Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa
File:                     73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa (raw, json)
Hash identifier:          AUDPI0IAaHqDnfnx/zw9opOSv6Xt7Pp3zsg2Oieg9kI=
Subject key identifier:   48:47:D3:43:DF:9F:77:8D:AB:40:20:CC:77:C4:08:60:90:40:F1:C3
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858477EC114D547616CB376B77E40
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     399629
IP address blocks:        149.248.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:14:d5:47:61:6c:b3:76:b7:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=912274a6-a11f-4bab-a4ff-c2cec545f23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:6a:18:af:07:c3:58:51:b4:8a:b1:23:fe:
                    0d:03:cb:21:8c:22:2e:32:89:42:cd:a1:f0:4d:96:
                    89:fc:b6:5c:0f:bb:e5:e5:35:83:3a:7b:4d:3c:e8:
                    75:88:da:bb:a5:b5:b7:2d:3d:34:e4:13:bb:d5:22:
                    4c:ff:6d:96:ba:ba:9e:f1:be:f9:17:88:53:0d:97:
                    44:8f:a4:c2:02:43:56:42:cd:d7:dc:00:b3:68:b4:
                    03:0a:f3:22:2c:a2:0c:c3:2b:90:15:11:77:1d:ca:
                    42:43:16:fc:42:eb:74:a4:69:de:ef:16:bb:54:10:
                    22:1e:ce:76:2d:1d:ca:c2:5a:22:79:3c:18:21:4e:
                    c3:1a:85:79:26:53:c7:92:cc:19:19:b9:4e:87:63:
                    a6:85:bb:c8:ef:05:6b:ed:39:94:5b:09:fb:c8:2c:
                    9c:7b:73:da:a5:00:f4:bc:de:58:66:45:bf:43:fd:
                    77:a4:67:b2:de:7a:19:a5:10:e6:12:16:23:7a:57:
                    59:de:37:19:9c:e3:14:88:ef:00:9a:b3:da:33:f1:
                    57:de:31:c3:9f:2e:80:ff:31:71:56:15:1a:92:4d:
                    cf:38:76:bb:e5:44:72:dc:1e:8b:f7:4c:62:76:3d:
                    30:f0:ee:b1:76:32:76:04:7c:f7:3c:e9:66:23:94:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:D3:43:DF:9F:77:8D:AB:40:20:CC:77:C4:08:60:90:40:F1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/73cb58cc-0f0a-3c7d-8518-54f1e7a71037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:63:1d:fd:7e:d4:08:5c:78:ac:64:87:98:84:59:63:b6:db:
         18:75:2c:35:55:dd:0e:af:0f:82:f9:46:79:92:1a:f0:f7:57:
         92:e7:46:54:ff:52:19:a8:06:35:9e:df:bf:86:77:3d:c5:c2:
         a9:2b:51:ef:35:85:82:e3:5f:3c:1b:92:41:1e:9e:b1:d6:a3:
         93:6e:95:e4:ce:40:d8:e9:ac:ad:7b:46:1b:37:04:6f:6c:48:
         ad:67:29:c0:98:85:b5:cb:51:cd:19:44:8f:db:20:30:56:0e:
         67:23:4f:70:b0:6f:9c:2d:48:72:44:2d:56:50:b5:56:32:9e:
         d2:02:5e:3d:78:d5:99:fb:a4:95:b9:b3:6c:b7:81:b6:e1:57:
         45:e9:00:67:f9:f5:26:03:4e:ba:8a:00:3d:a8:8a:96:ef:57:
         3a:14:52:d2:25:e6:25:37:20:02:48:1a:26:0a:26:41:74:bf:
         6f:79:b7:6c:f8:91:52:06:ef:8e:2d:5c:85:ed:15:b2:52:71:
         bc:16:53:43:d5:84:b0:9c:d4:b6:d5:1f:a3:b8:39:99:d4:ad:
         b9:9c:e6:0f:5c:07:6f:05:10:1b:d1:6d:66:8c:20:e8:56:da:
         8b:d9:0c:ec:1a:1f:1e:d3:73:aa:8a:10:de:aa:11:d2:69:6e:
         c9:09:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org