Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
File:                     28825819-faa0-3299-98f6-374b899c8d28.roa (raw, json)
Hash identifier:          wgzmth0YuFbOUT6LsHFhkKSKg2DpgsbYDTVy4NYD4AA=
Subject key identifier:   84:C4:67:AC:32:60:57:00:E9:D0:3E:81:09:59:05:82:B0:81:33:7B
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F43285847C4AA1221EAB9A6EC211BC280
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     14048
IP address blocks:        141.225.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:12:21:ea:b9:a6:ec:21:1b:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=5f60ba08-2d7e-4c34-845d-3baaf0d79cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:a7:a9:92:5b:6b:0c:af:d0:f7:98:33:f7:
                    f1:79:f3:67:51:73:96:3b:37:5a:de:6b:8a:18:f3:
                    95:78:23:d2:3d:bc:8f:e1:6f:7f:8b:a9:af:b7:d2:
                    cb:56:ab:cf:30:84:b6:e6:c9:94:df:fd:91:10:d5:
                    ad:5b:3d:79:d0:61:a4:e9:14:63:75:69:e8:ed:70:
                    87:68:94:13:7d:7e:6f:64:aa:f1:5a:6e:2a:50:10:
                    c6:d0:7f:12:f3:56:bb:69:38:40:f3:3a:53:19:ee:
                    fa:9f:14:91:14:fb:65:bc:c6:d9:b6:7a:fc:04:97:
                    0c:8d:20:b9:93:b6:f6:e3:ba:e8:db:10:7b:b7:df:
                    7b:4b:3e:3f:3b:5f:32:78:91:b9:e7:b8:2d:8e:c7:
                    1a:92:0f:14:55:5f:23:fd:9b:2e:9e:5b:d4:4f:94:
                    62:fc:33:a7:3c:ad:83:c2:f6:c8:08:f0:3c:ad:f0:
                    83:20:7c:5e:42:15:4b:b3:df:23:29:de:ed:91:fb:
                    8b:50:74:56:f0:2e:69:d0:5d:c7:90:b4:51:4e:46:
                    fa:aa:03:d2:ff:5d:ab:96:31:c8:a0:0a:da:c0:11:
                    35:e8:b7:01:0b:de:12:e1:e1:a4:da:66:b8:65:92:
                    88:ea:41:f7:c5:b8:7c:f1:06:e9:71:18:9a:42:45:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C4:67:AC:32:60:57:00:E9:D0:3E:81:09:59:05:82:B0:81:33:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7a:bc:09:25:35:e6:26:b8:13:5f:2b:72:46:d0:45:b7:21:
         f7:0b:24:2c:db:c1:2c:a6:7b:33:53:91:59:37:93:f0:cb:b5:
         b3:bc:64:93:6d:31:e9:ed:7f:74:12:9a:d9:fa:4c:29:b8:a6:
         8f:4e:2e:10:dc:06:3b:0d:6e:8d:6d:7e:2d:34:e7:c9:32:7e:
         4a:94:2f:fa:b8:ce:3c:d5:32:4f:36:5b:22:d6:81:fc:87:65:
         7c:3c:00:c8:e4:a4:fe:e2:b8:7f:fe:09:cb:18:e9:12:42:83:
         3c:22:76:d3:f6:05:e0:ee:e2:15:d7:28:d7:2a:dd:0e:4d:36:
         bd:65:8e:72:6c:b8:7c:76:83:46:6a:72:04:0c:d7:c8:a3:9b:
         63:1c:65:6d:be:4e:a4:a5:46:18:69:05:bc:74:89:09:02:94:
         e8:7d:bb:4e:45:5f:48:ad:a9:92:9f:98:09:fa:80:86:42:fe:
         15:22:8f:db:ff:a1:f0:ea:a2:d6:47:99:55:16:bf:1a:e4:3b:
         cd:cc:36:86:fd:11:05:62:18:90:ef:47:07:fa:95:2c:70:71:
         23:a6:c7:27:dd:29:78:00:9c:e4:67:15:da:a6:c3:26:ce:8a:
         3f:d2:08:38:51:93:48:0a:a6:d4:d5:41:e8:c1:aa:17:0b:98:
         89:67:21:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:41 2024 by rpki-client on console-fra.rpki-client.org