Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa
File:                     120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa (raw, json)
Hash identifier:          xHeTm8NocOjOpbtCiKaGpdYSAd96ERcpzp2Jnh59J1g=
Subject key identifier:   0D:CE:04:F3:BC:C6:E4:1A:E5:13:28:81:15:A6:31:DE:EB:5C:EB:A6
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285847A5D6A6A36351BEE50C947500
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa
Signing time:             Thu 24 Oct 2024 13:00:42 +0000
ROA not before:           Thu 24 Oct 2024 13:00:42 +0000
ROA not after:            Wed 22 Jan 2025 14:00:42 +0000
asID:                     55195
IP address blocks:        149.112.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a5:d6:a6:a3:63:51:be:e5:0c:94:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Oct 24 13:00:42 2024 GMT
            Not After : Jan 22 14:00:42 2025 GMT
        Subject: CN=d1af87b0-b42a-4515-8674-1cab94c670f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:44:58:2d:d8:a3:a5:f8:4a:18:e6:88:1a:
                    30:9a:66:17:cb:16:ca:08:9a:a2:53:91:ac:da:e8:
                    28:3c:c5:f9:1a:7b:37:59:d5:b2:8f:64:a3:50:26:
                    ee:18:09:91:f2:cf:2d:cf:d2:0f:82:1f:83:17:6b:
                    dc:43:4d:58:a7:7e:5c:0b:25:28:a9:7a:d4:c2:18:
                    5f:7d:bf:b9:de:29:0f:34:7d:7b:1a:fe:6e:37:38:
                    10:ea:42:5d:49:2c:0b:27:51:f8:c4:2c:04:aa:e1:
                    59:e8:79:71:f6:69:8e:df:85:fd:2c:48:24:03:86:
                    c8:62:1e:45:32:4a:20:cb:5b:c9:b6:6a:96:19:4b:
                    5b:d7:c3:f1:c0:06:ff:ec:70:9a:9d:fc:80:c5:9a:
                    b5:ae:7c:3a:ed:f4:ec:31:6c:30:0b:d9:c9:3c:00:
                    63:05:2c:40:00:4c:70:db:d8:fe:87:56:e4:9f:19:
                    6b:a6:fe:96:df:05:4a:f4:2b:9d:37:c5:95:7b:5c:
                    35:1c:6f:ee:e5:a8:b1:4f:9b:60:43:ba:bc:7d:8e:
                    fe:57:3c:82:05:c3:08:9a:35:be:00:98:7c:7b:e5:
                    ab:9a:a7:04:ac:e3:4d:7f:db:a5:c1:a2:1a:57:f7:
                    8f:71:e9:a5:6c:32:13:55:69:ec:a2:70:8e:e1:23:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:04:F3:BC:C6:E4:1A:E5:13:28:81:15:A6:31:DE:EB:5C:EB:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:96:cd:b1:62:7c:99:38:27:db:db:a7:99:45:33:ed:d5:4a:
         78:07:ee:20:c9:02:38:48:0f:8d:7d:1d:39:bd:33:af:05:7f:
         5a:e0:7e:29:2a:ad:dd:c5:b4:c9:88:59:f0:77:cf:c5:7e:0f:
         0b:40:78:7b:4f:3c:3d:e5:a3:e8:e9:e0:32:1d:35:5b:85:0c:
         41:ab:07:d3:d2:cd:e7:d1:4f:46:4c:46:c1:ce:c2:78:93:ee:
         34:d9:35:c9:fc:f5:be:cf:e2:b6:57:f8:97:32:0d:c2:1b:d6:
         b3:aa:fe:6d:75:d4:64:c1:31:fd:a5:53:13:0b:5d:e0:8f:c8:
         97:ef:51:5b:57:2e:51:a2:3c:1d:5c:f6:77:41:f3:58:af:0b:
         3d:ae:52:33:e9:08:d7:86:e0:ed:4a:79:b5:8f:5e:7d:d1:f9:
         f5:a3:17:39:a8:74:70:8f:15:d2:ff:2e:ce:4a:ea:d9:c3:a3:
         03:e9:06:f2:be:a3:90:24:a3:4b:78:bb:b7:7e:3f:cc:d4:c9:
         91:5a:5c:87:6b:92:6a:62:ea:4b:ac:26:ce:14:67:6d:b3:8f:
         20:00:1b:8c:af:97:d5:be:10:5f:d3:0d:56:f8:4c:84:9a:e3:
         bb:28:de:21:32:fd:e3:33:a2:eb:19:82:dc:b9:95:be:c3:24:
         b6:05:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:35 2024 by rpki-client on console-ams.rpki-client.org