Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ccf3043e-7961-3c52-81a3-cbdb1c9975dd.roa
File:                     ccf3043e-7961-3c52-81a3-cbdb1c9975dd.roa (raw, json)
Hash identifier:          A/aEugvGfmm/kJZJk3yZ3a4EySM9gh9bX8SdFtOHaXQ=
Subject key identifier:   4E:96:9D:3C:A9:3B:85:74:8C:68:D0:1C:D2:DF:D1:40:70:63:41:42
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F432858472C65D380184AB4473042E280
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ccf3043e-7961-3c52-81a3-cbdb1c9975dd.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     3807
IP address blocks:        207.196.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d3:80:18:4a:b4:47:30:42:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=c82593c8-ba38-4f20-ba43-c740229b1c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3c:55:49:d1:3d:a8:6a:97:47:75:d0:e7:91:
                    73:7f:89:7a:b9:5c:91:2e:a0:97:65:e4:c4:44:11:
                    b1:e6:3d:a1:1f:7a:c8:dd:7b:cf:09:69:30:e4:3f:
                    c6:c8:60:f7:d3:71:80:c1:c5:87:2a:0b:7c:1b:6d:
                    77:78:10:dd:52:a7:b9:da:fa:8b:10:f0:b1:6e:47:
                    b2:f1:94:0f:e9:16:20:b0:d9:6d:05:12:16:e0:51:
                    04:57:9b:ff:86:32:58:ae:64:fd:ee:c6:25:e8:f1:
                    4e:15:06:36:f0:03:70:d6:08:6f:44:8d:78:d9:64:
                    65:07:e5:13:d9:16:f5:58:a0:8c:85:ce:7e:8a:05:
                    11:78:cb:82:b5:49:fb:d7:d7:b4:11:30:db:d4:75:
                    f5:b6:55:94:34:1c:5b:67:bb:99:4d:e0:e3:c5:48:
                    53:74:ee:bb:b3:ea:fd:72:99:80:b0:69:60:3e:31:
                    1f:39:16:66:0f:a3:4d:89:0f:12:f4:1c:34:54:d1:
                    b8:6f:87:e9:da:00:73:48:00:65:74:ff:c9:ca:6f:
                    be:0e:0e:5e:94:5c:9e:fb:d0:71:cc:5f:b4:44:ce:
                    a4:74:48:52:bd:71:db:5d:3b:b2:ca:e0:df:7b:25:
                    6a:74:36:d6:ec:b4:13:8b:f3:5b:78:a6:ac:7f:b5:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:9D:3C:A9:3B:85:74:8C:68:D0:1C:D2:DF:D1:40:70:63:41:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/ccf3043e-7961-3c52-81a3-cbdb1c9975dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:42:f4:4a:a8:dd:d8:66:7f:57:b9:de:8b:73:ac:93:c9:60:
         73:df:d5:7f:f4:62:b7:f8:d5:1e:d1:6a:10:eb:b4:8b:e3:de:
         80:92:15:18:87:de:5a:88:86:70:ec:63:38:a7:81:4e:c9:cb:
         31:55:9e:32:b8:eb:2d:af:fe:b6:5a:88:ac:0e:f8:8a:f1:d7:
         73:35:14:a3:19:f0:fc:5e:7b:2a:03:9d:28:84:c6:46:cb:ed:
         00:0c:3f:87:ff:d6:99:1e:c6:8b:7f:21:43:4f:61:1d:a3:69:
         09:9a:9e:fe:3b:6c:db:6e:a9:20:e0:4e:2f:02:29:98:03:36:
         26:5e:1c:45:cf:b4:62:6e:60:8a:73:2b:5f:d8:f3:2c:a9:cd:
         b5:a8:17:a1:80:a2:ed:0f:3f:a7:b9:7f:74:8a:9c:1c:02:f5:
         04:fa:75:bb:61:1b:d9:9e:eb:90:56:12:f1:d2:99:ec:9e:c0:
         f3:ad:84:23:52:5e:ca:c6:35:27:6d:9e:8f:83:c3:6e:6c:94:
         63:23:24:7c:5d:54:d7:e5:41:ca:1c:3a:41:f7:f6:42:c6:d3:
         44:9c:6f:dc:da:01:87:02:a1:ca:e3:86:cf:54:e4:ef:91:03:
         cf:79:7a:1a:62:77:c5:8d:e3:7b:c9:06:2f:56:0e:92:23:b8:
         37:c6:4e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org