Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
File:                     49ddedec-016b-34d5-986c-e2759d2fbdbd.roa (raw, json)
Hash identifier:          rPJaytvKRKtoRdGGPb+usNvjXZktulT1eVAvaBvIJG8=
Subject key identifier:   FA:D6:9A:63:11:89:3B:7A:D4:ED:28:61:24:7A:D8:90:33:4D:73:69
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F432858473386EFE4057C1B8F757D8D00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa
Signing time:             Fri 13 Sep 2024 14:18:03 +0000
ROA not before:           Fri 13 Sep 2024 14:18:03 +0000
ROA not after:            Thu 12 Dec 2024 15:18:03 +0000
asID:                     8560
IP address blocks:        198.71.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:86:ef:e4:05:7c:1b:8f:75:7d:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Sep 13 14:18:03 2024 GMT
            Not After : Dec 12 15:18:03 2024 GMT
        Subject: CN=8d29bf14-390e-4295-b151-f983031c70cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:87:0d:29:28:75:f3:c2:3f:d6:9e:33:18:d9:
                    02:81:ef:4f:52:a3:18:5b:7c:8e:90:bb:a7:b5:2b:
                    c4:7b:e4:5a:de:7f:32:96:59:b2:4f:7c:b5:c7:af:
                    95:a4:c8:bc:ba:3f:84:3a:78:2c:09:37:65:27:4d:
                    1e:1b:20:77:01:16:8e:23:1b:67:f2:a7:cd:42:92:
                    7a:61:77:f5:32:fb:9f:2c:4c:e9:e9:f1:93:f0:e8:
                    e5:40:96:fa:5a:fd:71:80:45:e3:b4:f9:52:9d:3c:
                    31:b5:5b:a0:34:95:f3:64:7e:49:23:c0:76:58:ac:
                    1f:5e:47:df:77:12:e3:96:5b:53:b8:2c:fb:f9:06:
                    9a:36:be:e1:c4:b1:ce:14:95:ea:7a:a8:07:7d:4c:
                    5d:58:a2:72:10:bd:73:5a:c3:fd:01:2f:83:75:aa:
                    03:a0:6e:ba:ea:d8:0e:fd:ae:05:99:55:15:ad:e7:
                    dd:8c:9d:b4:8b:e3:08:af:10:39:d4:f5:fc:d2:97:
                    85:56:2e:65:92:52:e3:19:32:22:ad:63:8c:ef:19:
                    00:ee:ee:91:3b:60:d4:91:7f:aa:92:b7:82:05:be:
                    89:aa:c0:5a:ce:8b:59:8d:62:b6:d3:9c:18:8f:a9:
                    91:94:d4:3d:ac:e8:7e:30:82:a8:ec:d7:32:4c:34:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:9A:63:11:89:3B:7A:D4:ED:28:61:24:7A:D8:90:33:4D:73:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/49ddedec-016b-34d5-986c-e2759d2fbdbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:67:c2:28:81:01:ed:cb:1d:f9:2d:2f:ff:63:94:6f:18:42:
         b8:d2:44:0b:da:dc:4a:c9:2a:2e:a7:a9:5c:47:61:6a:3a:2e:
         94:53:8a:ec:b7:9b:cd:9b:df:0d:69:df:74:18:bd:e8:54:16:
         d1:c1:af:b2:c4:5c:b3:0f:a8:62:8f:86:3b:1f:b4:96:f7:03:
         d3:48:84:76:70:4e:41:24:44:80:a9:9f:14:bb:99:02:90:1c:
         c5:ee:b5:4f:82:89:47:f8:d8:7a:fa:4e:f8:34:8e:31:f4:b2:
         51:42:24:48:68:67:e0:10:aa:62:ab:e7:32:70:df:2f:72:11:
         8c:6f:c8:8a:2c:59:0d:2e:e6:3b:54:de:58:f8:5d:03:de:a3:
         fd:c1:d4:ef:43:c7:f8:6d:7a:17:ac:82:90:55:4e:af:54:9b:
         1e:ae:99:88:e2:90:20:cf:70:bc:50:eb:6e:6c:f5:d7:e0:e3:
         f3:cf:6f:7c:b6:6d:3e:af:f6:08:7e:c8:e7:03:38:bb:4b:68:
         b8:df:73:6e:b9:4e:02:3a:88:42:e9:92:92:9c:70:6e:ce:6a:
         56:76:dc:00:10:6f:30:9c:6e:7a:8b:d1:92:58:13:91:a5:25:
         d7:09:28:99:a8:85:54:61:56:e7:8f:0d:f2:2e:30:10:b1:ad:
         6e:68:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org