Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c30a0538-4702-36df-bb47-a10288fddcb3.roa
File:                     c30a0538-4702-36df-bb47-a10288fddcb3.roa (raw, json)
Hash identifier:          FpPcYPEalxEpX5OM0vRjlFIS6aL7/iqEmfiPdxLGPvM=
Subject key identifier:   AD:A7:BD:B1:88:18:6F:86:27:3C:36:6A:8C:68:C6:F8:6A:C3:2E:FF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0E36E29FF7C1202EF5C840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c30a0538-4702-36df-bb47-a10288fddcb3.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     855
IP address blocks:        47.54.0.0/16 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0e:36:e2:9f:f7:c1:20:2e:f5:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=ba1fea71-d0f6-47bf-9e84-ef4db520b6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:44:3b:b4:5d:79:09:ae:60:8c:7a:ee:7c:
                    ee:61:20:ec:07:ee:85:2e:9d:d6:78:d6:57:88:ec:
                    46:21:32:0a:af:40:4e:04:a0:2b:fd:56:04:20:35:
                    c7:84:3e:f9:fb:4d:20:46:2f:4c:70:a1:dd:6c:74:
                    d6:df:62:a9:52:98:68:5f:29:1f:ed:22:36:85:7b:
                    e8:6b:8a:ae:5b:13:a2:71:a7:86:3d:ec:a8:2a:69:
                    fa:b3:35:09:78:04:65:e9:91:40:96:38:9e:6b:ef:
                    c2:62:7b:49:41:8a:a7:87:db:de:03:6a:20:16:ff:
                    61:04:72:66:c2:bc:16:07:af:fe:08:c5:32:0b:64:
                    f3:11:c0:5a:f6:52:87:9f:11:69:58:ff:68:30:f9:
                    44:63:6e:5b:e5:64:03:ac:13:3d:9e:44:63:13:62:
                    3d:03:d2:f0:1e:6a:2a:70:65:a2:18:62:49:38:0c:
                    01:cb:d9:c3:e7:a6:ff:b1:4b:d5:a1:9b:34:d0:8e:
                    6a:b3:6f:41:1d:4d:a2:37:ec:e7:78:63:fc:93:35:
                    f0:c0:63:c9:fc:b3:c8:06:2d:d7:19:cc:e8:96:33:
                    36:58:0c:6e:dc:4b:d0:af:ab:4c:2d:21:82:d2:05:
                    e3:4a:82:85:24:9c:85:4e:4c:f5:64:20:68:03:d9:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A7:BD:B1:88:18:6F:86:27:3C:36:6A:8C:68:C6:F8:6A:C3:2E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c30a0538-4702-36df-bb47-a10288fddcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:d2:6b:6d:3a:22:1d:38:54:9c:e2:f7:fa:8b:97:70:63:
         2e:2e:e8:4f:72:b2:e4:b4:41:4e:8c:70:55:b5:c7:62:11:42:
         72:d6:38:e7:93:05:17:51:fd:d6:e9:99:64:91:36:ac:0d:ce:
         0f:25:01:d9:db:a8:7e:15:c9:cd:43:40:7b:96:c3:bc:9c:b4:
         11:36:a4:a7:56:52:b7:6b:66:74:2c:09:fa:3f:05:91:66:e9:
         4c:76:99:ba:3c:f3:cf:37:13:1f:94:15:7b:eb:ea:57:fa:fc:
         75:90:75:05:2e:0f:cc:c3:0d:a5:62:65:74:ce:a7:01:84:b5:
         32:c3:c3:c0:cc:41:12:4f:e5:c1:7f:57:55:6e:b4:55:cc:6a:
         18:73:c0:c0:12:57:ab:5a:f2:7d:b3:36:1b:b0:10:0c:b2:46:
         09:27:53:67:b5:1f:51:31:9b:96:cd:85:37:11:6f:a3:8e:53:
         47:ad:a2:16:1e:3c:55:ee:6d:27:76:c2:82:bf:a9:2e:25:f7:
         a9:c0:c0:c7:85:c9:e1:f3:5e:e6:73:18:2d:e8:4f:be:5b:dd:
         cd:39:96:1a:c1:f5:82:f6:4f:63:ef:f9:5c:af:ea:a2:b3:22:
         a4:e7:50:d0:be:e7:c8:4b:b0:f0:b9:51:26:5f:26:c1:ab:f3:
         56:d8:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:12 2024 by rpki-client on console-ams.rpki-client.org