Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
File:                     64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa (raw, json)
Hash identifier:          yE2VYocT2kuoyV4cKffZwNKEh+PEbnpzac89CdEI/8c=
Subject key identifier:   F7:16:84:13:A7:5B:25:F4:E2:F2:7D:A4:72:F6:18:FD:80:27:CC:B9
Certificate issuer:       /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial:       010D0C9F43285847C8D9EB2A3EB0702702716E00
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     394195
IP address blocks:        199.7.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:eb:2a:3e:b0:70:27:02:71:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=67eb4b8f-84d3-4d6d-b445-e90879e85d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:15:fa:47:04:a6:90:47:37:57:97:f3:a8:
                    c2:bc:82:bf:03:97:6c:e7:f9:be:d8:f1:d4:bd:d0:
                    4c:f9:a1:97:14:d3:f5:3b:45:88:22:96:6b:6c:34:
                    81:40:09:c8:32:81:cd:08:93:7b:bd:2f:8b:95:a5:
                    5d:db:2c:13:3a:c0:3c:97:45:02:96:4c:e3:bf:58:
                    10:30:64:b1:6f:3a:fa:92:c9:77:ed:0c:b2:a1:49:
                    a1:1c:2c:fe:db:86:46:a0:d7:4a:81:36:53:fd:36:
                    c6:c3:05:76:e1:66:cc:1a:b8:0d:1f:cc:6f:cd:f5:
                    9b:fc:ca:63:4e:00:3f:9c:ed:dd:a8:93:d9:75:d4:
                    0d:13:12:60:4a:10:c1:c8:e1:bf:ca:c8:1c:0b:a1:
                    24:64:eb:55:56:93:28:24:14:71:7c:1d:b7:f1:d0:
                    b3:b6:ec:ce:bf:0b:c8:43:c2:27:4e:7a:01:ea:6a:
                    79:e9:b2:f5:5a:73:ed:e7:10:f1:9d:9c:1c:ff:d2:
                    4b:10:7a:1f:fa:33:38:bf:09:69:20:1c:db:53:cf:
                    83:85:f8:d8:88:7a:1e:89:60:77:f7:3b:eb:3f:38:
                    bf:30:20:a7:fb:43:ba:72:65:6a:7f:f9:b2:1c:7d:
                    f0:90:da:84:bb:11:37:24:09:00:5a:b6:a0:dd:0b:
                    50:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:16:84:13:A7:5B:25:F4:E2:F2:7D:A4:72:F6:18:FD:80:27:CC:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/64f3098c-23dd-31ce-9f0a-58e73a3f35a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl

            X509v3 Authority Key Identifier:
                keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:37:14:cd:95:46:ac:54:b6:ca:30:1f:41:50:c8:ea:48:41:
         91:03:c5:ed:e7:19:a0:ce:bf:76:ab:58:a0:50:f1:5a:0f:59:
         e9:5a:48:4c:1a:13:ea:83:4e:a4:51:5e:30:3c:16:37:ec:27:
         4b:74:fd:a8:44:a6:13:16:e7:52:60:b4:28:a3:f0:7c:71:87:
         71:42:b6:b2:8f:e7:59:e2:ad:f3:c8:6e:9a:e2:8c:2e:29:04:
         58:07:1b:0b:87:0d:a5:5c:6b:5f:75:2d:92:dc:80:b1:85:77:
         f2:05:29:d3:0b:04:88:5a:98:5a:76:06:1b:83:53:99:dd:29:
         59:49:4b:2e:b6:45:1c:64:d7:04:41:77:7c:ba:24:b1:bb:77:
         46:a9:02:b1:7a:9e:f5:53:62:a1:61:a5:87:2d:62:49:61:23:
         c8:36:6b:de:49:92:8f:66:4e:a5:38:61:f9:1d:3a:2f:10:a6:
         e9:8c:97:2a:a2:4a:c3:27:a1:ad:52:dd:0e:53:f7:41:8f:e1:
         d9:74:3b:ad:a6:4a:dc:58:3b:25:82:39:45:6d:1a:8a:41:a9:
         d8:99:3a:6b:b7:83:df:67:73:a6:ee:12:da:74:b3:e4:92:62:
         14:1c:2c:48:2b:bc:2b:95:6c:49:38:82:38:9d:4b:d3:59:24:
         b3:51:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:09:51 2024 by rpki-client on console-fra.rpki-client.org