Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/1d99cabb-e746-3ebb-9136-40783f2f2115.roa
File:                     1d99cabb-e746-3ebb-9136-40783f2f2115.roa (raw, json)
Hash identifier:          pUbZ4JHM4y0qP80aSPElv4QirNyEK5DOf0DBKFrM+oI=
Subject key identifier:   12:8F:47:51:39:C5:29:6D:3B:96:31:03:84:E4:5F:A4:1A:C6:EA:B5
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285847D6CF450DAB27D952A7FE288A
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/1d99cabb-e746-3ebb-9136-40783f2f2115.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     209
IP address blocks:        207.48.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:45:0d:ab:27:d9:52:a7:fe:28:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=809f5afa-11e4-4e12-b4c2-b0f27c3a3307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c7:c4:83:55:11:53:59:79:90:2c:53:56:42:
                    7f:31:1d:cc:a9:e3:91:f3:92:ca:dc:e4:fc:73:cb:
                    9f:3b:5f:2a:02:a0:5a:de:0f:81:51:8b:a8:63:25:
                    1d:d5:1e:04:2d:c7:93:41:d7:24:f6:f0:4f:fa:4f:
                    f1:62:eb:e4:95:36:31:a1:f3:f4:aa:98:74:85:4c:
                    92:74:ff:e3:6e:a2:c3:c2:8d:7a:91:f2:45:e9:bc:
                    7c:d5:b5:f3:3a:16:11:1b:ae:50:cd:0b:8e:3e:07:
                    18:54:6a:79:a0:ca:94:45:cd:14:45:80:2a:a0:07:
                    51:85:ea:20:e1:a7:0e:3d:85:c6:5e:b3:51:bc:69:
                    f0:1b:1d:97:57:d5:ed:b3:63:ee:db:19:5f:e0:8d:
                    fc:f0:43:88:fe:9b:00:94:e8:3d:c3:bf:db:7f:74:
                    d5:e2:93:15:48:a7:46:de:c6:d0:69:05:18:68:76:
                    1f:b2:d9:d9:9f:25:39:ec:b6:86:d9:54:11:76:ef:
                    01:7d:3b:8b:1f:b2:fc:04:31:38:8f:f1:a7:93:39:
                    c4:a0:53:be:ed:2e:93:89:c1:9a:36:33:c8:ee:33:
                    1f:09:b3:07:60:94:8a:ba:8a:d9:4e:83:78:fb:00:
                    e0:81:9b:b4:57:16:46:a8:a8:92:70:67:a9:6c:c3:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:47:51:39:C5:29:6D:3B:96:31:03:84:E4:5F:A4:1A:C6:EA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/1d99cabb-e746-3ebb-9136-40783f2f2115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.48.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e6:30:46:24:cc:b8:0e:da:21:d6:57:0d:73:ae:9b:d4:a3:
         3d:94:b3:0d:61:9f:9a:2b:d5:48:c0:b8:53:25:ee:6f:b8:7b:
         67:48:0f:f3:3b:ee:f5:a0:de:64:76:8e:61:57:8f:5e:a0:01:
         6f:ee:a4:2b:f5:41:0e:3c:37:ec:33:a9:77:ea:62:0c:bc:55:
         41:2b:22:c8:a7:e6:37:72:6b:ba:b7:76:5f:0d:c4:81:aa:7f:
         ec:ed:ce:f6:d2:bf:5e:0e:51:50:f8:b5:cf:f4:12:73:29:15:
         4d:61:03:d3:8f:eb:7a:1e:4b:13:bd:a3:7a:fa:ef:00:bd:fe:
         ae:a9:26:67:72:cc:fe:ed:98:15:33:6b:fb:84:a0:74:bb:a8:
         be:cf:d0:af:36:56:2a:61:7e:89:e2:d3:3c:6e:21:ff:46:ef:
         ea:c7:dc:12:cb:ca:e1:c4:93:2d:9e:5b:90:04:bc:32:03:8b:
         84:d1:4b:90:8f:36:a6:a6:bc:08:0a:be:f5:7c:69:a0:4a:66:
         71:e9:5b:47:1c:b8:23:9a:9c:66:fa:bb:39:e0:92:51:95:26:
         89:54:fa:c7:ae:a1:76:24:50:06:80:41:06:8c:73:7e:70:c5:
         56:b9:be:95:cd:01:8f:93:5d:bb:13:ed:b5:ef:fa:70:fd:3e:
         59:ae:5b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org