Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa
File:                     8158f8a6-7717-3c4d-8253-18c3677c262c.roa (raw, json)
Hash identifier:          NR6Px/uS50OPBJjcde+4YDVZJy/rl4oFrufPT60+SjQ=
Subject key identifier:   2B:BA:2B:F1:14:C8:CA:C8:C0:7B:82:B8:EF:95:5A:95:DC:78:17:66
Certificate issuer:       /CN=48e7861e-5414-403c-8268-a7d7b18f405d
Certificate serial:       010D0C9F43285847DF2F52DBD10A680B2C244900
Authority key identifier: 4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     20325
IP address blocks:        198.27.29.0/24 maxlen: 24
                          198.27.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:52:db:d1:0a:68:0b:2c:24:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e7861e-5414-403c-8268-a7d7b18f405d
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=2687da90-1af3-4764-bfc1-41a0a2afd94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:11:fb:88:17:04:d9:d5:2c:3e:72:03:5f:
                    9c:cb:f2:02:e0:86:0b:d1:23:d3:0a:bc:46:4e:4a:
                    94:e9:c7:81:a2:2e:e5:65:d5:5c:76:20:88:31:e2:
                    fa:82:00:65:96:fd:b4:d2:77:d2:a2:9b:50:06:0c:
                    11:4d:a3:17:ae:17:a1:48:b8:17:74:f2:ae:77:c6:
                    ee:0f:ee:fd:7b:ff:67:1f:82:6f:b6:14:53:62:e0:
                    3d:68:75:09:31:18:9f:72:6c:aa:bb:5b:7e:4e:71:
                    25:e4:96:8a:d9:4c:f1:aa:73:58:37:84:bb:5c:e1:
                    d1:4d:ab:18:c8:91:b5:57:e1:07:ff:43:80:1c:29:
                    ed:56:e6:14:65:c4:a8:87:60:2e:68:05:e1:b6:b6:
                    d3:72:fa:92:40:cf:67:2c:a3:78:3f:22:4e:0c:78:
                    7a:99:28:ea:c4:34:e3:c7:87:e4:6e:f0:f2:bc:5c:
                    35:31:1b:48:da:e8:6f:7a:6d:ca:21:76:b9:98:11:
                    b4:37:e3:d9:78:59:4d:98:92:4b:ac:d8:2e:72:e1:
                    13:be:06:90:44:4b:f9:de:47:3b:91:25:6a:0e:e1:
                    de:e8:84:4c:c5:62:57:18:03:d0:8b:6e:4e:83:b2:
                    71:e3:26:ce:a5:28:b0:bc:c6:96:82:06:b4:73:a3:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BA:2B:F1:14:C8:CA:C8:C0:7B:82:B8:EF:95:5A:95:DC:78:17:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/8158f8a6-7717-3c4d-8253-18c3677c262c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d/48e7861e-5414-403c-8268-a7d7b18f405d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:99:9D:30:47:BA:8A:6F:1D:E0:06:67:BA:BA:4E:D5:1E:7C:42:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e7861e-5414-403c-8268-a7d7b18f405d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.27.29.0-198.27.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:58:1b:46:83:78:b6:0f:5d:b4:60:d0:f5:d6:55:48:e3:95:
         9d:74:88:cd:59:eb:8c:be:57:f6:f3:3b:70:78:17:46:a6:94:
         c5:d3:5e:86:07:39:32:78:0b:5f:ed:15:19:dc:c9:40:f7:99:
         fb:52:13:81:be:bc:a1:fc:be:1f:80:f7:8d:30:a0:8d:d2:a4:
         b4:ed:de:fb:62:55:ef:45:88:94:ff:cd:1f:89:7d:b1:9a:7f:
         0f:e0:47:8a:36:cf:6c:c6:64:4e:fa:d4:d6:22:ec:6d:29:c3:
         92:2a:7c:78:e9:f2:1f:cc:fd:7b:a2:ca:32:05:4e:d1:7c:d2:
         b3:5c:0a:3b:17:19:d1:f2:33:65:d4:a8:5e:92:a7:b7:61:a5:
         09:33:4f:e1:bd:4b:9c:cd:a7:9f:de:5a:33:80:e6:61:ea:d7:
         8d:28:82:4e:f1:ee:d2:a1:c7:89:61:45:38:1a:e4:3f:2a:6b:
         e6:27:2e:9e:1f:ad:4e:d9:14:71:df:51:c2:8d:01:e8:8a:e5:
         4e:f5:38:13:93:02:2d:77:b2:1a:15:31:9f:12:f0:a2:d4:87:
         c8:4e:b0:c8:27:6a:a7:31:32:85:6b:16:ff:94:b3:5e:ed:81:
         c0:01:51:9b:90:bb:7c:dc:fd:ea:d3:35:bc:04:1a:e8:48:3d:
         e9:c7:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org