Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
File:                     cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json)
Hash identifier:          x9w/9xgIHaMxqmB40vu0wQ9aqcC2NpoX3n59HhVCIQM=
Subject key identifier:   2B:BC:D4:A2:B7:99:B4:DB:93:25:51:E7:31:85:F0:04:61:D0:00:C5
Certificate issuer:       /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial:       010D0C9F432858472C65D6919E769BA33A1F8C80
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     14630
IP address blocks:        142.148.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d6:91:9e:76:9b:a3:3a:1f:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=9bd3efda-b009-4929-9589-cc9727a6993f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:be:a3:b7:32:e9:48:4f:19:e4:30:4f:c7:
                    b5:44:0c:fc:77:01:47:08:c3:91:7a:f2:71:59:8c:
                    5e:95:35:6d:a4:8e:49:94:6e:2a:b9:1e:4f:ee:17:
                    e2:ad:7b:e0:f7:fc:57:86:44:93:7b:9d:01:8c:c7:
                    1a:c3:56:9b:e1:62:3f:c8:46:4a:19:e6:43:9f:cd:
                    b2:1d:cc:e8:5d:03:25:ab:a6:6a:b9:03:e3:8c:59:
                    7a:c7:01:34:98:72:b8:39:1e:3c:ea:ad:a8:27:75:
                    1b:48:fa:69:46:49:65:bb:d9:67:76:17:0d:4b:b3:
                    dd:7d:29:bd:f4:90:e3:d9:dd:6a:dd:62:30:4d:97:
                    0c:18:86:d4:9f:c8:c9:68:43:ed:58:9e:81:d3:85:
                    a0:55:c5:c5:da:76:77:b2:e3:c4:91:b5:5a:52:ef:
                    49:47:b3:05:6d:32:d1:f9:c9:95:04:24:48:0e:ae:
                    3f:60:b9:2c:69:d2:19:77:6a:14:e3:97:c0:a5:30:
                    ca:8b:cc:44:1d:f6:95:7b:33:8d:9d:1c:dc:b2:92:
                    ea:8b:06:54:62:d0:93:55:f1:2c:2e:fb:ad:50:6d:
                    07:34:27:c5:0f:00:e7:19:65:d5:77:81:ac:50:88:
                    f4:54:cc:f2:20:cb:15:ea:05:b5:04:fa:e0:79:86:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BC:D4:A2:B7:99:B4:DB:93:25:51:E7:31:85:F0:04:61:D0:00:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl

            X509v3 Authority Key Identifier:
                keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:50:da:fe:d8:0f:cd:50:1b:80:6f:16:5d:d1:c9:f4:ca:
         c4:c3:d2:a7:b5:b1:e7:40:23:01:94:b3:9e:de:e4:89:77:e0:
         c8:0b:89:f7:00:a9:fe:cc:66:8f:48:b4:30:4c:b3:9e:52:76:
         4b:54:7c:76:14:d3:a5:e9:70:34:3c:77:06:a1:18:a0:23:70:
         a1:a2:3f:38:9d:32:cd:65:56:42:39:ac:ea:ac:0e:af:1b:84:
         88:e4:48:d4:42:75:c0:49:75:7f:70:08:67:d3:e9:5c:db:b5:
         d2:0d:dc:0b:cc:79:ab:f6:9d:fa:8f:cc:39:37:e1:2f:96:dd:
         8a:e9:f1:a6:92:af:7c:c7:e8:a9:a7:3f:8a:35:1f:a2:53:83:
         e3:a2:75:5b:60:f2:5e:f2:6b:fb:ef:d9:52:43:35:cf:df:51:
         6b:ea:55:6e:c0:48:e7:13:ce:a2:3f:7e:0e:71:44:bc:20:be:
         39:91:8a:6e:ee:77:42:05:ae:dc:de:92:d7:51:10:aa:ae:af:
         ee:3c:a3:5d:95:00:96:93:4f:f8:cd:53:b1:51:ab:6d:ff:e1:
         00:74:51:c9:90:19:5e:3b:4f:c8:1e:64:47:aa:b7:1e:aa:e5:
         ec:4c:50:ab:4e:ee:ca:63:13:5e:83:bf:f3:55:47:dd:cc:06:
         6e:a3:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:48 2024 by rpki-client on console-ams.rpki-client.org