Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa
File:                     a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa (raw, json)
Hash identifier:          q6XBuj39k4e3p0wLrnKMyKpb91PYBe3FDbEt7LBYz+Q=
Subject key identifier:   C7:E9:F0:15:53:BC:12:A0:F0:BD:D2:41:D1:11:C8:88:AD:E5:ED:BD
Certificate issuer:       /CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
Certificate serial:       010D0C9F43285847C77491ECE3A253E311B8F500
Authority key identifier: D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa
Signing time:             Tue 05 Nov 2024 14:00:38 +0000
ROA not before:           Tue 05 Nov 2024 14:00:38 +0000
ROA not after:            Mon 03 Feb 2025 14:00:38 +0000
asID:                     14183
IP address blocks:        144.167.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:74:91:ec:e3:a2:53:e3:11:b8:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
        Validity
            Not Before: Nov  5 14:00:38 2024 GMT
            Not After : Feb  3 14:00:38 2025 GMT
        Subject: CN=1a5f1146-ef54-403f-9b7d-4bc64936f782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:dc:f1:71:ff:ee:d5:43:58:ef:7d:01:97:
                    cd:65:5b:cf:a7:37:3e:ea:c6:c6:45:ac:73:83:9f:
                    c1:ed:47:2c:e4:95:14:47:0b:c9:c2:4a:8b:fe:a1:
                    7f:59:eb:d7:95:1f:40:c7:ac:af:62:0a:46:a5:31:
                    3c:15:f0:8a:b8:a1:0a:48:5b:36:09:9c:98:e2:b3:
                    bb:6c:88:e8:8a:ff:00:07:cb:ee:9d:1a:af:24:ea:
                    0b:3d:7a:6f:45:72:02:89:6b:cb:29:32:d0:e2:8d:
                    b1:e3:87:b4:44:78:97:a5:a1:ad:6a:4c:de:8d:ed:
                    56:09:81:0e:0b:55:e5:dd:04:d7:7e:e0:27:45:50:
                    3f:79:ca:32:09:6d:1a:4f:f3:ab:64:e8:19:55:30:
                    12:6f:70:fa:c1:19:05:37:e1:fc:d1:46:39:55:29:
                    8a:8c:7e:ef:62:15:72:d5:69:fd:94:51:36:17:a3:
                    53:25:ec:63:70:1c:7c:47:fe:60:42:db:7f:b4:23:
                    98:bf:9f:6c:da:6d:57:a0:a8:63:2b:02:4a:c2:35:
                    24:6c:e4:be:ec:17:2b:fc:cd:cb:73:eb:e0:26:95:
                    bb:22:f3:48:fc:14:44:5e:9a:b4:00:af:36:e2:51:
                    07:2e:65:84:1b:8e:b8:ec:9f:30:80:02:26:e2:20:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:F0:15:53:BC:12:A0:F0:BD:D2:41:D1:11:C8:88:AD:E5:ED:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl

            X509v3 Authority Key Identifier:
                keyid:D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.167.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:af:79:ec:f5:9e:8d:f8:49:23:74:42:45:6c:7f:1f:0b:
         a8:e5:a9:3f:28:0d:55:8e:c1:2b:13:e0:69:3c:eb:55:91:ba:
         36:a3:9e:70:c1:03:48:58:a2:ba:57:d8:da:b4:f2:1a:0b:f6:
         1b:78:4e:ae:0e:44:86:41:a1:9b:ff:8f:b5:83:78:f4:40:ed:
         37:03:65:50:39:a2:60:fc:44:43:bf:ac:31:d7:c7:55:ad:b9:
         80:2c:2f:08:46:ae:7b:ab:14:d6:e3:b3:7c:4d:f9:51:15:8f:
         16:4d:6d:90:b1:8f:45:9d:48:31:ce:aa:22:cb:0a:7a:57:38:
         fd:41:28:09:8c:2b:cf:60:9a:bb:6d:73:74:7d:cf:87:2a:6c:
         fc:40:14:48:e9:bd:cc:8e:3b:0a:af:7d:65:21:92:1e:8f:ab:
         ec:31:8c:38:28:71:78:0f:4a:a0:79:15:95:54:e9:22:09:a0:
         b1:ca:ba:0e:84:4f:de:ef:09:ba:70:f6:d1:28:16:85:7a:bb:
         8d:26:3e:9f:83:78:72:fe:2b:32:a2:b9:30:fb:48:50:ec:e5:
         d6:e3:b1:01:b1:12:e0:c2:8b:e3:b8:23:95:6f:0b:6a:0d:95:
         02:45:e2:ee:8b:29:52:03:ac:35:72:b8:2d:d5:a7:b8:02:31:
         6e:c0:2b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:12 2024 by rpki-client on console-fra.rpki-client.org