Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
File:                     eac293e3-1805-34d4-a60a-cdd9145a0f52.roa (raw, json)
Hash identifier:          rwJzIbFx7+4k7ILDWOYEW6kijd07OG/U9kwAcNdItnU=
Subject key identifier:   B4:60:77:91:E5:45:95:6A:EE:3A:73:23:B2:17:A2:AB:60:82:56:4C
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F43285847D6CF4A95A7BE854A2400F880
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     13445
IP address blocks:        144.196.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:4a:95:a7:be:85:4a:24:00:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=d6c10332-c0c8-4529-b541-3547009fcd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:5a:b2:b7:7d:bf:da:85:95:ca:c9:fb:81:
                    34:2a:cd:e4:cf:29:2c:71:13:fd:61:22:f7:4b:5e:
                    10:30:60:a4:64:4b:ae:c7:99:99:56:5f:63:31:32:
                    51:dd:9b:f5:21:97:11:fd:7a:da:1b:24:fe:5c:c1:
                    08:86:18:74:d6:5c:ee:ab:3a:00:ce:39:7d:c5:54:
                    14:8f:a8:7b:dd:ce:23:9b:0f:cc:c8:d4:50:60:7d:
                    89:3d:23:5a:26:76:17:9c:5d:0d:7c:fc:65:09:0e:
                    62:12:1f:58:2e:1b:4a:b9:0f:f6:22:cd:4d:d0:73:
                    5a:fd:fa:9c:36:90:45:49:51:b7:a1:15:f3:24:92:
                    bf:1c:17:7c:75:37:ae:7d:ba:e5:06:83:1c:a6:a2:
                    6b:04:05:a8:bc:94:a5:53:7a:d8:2a:5e:9f:ff:f2:
                    7e:5e:3b:73:8f:45:88:99:0e:12:f3:06:3a:21:d2:
                    c6:73:81:4c:44:d0:0e:ad:76:b1:f5:be:04:5d:ec:
                    ec:8e:f8:f0:97:0c:75:14:81:08:16:56:b1:60:98:
                    f6:92:33:a9:53:80:f1:52:42:43:5b:95:58:19:c2:
                    2f:eb:14:72:d3:73:c0:30:c8:07:c6:95:00:f0:59:
                    9f:ed:c2:57:4e:52:aa:91:46:b6:7a:51:54:a7:93:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:77:91:E5:45:95:6A:EE:3A:73:23:B2:17:A2:AB:60:82:56:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eac293e3-1805-34d4-a60a-cdd9145a0f52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.196.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f4:ef:ce:3b:fe:cc:e0:c2:23:fb:3f:28:ca:c0:a0:c1:04:
         38:58:32:4b:2c:ac:ed:18:dd:58:53:06:19:ce:58:d1:bb:8b:
         ba:9b:8d:9a:f9:0a:8b:3c:28:98:0b:ab:88:b3:06:b2:24:09:
         dd:96:29:8b:5b:1a:d0:72:84:fd:29:a6:72:04:89:cb:7e:0d:
         0b:7f:a1:8d:4f:18:17:03:e2:48:7c:fa:64:c2:df:b3:e4:34:
         99:4f:f6:7a:40:01:de:e9:77:5d:9d:e5:31:8c:57:cc:f9:f3:
         04:d1:4d:13:8a:11:1a:21:60:84:34:d1:70:99:f5:a1:4b:fc:
         af:be:29:9e:b3:56:66:46:c6:50:ad:af:98:ee:9d:11:cf:58:
         db:bd:c6:70:31:ca:cb:a3:1c:bc:d2:8a:a6:42:ea:7b:be:d2:
         f2:3d:1a:af:62:15:30:3c:af:0b:e9:1f:d8:74:76:34:12:b7:
         0c:41:7e:1e:d4:dd:60:21:9d:8a:4d:c0:f4:07:2a:f0:ae:50:
         ed:0b:b8:8f:2a:60:49:fa:d5:f1:1e:01:57:49:96:b7:0e:42:
         2d:3e:9c:9b:c9:25:2c:e3:27:65:e8:8a:56:3b:11:5f:0a:0f:
         c0:00:ce:d0:48:91:ef:76:b9:ba:08:8f:d0:40:4a:0b:17:09:
         70:a8:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:33 2024 by rpki-client on console-fra.rpki-client.org