69:c0:5f:a1:c6:ce:30:
                    6e:43:83:47:f1:47:cc:05:be:78:62:78:d2:7c:22:
                    3a:6a:ae:a2:c4:01:d5:5b:4f:e2:a8:79:28:fd:1c:
                    10:53:9e:46:3d:b7:c7:ae:06:57:54:ea:35:bb:05:
                    95:03:69:07:02:41:03:de:c9:0e:d6:76:49:b8:d7:
                    e7:a6:9f:59:5b:27:8f:6c:55:4b:72:d6:fc:c2:f7:
                    84:52:18:1a:ce:19:9b:16:bb:27:f8:cc:5c:60:8b:
                    69:54:45:b4:0d:a5:90:dd:0c:c0:7a:8c:e5:6f:e0:
                    6f:fa:b4:ef:27:e7:89:07:74:0f:a5:2c:b2:f3:58:
                    b3:d3:9d:a5:4a:5b:2b:ff:f3:d7:74:08:8e:c4:2a:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:41:4A:6E:F6:68:88:58:E4:94:75:0A:55:6F:CB:0C:4E:53:87:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/4a085550-2955-396e-9f1c-930034bb2305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl

            X509v3 Authority Key Identifier:
                keyid:D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.167.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2c:1c:ea:f6:e7:fa:c7:90:7f:5d:59:56:6d:08:48:6c:30:
         fe:98:64:4b:85:2b:4a:98:f7:f9:a9:fd:3f:ad:3e:8e:ff:ce:
         bf:f0:99:77:bf:fc:eb:17:48:5f:8d:16:4e:37:85:fe:4e:59:
         26:b2:b2:0d:0a:b5:cd:5b:c1:55:76:39:0c:09:54:68:a9:32:
         11:0e:08:1b:37:4f:a6:02:fa:c8:7b:c7:62:1e:b2:71:3f:29:
         df:7a:ee:04:73:0b:f1:a5:ad:04:bb:cd:07:13:4c:09:17:00:
         08:9a:3e:90:9c:04:17:fd:40:22:2a:ae:08:00:fb:00:71:da:
         5d:d8:ce:f5:bf:26:03:e5:75:ad:44:7d:94:e9:40:c0:d0:3d:
         ef:ca:48:91:2e:79:ac:60:8e:4a:0a:d6:4f:9e:b0:f6:ce:ba:
         ae:5e:de:a2:96:70:f8:23:5d:de:c8:91:be:59:94:ff:f5:d6:
         74:94:c4:8b:07:92:3c:3a:4d:f9:45:04:7c:9f:f3:3f:7a:e6:
         72:97:ef:5e:33:2a:27:63:f9:69:92:4b:3c:19:9a:ce:4f:fa:
         1c:e5:99:02:dd:d1:22:4a:64:9b:e6:fc:3b:9a:dd:1d:f5:b5:
         99:10:82:33:fb:96:23:38:2b:e2:92:67:bb:b7:20:6d:1b:ea:
         c8:3a:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org