Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa
File:                     2a09d5aa-ff44-364e-8546-bc3f9845a726.roa (raw, json)
Hash identifier:          WJ+cOO+fJusAq8Qvkl8EWOPLNQDnUyTo8eMqeL8MC3U=
Subject key identifier:   8D:02:7B:9F:84:AE:9C:FB:87:55:A2:A0:91:41:A2:69:C9:38:44:CF
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285847A73BE6C1CB350E724EBBB380
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     6181
IP address blocks:        72.49.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e6:c1:cb:35:0e:72:4e:bb:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=ba3f5c33-469f-4f4c-849b-b0fc7e37554d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0d:5f:c7:ab:45:52:13:7a:eb:ad:e5:05:b1:
                    a1:21:6d:24:a7:fc:57:d9:cc:16:8c:a1:6e:68:61:
                    7e:8e:17:84:aa:cb:e6:fd:86:3a:05:81:2f:3c:cf:
                    72:e0:ab:2f:ac:9b:33:b8:72:dd:e6:60:b6:c1:97:
                    6b:cd:da:d2:a4:bd:34:22:ab:2a:58:bd:11:81:6b:
                    83:54:1e:6f:2b:51:61:67:5e:d5:8d:3b:0e:62:d9:
                    d3:c3:c8:b5:4e:d9:20:d4:89:5c:e3:ec:97:d6:2f:
                    29:91:7a:53:6c:22:30:36:03:b1:81:b0:73:b8:a8:
                    87:4f:d5:49:26:23:d0:47:90:b0:65:e8:a6:37:e4:
                    a8:e2:fc:df:fe:5b:d5:f0:dd:1a:ef:dd:43:dc:cb:
                    96:8b:45:87:c0:64:b2:2d:58:fa:cc:1b:84:ab:5c:
                    1e:3d:31:7d:6f:51:f7:16:3f:74:53:c9:ed:b2:a6:
                    27:d4:3a:21:e4:ed:34:39:65:ec:a7:a4:28:d3:26:
                    2e:55:45:cf:54:65:46:cd:8b:ce:76:01:da:45:13:
                    3f:b3:f0:74:c4:09:9f:4b:76:6e:38:a0:1e:11:83:
                    4f:98:c9:2a:88:33:67:84:fc:ff:a0:1b:fd:dd:e3:
                    00:7c:0a:e9:29:28:27:19:56:b8:73:fa:a6:d3:78:
                    e1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:7B:9F:84:AE:9C:FB:87:55:A2:A0:91:41:A2:69:C9:38:44:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/2a09d5aa-ff44-364e-8546-bc3f9845a726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.49.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:44:e8:1e:ed:db:b8:96:f2:f9:6d:ee:7a:c0:d5:03:44:
         87:ea:9e:4d:8e:eb:a6:61:5a:c2:1f:75:71:9f:c0:7b:ec:36:
         05:cb:e6:35:a1:7e:b9:d0:70:b0:7c:5a:dd:18:1c:db:db:df:
         bf:8a:50:b4:fc:7f:4c:18:56:25:fd:b0:68:f2:67:11:33:78:
         0c:fb:eb:25:78:0d:c0:68:0b:84:7d:1d:e7:90:4d:57:07:76:
         e8:57:9e:d1:0b:5d:1d:43:87:6b:ba:89:1b:e0:30:bd:d9:1d:
         fb:4f:ae:57:26:55:6a:0f:72:63:5b:3c:23:4a:ec:51:c1:3d:
         06:6a:f6:21:01:f7:c8:29:c4:42:ee:67:da:83:85:32:52:f9:
         46:c7:bf:11:86:0d:7b:bc:fc:34:e0:20:8e:e3:89:c7:20:62:
         bd:46:80:ff:0a:a3:af:73:c8:bc:a7:d2:88:99:c1:9f:37:bc:
         64:55:be:cf:c3:d5:07:93:a9:5f:4f:7e:40:89:04:49:47:bd:
         53:76:53:ad:76:46:61:95:47:8e:ef:de:53:a3:ba:64:67:50:
         17:41:f0:49:00:74:27:ff:a1:05:ff:70:ed:ba:ba:db:ac:ad:
         f8:bc:82:b0:a2:cd:af:11:b5:b3:07:56:b0:c2:11:5f:b0:d8:
         5c:db:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org