Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
File:                     666ce706-f266-3fa9-aabf-cb8681729e63.roa (raw, json)
Hash identifier:          fW4ubQwM4wgXZjwVoNlPo+yzZHBDMPP8MlOmW2P9VWo=
Subject key identifier:   44:48:FD:F1:A4:43:53:21:6C:D7:50:46:33:F5:6E:85:C2:8D:B8:C8
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584734C887E1FBDA08831E1FE680
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        142.0.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:87:e1:fb:da:08:83:1e:1f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=5b7ae4a9-10b6-4dea-8931-e1612a99f95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:1e:3f:fc:07:e1:c0:d9:c9:62:19:32:be:
                    02:eb:cc:10:22:ec:2b:3a:56:f6:d1:b2:a0:87:9f:
                    5d:7f:68:b4:87:de:e8:da:60:7b:af:df:e2:71:58:
                    39:c8:41:a4:55:25:4e:d9:43:c8:64:2f:2b:6b:47:
                    88:09:ac:d7:41:50:da:8f:16:a8:7b:48:75:48:cb:
                    25:b3:b4:bf:fe:f8:0e:7c:8a:fd:c3:67:51:96:1e:
                    29:42:13:61:b7:db:d9:d4:8f:6e:14:9f:31:ba:d9:
                    ae:40:80:bb:00:f6:56:c1:3e:01:aa:5b:dd:12:ba:
                    b2:ba:60:97:b1:d2:04:55:21:cc:50:66:15:80:76:
                    37:49:83:c4:36:58:3f:67:2f:98:ab:2f:c0:90:c8:
                    59:19:80:d1:b4:5e:6c:ff:38:42:67:45:5d:62:d7:
                    ec:51:76:60:f1:c1:5f:24:07:a5:49:0d:81:d6:78:
                    f2:d2:c4:7d:ce:c2:ed:42:3e:b9:0a:a2:00:58:05:
                    cf:29:1e:e7:62:ab:76:1e:c4:1d:ac:33:2d:7b:1a:
                    77:00:c4:61:a2:4a:9d:b8:2b:65:32:cf:98:0e:72:
                    99:9e:08:3b:b1:ae:01:ef:26:c8:17:f6:51:26:ab:
                    b6:44:c2:3e:ca:28:1f:6b:a5:5c:05:b1:ce:43:37:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:FD:F1:A4:43:53:21:6C:D7:50:46:33:F5:6E:85:C2:8D:B8:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/666ce706-f266-3fa9-aabf-cb8681729e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:18:61:cc:f4:8b:7b:fa:56:f1:06:da:71:4d:70:f5:06:c2:
         80:3d:21:93:71:7e:4f:ed:1c:33:25:f6:f7:a4:12:58:53:68:
         2e:73:7c:78:41:14:8c:a7:80:e6:94:04:12:4d:6f:a5:61:fc:
         2e:31:02:2b:b5:65:98:b8:b5:87:1b:c5:31:b4:e5:f5:7b:7e:
         8f:12:9e:6f:58:00:39:8e:18:da:e9:db:1e:24:82:a3:e8:ac:
         9c:cc:ab:0d:7e:1f:49:b5:29:06:4f:f5:da:2d:94:34:73:c8:
         97:60:f9:b9:4b:3b:0b:f5:17:ce:a3:df:67:d0:a5:5b:74:25:
         71:ec:4b:f7:82:74:e4:85:bb:61:d8:4c:90:dc:ad:a6:30:b8:
         79:f8:45:82:07:87:e4:c9:b3:62:73:22:09:cb:68:a7:81:70:
         ec:80:10:f5:be:67:74:0c:75:ba:f9:18:bf:9b:d3:a8:ff:50:
         aa:26:20:0c:4f:d9:47:b4:a2:67:c6:a1:8a:3b:50:83:35:8f:
         c8:7b:ef:e7:34:3a:fa:4b:06:3a:3d:de:ad:00:b3:e6:e4:63:
         a5:ec:80:3e:83:80:53:a9:d8:06:a2:60:bc:dd:7d:14:a9:55:
         b4:5c:39:4b:bb:7f:1f:1f:be:39:85:08:2c:70:21:f8:df:c7:
         e6:01:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:53 2024 by rpki-client on console-fra.rpki-client.org