Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0b379466-8e3a-3ea8-a623-484b3d094c80.roa
File:                     0b379466-8e3a-3ea8-a623-484b3d094c80.roa (raw, json)
Hash identifier:          Tp5/eF3i0FBRplS8Pcl4+geuAF6EHzoTE4B5WhLj2ng=
Subject key identifier:   70:58:40:BC:CB:68:89:20:4C:29:C6:1C:36:1F:99:A8:A7:5B:1C:72
Certificate issuer:       /CN=b89f752a-b36c-4af5-938d-969edb017937
Certificate serial:       010D0C9F43285847792BAC80D137292D7244C830
Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0b379466-8e3a-3ea8-a623-484b3d094c80.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     55562
IP address blocks:        153.46.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:ac:80:d1:37:29:2d:72:44:c8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=6c1ed798-263a-49c7-9310-6e839d780719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:4e:2f:2c:42:60:42:2e:89:2f:1b:7b:d7:
                    3d:c0:47:d1:f8:b1:b2:43:66:36:6a:66:5c:97:b1:
                    d3:6f:a1:ca:d9:10:1b:b4:f0:2b:66:e3:5f:9a:68:
                    09:77:34:4d:e6:93:76:ab:d6:9b:93:52:50:3c:af:
                    14:10:ec:9a:b6:a5:5c:83:14:88:08:b6:35:d7:f6:
                    64:d0:28:f1:45:92:0b:43:6e:04:0f:d6:5b:1b:fe:
                    fb:6e:2c:74:54:71:fb:a2:56:b6:04:aa:39:eb:75:
                    60:f9:76:08:f3:71:44:b7:c3:19:32:a3:fe:0a:97:
                    5e:e7:b3:8a:cb:99:15:b1:b9:29:b0:af:9d:29:dd:
                    48:a6:32:71:18:fb:26:4f:cc:e9:f7:02:7a:83:8e:
                    40:85:98:80:5b:92:5d:c5:26:b8:31:01:d1:b7:16:
                    3d:c7:7a:d2:ef:ea:46:a1:ff:95:1f:f1:b6:e4:3f:
                    a4:57:db:ab:01:85:48:eb:ae:c6:56:7e:2f:4f:61:
                    75:a3:d2:f5:ca:86:fd:cc:c0:1d:66:03:31:72:9a:
                    b1:cd:b2:50:83:a5:fc:f9:bc:41:83:0e:7a:f6:e4:
                    78:10:f1:30:24:e9:51:02:d6:d6:70:b9:4b:bd:b3:
                    67:84:da:e6:ec:79:fb:77:de:98:ad:9d:d4:35:67:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:58:40:BC:CB:68:89:20:4C:29:C6:1C:36:1F:99:A8:A7:5B:1C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/0b379466-8e3a-3ea8-a623-484b3d094c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl

            X509v3 Authority Key Identifier:
                keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.46.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:24:24:38:43:16:56:ef:8d:1b:e2:51:db:fb:e9:6f:9f:
         60:76:e2:2f:b7:b4:e4:5e:e7:4b:19:02:8a:56:1f:80:7a:c8:
         1c:2f:2a:08:db:e4:47:6f:bc:1a:4b:34:6e:be:3f:3f:e1:26:
         e4:1b:31:cc:b4:65:c2:82:d9:0e:3a:31:ef:34:be:81:f7:bc:
         20:b4:7e:dd:13:8a:ea:2e:05:7b:fa:43:60:b4:c6:44:fb:d8:
         fe:4e:6e:8a:5c:10:91:88:fb:17:26:1c:b3:d0:6a:55:4d:f7:
         ae:13:61:ed:27:82:4d:e8:70:03:31:77:b2:51:16:c0:b8:75:
         a8:92:71:17:be:bc:fc:74:34:8e:84:ab:1f:bf:e1:88:10:ae:
         b0:b9:ee:85:56:e5:57:4c:83:ad:7e:7b:23:cb:1b:9f:14:0f:
         5b:22:7e:fe:bb:89:15:65:c7:9b:92:64:84:50:f9:c6:10:12:
         2b:0e:7f:82:27:80:b9:d4:d9:ca:4e:ec:bd:b5:97:2e:5d:4e:
         6d:19:af:49:fb:d9:14:41:ec:1e:6f:61:4e:69:c2:05:50:14:
         cd:d5:d7:cf:58:1f:ff:5d:14:12:eb:4a:e5:fd:53:9c:3c:ba:
         23:46:c1:0b:94:75:79:50:fd:80:df:e5:94:ab:7e:7c:27:a3:
         97:30:8d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org