Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
File:                     7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa (raw, json)
Hash identifier:          oFAUFicdgk5oEGzL1ozwtS3fWNCHME6YUddLpo3Lk8o=
Subject key identifier:   FC:C8:1D:49:43:9E:DE:F4:25:D1:D6:24:3B:6F:E1:E2:CE:BA:1F:92
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F43285845C01396210FBEA1F27271C300
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     399629
IP address blocks:        149.248.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:96:21:0f:be:a1:f2:72:71:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=bf9dfb72-74a6-44f4-882c-0261e28ae854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3a:9f:6f:67:12:bb:15:79:91:15:80:17:a5:
                    2f:7d:78:af:9c:f7:cb:cb:bd:88:0b:14:8f:d9:89:
                    61:93:11:4f:b5:1a:9b:51:08:5a:ee:e7:fc:f8:c7:
                    da:f4:e1:c9:b4:4f:9f:5d:f3:9d:04:0f:fd:5c:66:
                    eb:a5:cf:ae:78:69:ad:18:22:8d:c1:2b:17:40:fd:
                    b1:d7:87:c9:16:91:d1:55:34:77:00:53:87:e2:0c:
                    35:b8:7b:9e:4e:2e:9b:4b:0b:e7:55:80:dc:a8:18:
                    33:13:e3:41:9b:d9:ae:ba:9f:b5:89:2e:10:c9:bc:
                    1b:52:41:1a:d3:cf:42:92:af:09:73:0c:d6:69:97:
                    49:06:99:0e:79:32:e4:ad:92:18:f3:7d:86:98:0b:
                    dd:71:2e:ba:c7:89:5c:d5:16:86:ef:6a:4c:a4:1b:
                    ee:9a:b3:3d:fb:18:c4:ec:48:89:f5:d6:c8:ac:67:
                    68:02:80:ea:20:a0:8e:26:18:93:10:80:23:a6:a9:
                    64:ef:db:5b:ce:e6:e2:2d:b4:93:c3:c9:89:88:5e:
                    cf:8f:59:f5:cf:97:b3:86:60:dc:20:db:9f:49:8a:
                    05:7e:ac:26:b4:bf:ca:69:3c:1f:8f:f9:51:60:a2:
                    de:ed:59:64:75:02:4a:ba:9a:03:45:f6:07:33:c1:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:1D:49:43:9E:DE:F4:25:D1:D6:24:3B:6F:E1:E2:CE:BA:1F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/7dfb59f8-ab45-3094-8938-a5433bcdc4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.248.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f6:a6:09:47:c0:64:5c:09:ae:54:da:81:cb:6a:0b:3f:af:
         e7:3c:72:69:33:ed:76:df:c6:8b:a8:bb:45:64:a9:b2:f5:01:
         0f:15:e7:7e:db:10:d7:fd:c9:be:f1:c1:e0:58:29:31:28:2b:
         b9:db:a1:05:2a:38:a2:6e:ba:cc:42:8a:41:90:12:8e:0d:fe:
         70:6b:fe:8f:67:12:e9:c8:ba:5e:63:b6:d0:92:95:aa:80:5b:
         b8:24:fe:d1:fd:8a:3f:e1:f7:be:19:a0:f7:17:eb:d5:de:80:
         51:f5:af:0f:b9:93:5b:07:f2:ba:16:fa:61:be:a1:eb:95:b2:
         48:5c:07:61:3c:ac:70:93:c7:17:05:d3:34:ca:ef:88:67:a0:
         c0:63:84:27:65:5b:e3:9d:98:51:ea:9d:5d:b4:f7:6a:a9:2c:
         76:8f:bc:53:d9:37:9c:52:e7:70:59:1b:73:60:24:63:20:78:
         21:27:c1:89:b1:06:50:9d:3d:78:96:d5:26:21:18:06:00:69:
         9d:ad:a0:ac:f3:08:84:ee:b6:98:9e:80:10:f2:26:6b:75:d9:
         91:b9:cc:38:87:23:47:ef:92:c0:3b:a9:1e:af:45:b3:97:94:
         85:07:c8:3d:92:47:98:20:18:da:f5:fd:16:67:d7:30:77:b3:
         b1:9d:a0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:20:57 2024 by rpki-client on console-ams.rpki-client.org