Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
File:                     15426059-319f-322c-95e8-198a3ab84115.roa (raw, json)
Hash identifier:          8tD6c2vD2K40+2to7UzrzPGkE9WDhGbRPcQ5VlVL3Js=
Subject key identifier:   28:2F:FC:5A:16:7F:D1:91:E4:4D:ED:FA:E5:94:B9:7B:A0:8D:AD:41
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285847CA3F7697F102ABEC31DD8C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     3949
IP address blocks:        131.103.21.32/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:76:97:f1:02:ab:ec:31:dd:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=2b3f3351-2ef0-4736-97b0-40d5b2d907ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:c2:6f:99:19:66:b3:1e:be:70:1f:6a:08:
                    9b:30:48:7a:27:e9:7c:22:71:f4:bb:d0:04:d5:c8:
                    24:1f:c1:70:1b:48:83:cb:64:db:4d:f9:ac:d7:b5:
                    36:fd:34:2b:62:01:38:18:22:11:78:d2:8b:00:61:
                    77:22:ec:3e:55:92:29:bd:c9:97:f1:9c:2f:a8:6c:
                    94:cb:53:a3:6a:c9:8b:d5:bd:a3:f9:91:a6:a5:bd:
                    d1:e1:a5:67:c3:60:ec:e4:f1:6e:c3:28:12:80:f3:
                    4b:dd:a5:92:5b:bf:7c:2d:54:f2:5d:7e:a3:73:7a:
                    36:53:3a:9b:7c:1b:72:2a:1b:3e:d0:7b:67:ed:ce:
                    0b:66:d3:5e:67:5b:1e:bf:a6:c1:24:cb:7c:91:23:
                    72:a4:60:d7:64:24:ab:fe:ce:c6:02:f2:81:4e:c4:
                    6d:55:0d:11:80:9b:59:c7:c1:99:a4:a6:e8:e6:9a:
                    80:62:52:fb:b8:86:27:f3:bd:83:ea:8d:fb:1d:7c:
                    2e:bb:35:ad:ad:97:50:9f:95:2c:b6:5d:ed:80:c5:
                    61:6c:86:02:c2:0f:28:25:90:ba:11:7e:a2:84:51:
                    a5:aa:d1:55:28:88:e0:2c:e6:1a:6f:98:f5:aa:db:
                    b3:ed:e4:87:c6:c5:73:d7:db:b0:c7:ef:15:ee:9c:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2F:FC:5A:16:7F:D1:91:E4:4D:ED:FA:E5:94:B9:7B:A0:8D:AD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/15426059-319f-322c-95e8-198a3ab84115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.103.21.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:81:a2:23:fb:de:32:c8:7c:47:16:e4:0d:31:53:4b:89:e2:
         df:3e:d6:52:52:f2:a3:5d:2b:fd:0b:23:cd:7b:c6:1e:e1:06:
         58:47:9a:c2:b4:12:54:ab:7c:71:d7:07:02:2d:bd:cd:f7:de:
         2a:e6:7f:fd:fd:ec:b5:1d:f0:96:a0:59:12:d3:ea:9f:b3:f7:
         8f:51:1b:01:07:3e:5f:cc:7f:b6:f9:9b:da:ec:cc:6e:b1:e9:
         fb:3e:57:8f:eb:20:4f:05:38:97:3b:62:86:7a:c3:54:72:47:
         b0:9c:78:4a:40:58:2b:5a:df:fc:d4:55:3a:9a:cf:da:48:b8:
         0e:5c:38:a7:9c:b7:71:04:86:d0:85:b2:c3:a2:cc:67:7c:ba:
         b9:a6:1f:6d:b1:84:45:11:a0:bf:e4:68:74:6b:a9:2e:62:f5:
         21:f7:24:98:37:7e:ad:90:ef:64:23:ec:48:63:c0:13:32:16:
         06:44:ae:c3:63:80:1e:2c:1e:03:00:66:06:3a:70:97:0f:f7:
         a5:9a:5c:10:11:01:10:01:0b:0b:3f:2a:62:3b:ef:7d:35:0b:
         25:3b:a1:ea:c7:36:7e:13:7b:10:7b:80:0b:ef:17:8f:cd:27:
         54:34:ad:aa:18:08:93:1c:f5:b5:0f:b8:e8:80:03:89:57:46:
         1b:b4:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:58 2024 by rpki-client on console-fra.rpki-client.org