Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa
File:                     fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa (raw, json)
Hash identifier:          jH/gKySJq88tUB1bARG7G0ct8uvZX/ycX6BSBuqxiTs=
Subject key identifier:   42:8E:A4:59:7B:18:60:48:F0:EA:D0:A0:F2:11:C9:36:5D:DC:28:C6
Certificate issuer:       /CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
Certificate serial:       010D0C9F432858475EA616BF6E799C16B7A30C80
Authority key identifier: FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     11052
IP address blocks:        159.212.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:16:bf:6e:79:9c:16:b7:a3:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48abc7ed-0cf4-4735-b58f-d6e86fda0d97
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=fc27e80f-fb6a-42cf-a9a1-6dacec673fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:da:18:54:8e:da:83:01:54:ae:d4:2c:e6:
                    86:de:0f:d0:5e:89:95:6c:83:16:1f:02:1b:f1:9f:
                    06:50:12:7e:9a:64:b7:23:8a:b1:ef:85:f7:03:57:
                    f1:05:63:3d:ff:65:e2:a1:11:64:f1:8a:30:1e:3d:
                    b2:b3:85:63:09:c6:2c:6a:a3:56:de:85:fb:66:6c:
                    1d:b6:86:14:ac:75:c8:43:fd:7f:80:d2:ec:d8:9f:
                    e1:f4:d9:52:60:e3:2f:54:f2:3e:c9:ea:a0:3a:8e:
                    0c:09:6a:fa:f9:55:9e:f1:de:c1:05:10:61:ce:71:
                    86:5f:8e:26:97:35:56:a2:cb:1d:c5:73:56:b1:a1:
                    be:eb:4b:27:dd:83:51:6d:9e:75:95:15:db:c4:0a:
                    4d:e1:61:44:9f:b2:8c:a4:f4:41:27:8d:16:18:8d:
                    49:92:d6:75:38:c1:c3:26:5a:c7:af:b9:5e:6e:c2:
                    f5:5b:7f:66:ee:e4:0f:eb:6e:cd:6b:f7:56:0b:1a:
                    34:71:3c:b9:45:eb:64:4e:e8:2f:11:bd:61:ad:f1:
                    c4:d1:98:7b:29:53:5a:1e:53:c8:83:11:1b:a0:69:
                    af:13:d0:85:49:c1:5f:63:a0:fa:f8:e9:fd:cc:a7:
                    59:df:5c:91:72:a2:2f:f1:92:8b:0d:a6:50:f5:0a:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8E:A4:59:7B:18:60:48:F0:EA:D0:A0:F2:11:C9:36:5D:DC:28:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/fef868f0-c8dd-3203-8c0f-9739b57ea12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.crl

            X509v3 Authority Key Identifier:
                keyid:FC:3E:84:F6:1F:FF:8C:1B:D3:72:B5:CD:B2:71:F6:63:79:2D:B6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48abc7ed-0cf4-4735-b58f-d6e86fda0d97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:74:c2:d7:f2:b4:f2:49:70:51:1d:0d:12:15:21:84:99:
         38:0b:84:14:bb:b2:a4:d2:6f:33:92:8c:37:63:f9:09:34:af:
         67:a8:24:35:23:2d:cf:ac:dd:bd:3b:ea:4b:28:6d:d0:a7:19:
         64:1d:d9:85:fb:19:ad:96:08:e0:b3:a2:95:8c:4a:4f:ff:8f:
         99:bd:2e:5c:c9:92:7d:e1:83:9e:e5:4f:51:ad:b2:19:0c:98:
         8c:c7:be:c7:80:b2:ce:74:61:60:e7:7c:bb:1c:8c:ea:b3:ca:
         67:ee:bb:4b:d8:11:ba:eb:a6:8e:96:da:3c:0e:0a:47:71:8d:
         7a:fe:83:4f:50:8f:f9:ec:a9:40:23:d6:80:f4:91:5a:d5:ff:
         b6:c1:65:9f:cc:53:9e:d2:a1:4e:d5:8c:ed:8e:05:eb:78:8c:
         b9:8d:19:20:ab:f1:92:5b:64:c7:dc:d5:25:51:0a:b4:85:99:
         42:2f:18:a9:a4:2b:2e:fd:3d:df:e7:3d:fa:2a:c4:e6:36:47:
         47:e4:6a:ba:93:c4:a2:27:e8:85:8e:91:08:d8:a4:d4:f8:8a:
         71:6d:7b:50:2c:83:6b:00:92:35:bc:87:97:a2:fa:67:d0:b1:
         bc:d6:dd:b2:cf:03:41:04:9b:5d:44:62:12:d9:8e:f2:7f:8c:
         b5:d7:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:37 2024 by rpki-client on console-fra.rpki-client.org