Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/957f8ff8-7dfc-349e-9d61-a18bcafb3284.roa
File:                     957f8ff8-7dfc-349e-9d61-a18bcafb3284.roa (raw, json)
Hash identifier:          WvCBomlmZgPzGJNK/ZSpQB7XXZKIThJtLX9ph0j9NOg=
Subject key identifier:   C0:CD:FE:D9:F5:6A:55:E6:6A:BC:20:18:B7:28:3C:33:E8:03:ED:DC
Certificate issuer:       /CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
Certificate serial:       010D0C9F4328584761716E257CCA1CB00712BFE0
Authority key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/957f8ff8-7dfc-349e-9d61-a18bcafb3284.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     202
IP address blocks:        159.212.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:6e:25:7c:ca:1c:b0:07:12:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=66999725-dc26-49af-a1ac-a6fe3566a893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:73:e0:ec:d8:91:14:1d:c6:a9:27:e9:66:
                    93:8c:bd:a5:7f:a1:3b:1b:1d:e1:94:2c:0d:c5:29:
                    82:a4:15:cf:78:6f:29:38:24:d8:45:91:ae:f8:ce:
                    b1:9e:8a:09:fd:5f:ae:33:f9:c4:7f:36:a0:4d:78:
                    39:aa:29:db:14:71:86:95:11:6c:7c:6f:9c:49:42:
                    e3:d1:11:06:0f:c2:5f:37:4f:09:b1:e7:11:5c:7d:
                    94:82:9d:35:ac:9d:4b:55:24:68:f0:0b:9f:6e:bd:
                    f4:ad:e9:76:91:53:1f:e1:6d:f5:eb:9c:00:ce:a4:
                    b4:75:7d:6f:19:7b:70:c5:d0:62:19:76:81:56:30:
                    50:7c:9e:17:ec:ba:b1:a2:53:d5:d6:82:18:23:0b:
                    ba:98:6b:fa:b9:72:ca:6c:0f:eb:f5:f9:03:16:ed:
                    ca:79:90:5b:47:d4:7e:e2:60:bc:df:b9:00:f4:ae:
                    85:35:2d:7f:74:f3:8d:91:fc:78:39:ce:24:9c:07:
                    30:d1:7d:e1:04:2f:53:ff:6a:7e:02:d6:1b:67:c8:
                    6c:84:b7:4e:69:40:6c:5b:98:e8:40:f6:60:c3:dd:
                    cc:aa:23:1e:d0:c4:07:99:b3:4c:c3:66:87:84:25:
                    76:5a:72:15:d0:45:b9:05:02:c3:dc:a7:2c:1e:7e:
                    90:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CD:FE:D9:F5:6A:55:E6:6A:BC:20:18:B7:28:3C:33:E8:03:ED:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/957f8ff8-7dfc-349e-9d61-a18bcafb3284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl

            X509v3 Authority Key Identifier:
                keyid:FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:5f:02:98:98:08:31:32:73:99:6f:41:b0:dc:ba:4d:37:
         38:71:38:83:52:56:5d:b4:82:99:b4:41:e2:0e:b0:b7:26:df:
         93:22:cf:45:41:2b:ff:a6:b4:1d:8b:41:40:c0:1e:3c:2f:26:
         9b:74:10:ba:7d:24:4d:0b:44:cc:18:e4:13:33:c6:39:2d:f6:
         9b:d7:5b:e2:46:c8:e4:14:1d:33:1f:d6:2a:87:bd:60:e4:2e:
         82:93:d6:18:22:23:d6:dc:68:94:c1:05:23:4e:85:48:0b:13:
         77:3a:1f:22:12:7e:e5:aa:02:dc:6b:4f:cd:c4:28:ab:71:d4:
         60:b0:89:52:40:f6:46:8d:78:e7:ba:16:a3:c8:da:5a:09:b7:
         8f:ae:bf:d9:97:26:7e:03:70:c5:4d:e7:43:1e:68:d8:89:ce:
         ed:26:cd:9a:53:25:9b:85:21:61:a7:ab:e0:1f:ab:a3:19:ce:
         32:56:3f:6d:a0:10:aa:e5:dc:b6:53:0f:f8:1b:3b:1c:b6:63:
         b5:8c:2c:42:45:12:2f:66:fd:de:6b:b1:9d:5c:03:fb:72:31:
         44:f8:f9:c0:53:20:6e:99:de:dd:af:60:78:21:49:0f:4d:f2:
         fa:86:93:eb:29:dd:d5:53:e3:bd:74:05:a7:bc:e7:9f:cf:61:
         f6:51:ea:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:31 2024 by rpki-client on console-ams.rpki-client.org