Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa
File:                     28cc181f-7bbe-3348-96d4-658069e7572a.roa (raw, json)
Hash identifier:          X6KWo8jMaIe/JAs+2b+gPLavg7/XlcdnZuXehmnu2Gw=
Subject key identifier:   33:1C:53:41:87:0A:4B:6E:3D:92:D5:CC:6D:B3:06:05:38:40:CE:A7
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F43285847A73BDBBF5FA5E920C230A000
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     46450
IP address blocks:        142.154.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:db:bf:5f:a5:e9:20:c2:30:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=22029e4f-fecb-4216-b1b3-b078b5044ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:e7:d8:40:a8:c3:c2:5a:41:a7:94:ce:aa:
                    db:fa:db:a8:94:c4:c1:14:f9:42:0b:67:54:e6:b5:
                    6d:c6:54:e9:46:b0:00:03:71:3b:0b:d6:60:e8:99:
                    5a:94:0d:cb:80:72:e2:98:7c:13:a3:09:2a:55:86:
                    1e:e6:b5:a1:28:3a:c9:84:e3:00:be:ee:23:be:18:
                    b1:15:3a:6e:da:2e:0b:b7:d3:39:37:56:eb:ab:26:
                    5c:35:2b:28:d3:02:26:4c:a9:f2:4d:24:f9:83:5e:
                    c8:b4:20:0f:55:14:f1:7c:fe:2a:0a:6e:30:ed:c6:
                    7f:8b:e7:2f:45:96:80:a5:4c:79:ee:00:d3:6a:8f:
                    b5:6c:92:5d:ce:b3:78:1d:d9:c6:ad:00:e8:c5:e5:
                    c0:e4:85:74:88:c6:04:35:2c:56:90:68:07:fd:07:
                    b7:29:04:f4:85:38:f8:63:2c:42:54:f9:47:30:49:
                    4c:62:5d:0b:f7:98:45:e4:8c:18:db:ed:29:ea:75:
                    c4:be:23:32:00:d9:e5:5b:37:79:b8:7a:2d:c8:c1:
                    93:8d:e2:64:c3:16:8b:fc:85:65:9b:bb:b0:28:6b:
                    3d:06:a8:73:97:04:2c:69:31:ea:cc:19:b5:65:42:
                    86:87:8f:f6:f2:2f:b3:8f:39:d5:b3:5a:d8:54:fc:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:53:41:87:0A:4B:6E:3D:92:D5:CC:6D:B3:06:05:38:40:CE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/28cc181f-7bbe-3348-96d4-658069e7572a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.154.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:fb:17:45:58:f8:22:41:0d:b1:50:36:30:61:45:d9:bc:
         6f:3e:4e:a1:47:18:14:48:58:93:d6:12:57:85:50:e1:b0:a9:
         78:94:ca:5f:43:d9:0a:2f:da:68:64:d4:b2:dc:fe:30:fc:c8:
         c9:b2:9d:fb:0a:0e:74:d6:6b:bf:3f:5c:53:3f:7e:71:92:af:
         6f:37:7c:52:67:bc:ad:3b:f5:f8:69:17:62:4b:51:fa:f3:3a:
         7b:39:0c:7e:6c:19:00:f1:94:c8:46:d9:37:e5:65:77:14:8d:
         81:46:fe:0a:5e:82:e7:87:fa:13:48:59:fc:90:63:ce:7b:c1:
         ed:0b:14:df:e9:e9:b2:9a:ac:ec:dc:eb:3a:f1:9a:de:ee:9d:
         77:89:d4:c7:41:d0:07:1c:64:d0:10:c0:bc:b6:e8:85:28:36:
         ff:89:6b:8c:06:de:d6:1b:e9:63:70:8e:82:36:b2:ad:1c:fa:
         26:38:b0:08:45:8d:69:2e:fd:d2:e0:12:9d:2f:36:41:33:4c:
         f4:5e:f1:b8:f0:93:cc:5e:11:9c:c9:da:30:db:45:79:8f:2b:
         49:98:3d:ef:f7:a0:ef:93:cb:e5:d2:68:fc:22:b9:8b:f9:f3:
         ef:0f:4c:2d:32:bc:dd:0a:49:49:b6:29:ea:42:70:37:41:21:
         45:9d:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:49 2024 by rpki-client on console-fra.rpki-client.org