Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa
File:                     811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa (raw, json)
Hash identifier:          1kZr60URFWBC2qznOvXHgoZgbTKtQ9JapQj9/G0tK00=
Subject key identifier:   7D:CC:9C:49:95:41:15:F4:F2:B7:70:B0:8B:21:09:80:92:1E:93:3B
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F43285847E094C2FF70366E2823DA7A40
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     40703
IP address blocks:        157.166.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c2:ff:70:36:6e:28:23:da:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=cca93765-e950-48fb-8449-4d7b8821c369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:3c:b1:86:9b:09:0b:a1:49:0f:ce:3e:0b:
                    c3:7d:52:a1:e0:54:71:0e:4d:ec:ac:d8:01:40:6c:
                    10:fc:4c:b2:52:b8:89:46:bc:31:b9:d3:07:1a:a1:
                    35:85:d5:85:b3:fe:5e:92:0c:50:8a:6b:49:de:f8:
                    c7:e2:11:40:5f:d9:53:0a:c8:2e:23:bc:c6:58:a9:
                    da:35:a7:cf:1f:3a:59:44:ae:1b:aa:e0:4f:77:77:
                    3e:b5:ce:5b:0b:4a:92:44:b6:ce:5b:ef:34:95:8e:
                    47:91:f4:fb:a1:00:06:2d:2b:45:33:71:39:98:ec:
                    b3:ab:59:c6:99:b6:23:18:14:6a:e6:de:c9:76:6b:
                    36:2d:31:02:9c:85:6c:49:c2:58:53:a6:8d:f3:0e:
                    1a:9a:e8:86:25:c6:1e:16:17:7e:93:d4:05:f8:ee:
                    2f:5b:0d:ec:8a:f4:37:ed:78:0a:e2:63:2d:6a:05:
                    8f:31:56:65:8e:d1:18:e8:58:77:dd:42:33:f6:62:
                    32:35:c2:fb:54:e0:9b:58:e8:a7:c1:52:40:6d:da:
                    3f:16:9d:7c:2e:4b:cd:1f:a6:f8:99:c7:ec:53:0b:
                    b6:60:6c:aa:ed:9b:0e:09:db:97:2a:fb:8c:28:92:
                    5a:d6:a0:02:11:6a:6f:bd:02:ad:d7:e0:90:70:f5:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CC:9C:49:95:41:15:F4:F2:B7:70:B0:8B:21:09:80:92:1E:93:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/811e6a5b-ffd7-3a3d-a58e-ff280d1efcdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:78:9f:ba:60:14:b7:09:18:6c:04:10:55:22:98:d9:f2:75:
         2f:19:16:7f:b3:37:37:0d:b1:ed:01:fd:c2:1e:70:39:fe:b1:
         9a:cb:0b:00:f5:b5:99:84:4c:d6:41:c6:d7:1d:05:19:33:18:
         7e:98:ef:1f:d1:01:ee:7c:db:b6:a1:a9:44:5a:ff:6c:1c:2b:
         05:fb:63:55:d7:2c:49:b2:77:17:be:e3:9a:52:bb:40:f5:4d:
         9f:3a:77:dd:45:c7:c1:49:de:d1:88:d5:8b:cd:42:1e:9b:f1:
         40:ea:ae:84:85:7f:c6:e7:00:1d:39:da:92:74:e0:55:20:0f:
         3a:3d:70:ca:89:24:fb:9e:f4:a9:79:e3:72:12:3d:0f:32:9b:
         48:73:9a:c7:88:30:49:d2:d7:4e:3d:f5:55:b4:86:5e:08:74:
         55:fe:93:aa:9a:38:ba:53:12:ad:56:dc:cb:ea:f5:72:e4:b9:
         41:ff:cd:29:3a:11:91:0b:0d:4c:2b:f4:6e:0e:52:d5:c8:1f:
         03:92:2c:9b:2d:bc:6c:86:cb:6f:75:4c:a8:96:0f:07:34:6e:
         2b:8b:83:09:10:1c:f2:f3:55:bc:66:75:84:08:e1:57:b6:5f:
         6d:02:89:b5:eb:98:6a:ad:24:ba:59:5e:ff:41:b0:34:bc:d5:
         1e:ab:99:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:15:35 2024 by rpki-client on console-fra.rpki-client.org