Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa
File:                     6d329d86-ae5c-3e97-b60e-380b387c9d19.roa (raw, json)
Hash identifier:          FJUtD2Tt8W09Avd247YpTTAtA9XHYyJncRwvcMSrjWM=
Subject key identifier:   BE:1A:C1:6F:1C:7F:AE:D7:0F:76:98:AD:72:8B:60:12:35:41:DE:1A
Certificate issuer:       /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Certificate serial:       010D0C9F43285847ED24C6E2EF988EA972B96EA0
Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     398203
IP address blocks:        146.86.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c6:e2:ef:98:8e:a9:72:b9:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=08aca0ea-585a-4057-8a5a-e1c3ab24614a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:92:7a:e9:1d:36:d7:98:d5:77:88:27:91:
                    e0:f3:6d:48:d2:47:d7:91:20:66:8f:28:d5:18:4b:
                    d3:08:66:6c:2e:8f:78:f7:0e:c0:b2:2a:aa:a9:fe:
                    fa:f1:5e:2c:fe:9b:bb:c0:6f:b0:ce:0d:ac:fc:83:
                    36:de:2c:64:24:02:0c:b7:12:76:c5:31:72:b7:4c:
                    b7:50:c9:9d:70:0e:f3:e4:b2:ed:de:d2:c4:90:66:
                    77:24:84:93:26:fe:27:8f:cf:a9:b0:fd:78:56:ee:
                    b5:e1:91:4a:b4:d6:e3:e8:89:61:bc:5f:02:c7:ab:
                    3a:2f:43:4e:ba:17:0d:8e:9b:d4:a2:47:ac:57:e2:
                    2a:f1:2e:60:34:8d:47:5d:e0:8d:d7:b4:fd:ca:54:
                    62:99:36:10:06:4e:7d:9c:ac:4d:1c:e3:49:ca:f0:
                    d3:31:ec:25:0d:6e:6e:cb:a3:d0:c7:0d:50:6f:56:
                    71:e2:ed:64:50:12:df:37:e9:68:3b:b2:df:31:4e:
                    8f:a1:e1:02:e7:e8:f8:e0:3c:b9:a0:b6:d8:ee:2b:
                    29:83:be:3c:e8:66:c4:4e:e5:ae:16:b2:e7:8f:04:
                    1b:d4:54:26:54:75:ef:6c:b5:4d:02:e1:45:ce:da:
                    f6:c6:ec:e0:48:e9:fd:af:bb:c0:5b:c8:61:84:25:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:C1:6F:1C:7F:AE:D7:0F:76:98:AD:72:8B:60:12:35:41:DE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/6d329d86-ae5c-3e97-b60e-380b387c9d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.86.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:33:fe:4a:b0:e2:2d:a2:dd:a1:52:92:d2:cb:40:5d:1c:
         e9:81:63:4a:ee:ef:9d:65:5c:81:ae:93:cc:9b:2e:d9:8c:d7:
         01:27:29:52:71:01:aa:cb:54:82:03:ed:1e:7e:93:47:1a:ff:
         a9:a0:f6:ef:b3:5f:fe:6b:b2:18:2a:b7:b0:95:f2:52:f2:5c:
         ca:e1:22:82:8b:58:8f:35:0c:fc:2e:f9:7c:c9:bf:22:ab:f1:
         23:9a:62:4d:67:8c:dc:f7:d0:00:a7:0f:ba:22:f3:57:9e:82:
         8a:27:3c:78:e8:c2:75:b1:28:ad:d2:02:f7:a9:df:5d:10:61:
         1e:72:c2:9b:5f:c6:40:cb:72:1d:01:9b:d2:39:f4:49:28:57:
         1f:35:3d:eb:47:e5:b8:3d:b4:49:ac:d5:8e:ff:0c:a4:ad:1a:
         4e:d9:0d:fc:70:b5:d0:61:36:da:80:58:49:ab:a6:fd:3a:1b:
         fe:c4:21:f8:d4:50:d4:27:e5:5a:47:0d:a9:31:dd:0b:3e:39:
         01:33:6d:24:b9:91:9f:b8:44:41:d7:1f:4f:39:76:47:a9:2b:
         b1:52:16:86:f9:be:df:5e:b4:e2:14:2f:75:48:7d:4f:0d:f1:
         a7:51:de:74:63:cb:38:eb:70:65:43:e1:50:e8:5d:be:b1:99:
         e5:d2:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:48 2024 by rpki-client on console-ams.rpki-client.org