Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa
File:                     85d3f429-f3aa-3e05-8150-137b937decb4.roa (raw, json)
Hash identifier:          4g+bpWg4exkbHc2pmt1igZ5SvDKe8RQzsG9f+5JSGj0=
Subject key identifier:   73:03:CE:4C:3B:1C:67:EA:6D:31:FA:74:2C:FF:F5:71:5A:FC:2B:7A
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285846C68007FB09115384D3A8F800
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa
Signing time:             Mon 05 Aug 2024 13:00:39 +0000
ROA not before:           Mon 05 Aug 2024 13:00:39 +0000
ROA not after:            Sun 03 Nov 2024 14:00:39 +0000
asID:                     213122
IP address blocks:        161.129.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c6:80:07:fb:09:11:53:84:d3:a8:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Aug  5 13:00:39 2024 GMT
            Not After : Nov  3 14:00:39 2024 GMT
        Subject: CN=6827fd3e-52ac-4b71-b8c3-37c4f3617fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:c0:de:9d:62:8f:56:94:66:f3:e6:0d:99:
                    7f:1b:5d:25:e2:4e:bd:60:5d:f8:f7:2b:7c:09:d0:
                    2f:9d:c7:e5:1b:0a:01:52:25:29:32:d5:c6:0b:81:
                    d1:a5:6f:e9:08:c1:73:a5:d7:1b:cc:5c:47:8d:c6:
                    e1:a9:6c:b4:a4:ef:1d:b1:40:40:d8:cf:ad:18:1d:
                    3e:d8:0d:38:62:e7:d1:a5:8e:88:c6:de:70:a5:70:
                    3e:4b:4a:04:8b:bf:be:cf:40:eb:dd:82:a5:9b:54:
                    65:93:f9:32:f3:41:09:24:d9:fb:65:c1:8a:10:25:
                    18:e8:26:b7:d2:62:31:14:95:e5:6e:bc:40:9c:71:
                    b1:11:d6:7e:ce:4e:83:90:8a:4c:13:75:f8:c0:fe:
                    c0:b2:88:e1:5e:b0:d8:cf:7d:2b:d1:dd:ff:39:20:
                    7c:bc:49:3c:bf:5d:5a:39:8b:ad:c7:f3:74:68:6b:
                    76:83:b1:fa:91:e7:5a:ff:2e:d5:92:f0:5a:7d:9e:
                    13:f4:72:a1:8f:78:ed:79:d3:a1:77:1c:e4:8d:5c:
                    95:6c:14:15:a5:b6:78:cc:41:c1:d7:4e:9f:6f:3b:
                    02:d2:49:ae:89:a1:16:33:a1:59:b0:d7:91:2a:8d:
                    81:4d:ef:45:3d:91:ed:c6:ad:b7:7e:18:5e:c3:dc:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:03:CE:4C:3B:1C:67:EA:6D:31:FA:74:2C:FF:F5:71:5A:FC:2B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/85d3f429-f3aa-3e05-8150-137b937decb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b7:79:b8:98:12:de:71:fd:a1:01:4f:74:d0:5e:4f:56:15:
         03:73:b6:0d:ee:d1:3c:bc:25:0b:94:c8:1c:d6:86:d3:7f:16:
         71:c1:5d:c5:d0:a0:43:97:40:e8:86:56:4b:08:7c:a9:84:9a:
         40:8c:f8:04:ef:31:e1:93:40:79:86:cf:20:12:1d:9a:ab:06:
         69:5e:48:93:5f:e3:75:10:52:7c:c0:8d:44:1d:e8:7c:46:67:
         19:bf:33:98:b5:c8:37:96:0d:32:e6:35:97:a2:e5:37:0d:3d:
         30:0d:65:d0:20:d1:1a:d8:5c:75:2d:4e:0e:9d:cd:11:35:27:
         45:70:3d:6d:64:24:86:39:42:6f:df:93:e1:45:ce:6e:66:76:
         ed:53:80:1c:de:49:0d:fe:d4:c5:76:30:9f:eb:f3:6a:db:83:
         2d:17:b3:0a:9e:5a:af:10:08:d3:53:25:d5:3a:6c:61:95:46:
         e1:df:4a:16:56:00:e7:85:86:cc:91:10:20:66:65:af:bb:69:
         a6:3a:b1:91:7d:ca:5b:fa:8b:3a:18:2a:05:a5:77:16:3f:33:
         f8:22:2b:aa:5b:60:54:33:06:bc:c7:4f:f6:b9:f5:44:54:46:
         40:e2:92:bb:43:ed:d7:3e:86:24:3c:68:24:24:63:fd:7c:5b:
         9c:42:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 23:12:00 2024 by rpki-client on console-fra.rpki-client.org