Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa
File:                     f0581163-8650-3d3c-b68c-97fa9d353ba7.roa (raw, json)
Hash identifier:          tyRBID3xrgDytb13hdaOZ8XcwWa4Ona4sd7UXxq9eWk=
Subject key identifier:   16:4B:97:C9:04:8A:06:59:AE:8E:C9:6F:F3:90:A7:51:E6:04:8B:9A
Certificate issuer:       /CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
Certificate serial:       010D0C9F432858478721338B82526322A64CB480
Authority key identifier: 65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     46156
IP address blocks:        159.208.48.0/24 maxlen: 24
                          159.208.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:33:8b:82:52:63:22:a6:4c:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=31a27d4e-b18b-4e6a-bd76-fd4f4dd19b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:b5:b8:1e:51:ed:22:7b:df:29:00:8f:43:
                    bd:e3:14:22:12:ae:d6:ff:a0:28:03:7b:a7:2e:95:
                    b3:9e:0d:16:e5:5f:9e:17:84:13:72:ca:01:5b:1b:
                    3d:11:5e:a5:b4:c3:d1:08:c4:04:b1:d9:bb:73:23:
                    78:4d:3b:b2:27:f8:b9:b9:0c:38:9a:79:e8:07:20:
                    71:39:a0:39:84:e4:c4:da:38:c8:0e:14:73:27:b7:
                    36:34:3b:87:08:77:d0:41:bf:33:f9:c0:4c:39:05:
                    e8:12:3f:ee:94:65:b7:8b:f0:21:37:2c:03:ad:b4:
                    1f:f9:67:4e:46:8c:12:77:fc:da:23:d9:34:b2:33:
                    b8:78:fa:7f:3f:84:d4:84:5f:a2:60:26:38:61:0b:
                    de:69:ca:ae:97:a2:93:95:1f:8d:b9:ac:5a:10:c5:
                    d1:61:f4:7d:1b:ab:79:9b:b8:fa:2d:9f:88:78:b3:
                    8b:38:45:8f:0e:9d:e1:4b:6b:69:d3:39:d0:b9:3a:
                    82:55:d5:76:a1:a4:29:9e:3e:12:6f:10:06:44:cc:
                    9e:70:6a:47:8b:bd:c3:9b:4f:8c:17:55:f8:9e:72:
                    64:c0:db:e1:55:eb:56:35:63:13:90:55:ac:be:e5:
                    d3:db:9d:44:b0:2b:b3:2e:95:db:91:87:55:c0:04:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:97:C9:04:8A:06:59:AE:8E:C9:6F:F3:90:A7:51:E6:04:8B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/f0581163-8650-3d3c-b68c-97fa9d353ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.crl

            X509v3 Authority Key Identifier:
                keyid:65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:47:c2:9e:3a:75:f0:e6:e0:a7:9a:1d:7e:e1:4d:95:76:ed:
         20:d4:b5:0f:a9:c0:92:52:5e:e3:39:a0:30:1b:29:5f:65:20:
         c9:9d:f9:07:25:bf:67:ec:0f:cc:0a:72:31:80:17:c3:e0:8a:
         42:c3:0d:b1:ea:43:de:62:ca:31:3e:c8:91:54:97:1c:1c:85:
         c6:ef:f6:01:09:07:32:e2:2a:de:48:3a:32:39:fd:26:ee:73:
         bd:c0:65:b1:cc:36:49:e0:4d:93:93:21:c8:39:3b:2c:ab:35:
         42:97:53:b1:47:c1:5d:08:43:71:22:99:4e:b8:b8:d8:f7:0e:
         2c:78:e9:f9:14:ae:39:49:af:c1:f3:47:a6:a9:20:cf:b3:54:
         41:8b:6b:5a:e3:9b:9c:b4:7b:0e:10:0b:d4:84:8c:d7:c9:e5:
         f5:4b:af:30:74:21:b6:67:77:16:af:d0:2a:4f:b4:93:e9:6f:
         04:5f:b5:f0:14:91:ac:98:f2:47:ea:0f:63:9a:09:ba:3c:e2:
         0a:e0:49:bb:97:85:7b:67:a3:79:a3:3a:44:fb:2c:2e:d6:d3:
         55:38:ce:ed:67:8d:45:cc:3f:75:1d:5c:c6:84:6e:66:90:47:
         01:22:c3:7a:d0:14:20:2f:09:7c:c5:86:e8:5f:a5:25:92:ee:
         ec:a7:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org