Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa
File:                     5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json)
Hash identifier:          8cD5rn+46H4DNXWHyW6KGE/IxWwAL5kJbKL1xyErJ+g=
Subject key identifier:   BD:C3:D6:A1:7C:8D:35:B3:B4:DF:EB:8E:42:86:14:B1:E8:7C:E7:0D
Certificate issuer:       /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial:       010D0C9F432858478456734DADF1D581628F5680
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     21766
IP address blocks:        152.97.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:73:4d:ad:f1:d5:81:62:8f:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=20b4c81e-e256-4dba-a2d3-738fa93349fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:5e:b7:26:f8:ef:03:a3:8b:1b:90:39:50:
                    d0:4a:42:32:d5:88:85:f6:09:e1:ed:19:90:bf:a8:
                    f0:e6:e9:b4:66:60:7f:cd:0b:a3:be:7d:4e:4a:38:
                    9c:d4:bf:4a:43:d3:9a:f4:1b:ff:c3:4d:06:86:6a:
                    7a:f8:a1:39:5e:92:e0:11:a1:41:1a:0b:e4:72:5c:
                    99:94:c8:98:d8:92:0a:66:3d:85:96:a1:7a:11:f0:
                    41:e2:98:93:bd:41:e2:36:4e:29:90:4b:22:54:e9:
                    91:a0:d9:e5:01:d0:53:57:91:2a:9c:70:4d:6a:e0:
                    fa:7c:b8:7c:e7:cb:61:fa:37:5a:f0:b8:05:64:e4:
                    ce:21:09:01:e5:33:d1:91:e0:10:3f:5a:f6:ac:58:
                    bf:1b:0e:64:b6:94:6c:9d:32:2d:ab:3b:2c:38:51:
                    70:ab:bf:83:b7:af:1b:3b:d8:d6:07:8c:26:5f:7c:
                    8f:8e:c4:50:cd:f8:c2:93:70:8c:ca:4b:d2:02:ba:
                    4d:5e:26:94:9d:7c:56:71:b4:ee:d3:2e:7e:5e:95:
                    ca:ac:48:ef:80:b5:e5:20:4b:4d:21:6d:65:87:f0:
                    86:53:32:96:53:1e:cf:e9:13:61:84:e5:07:97:50:
                    4a:ae:a6:b5:f7:e9:c5:07:83:d3:3a:9b:b7:8e:44:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C3:D6:A1:7C:8D:35:B3:B4:DF:EB:8E:42:86:14:B1:E8:7C:E7:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.97.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:da:8a:47:bc:0c:f9:79:02:39:73:fb:1f:72:4c:e6:1f:
         f9:fd:6a:a0:40:b0:24:02:12:ae:92:a7:3b:05:52:9d:62:04:
         da:69:b0:9b:43:d2:e9:0f:ce:84:af:6e:70:3b:db:60:fe:be:
         1b:12:16:ae:7f:f4:bf:8d:60:db:72:34:21:a3:e9:a0:e8:6f:
         24:56:4c:89:4d:e4:67:0c:d5:b3:8a:6d:9b:36:71:17:e1:9e:
         7e:82:56:1c:77:10:f9:8a:9e:51:15:fb:41:8f:88:fc:26:22:
         42:d2:dd:e5:9b:47:41:2c:a1:1d:e6:e1:07:3a:a3:fc:49:87:
         04:8a:78:8d:eb:dd:bc:f7:34:a3:59:c4:25:0a:bb:37:14:2e:
         e9:bf:aa:db:c0:0d:f4:8d:71:12:e9:5f:f2:61:0d:8f:2d:4d:
         8b:27:61:2c:74:2f:c8:3b:9b:08:7d:0f:6c:50:b3:2e:8e:85:
         e4:2a:66:8e:b1:14:85:2e:40:8d:83:77:8f:5b:d1:14:69:72:
         45:02:4b:f2:f1:6a:30:4d:4e:ac:c1:dc:50:eb:c9:31:e4:f6:
         74:0b:62:77:1e:45:de:f1:c2:4f:e8:02:55:71:6d:b0:46:be:
         ac:4d:49:60:c3:a1:b6:e6:19:61:34:ff:a0:21:ce:98:2d:a2:
         28:7f:22:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:19 2024 by rpki-client on console-ams.rpki-client.org