Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
File:                     3532f2d1-a384-31f4-8652-ffe606421630.roa (raw, json)
Hash identifier:          w2jyLhZZeqi9UWSdGlFdX/0xxYvsl7LjZh6UgLFyd7c=
Subject key identifier:   8B:94:C0:84:46:12:C3:35:63:A5:18:4D:17:8C:02:94:5F:BB:E6:AA
Certificate issuer:       /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial:       010D0C9F43285847B3CC149E4B9F6288C4ABEA00
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     19782
IP address blocks:        159.28.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:14:9e:4b:9f:62:88:c4:ab:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=3827a7c9-5b4b-4c64-9161-b0a83ae1a540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:b8:4e:8a:97:cd:46:e7:11:ba:b0:04:40:
                    61:db:32:0f:52:78:19:57:6b:8d:df:97:d2:69:0b:
                    c7:60:de:df:ef:c1:d3:ab:cd:0b:1f:95:d2:03:fb:
                    8b:18:0e:6b:d8:56:16:04:38:a7:54:72:6a:cc:52:
                    a8:37:f8:70:07:e9:8b:9c:e5:2b:06:9e:bc:82:79:
                    cf:77:21:a6:05:6a:61:0b:cb:7c:0a:a9:10:68:85:
                    c6:4d:6e:0d:2c:26:2a:70:f4:08:46:ba:0b:70:f4:
                    f1:4a:3f:6c:7a:af:02:bd:31:54:c1:cd:21:0b:5e:
                    05:51:19:ca:88:87:5d:40:07:af:af:89:12:fe:90:
                    58:be:b0:55:96:94:eb:3a:e1:77:c2:04:47:8c:a7:
                    fb:1a:6f:56:6d:19:5a:08:79:98:16:7a:b9:9d:1d:
                    4c:10:bf:fe:1d:cd:ae:d8:2b:0b:7e:dc:67:05:4f:
                    ae:85:76:93:af:79:82:f9:9a:53:15:e3:25:f6:7c:
                    05:7a:f7:eb:fe:d0:fa:e4:8a:2b:5b:4d:b3:48:bd:
                    d8:26:43:d3:7d:d4:01:4d:c4:c9:bf:98:aa:3e:bf:
                    35:23:95:90:c3:ae:4d:8f:81:42:cb:d9:d8:72:6d:
                    52:5a:8c:66:11:64:d8:59:fc:8e:3b:78:dc:a4:8e:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:94:C0:84:46:12:C3:35:63:A5:18:4D:17:8C:02:94:5F:BB:E6:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl

            X509v3 Authority Key Identifier:
                keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.28.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:99:ec:3c:7a:b5:a2:44:c4:43:c5:9d:36:0b:4f:34:a8:63:
         72:25:ef:2a:3c:df:71:77:55:46:26:b3:f0:85:05:96:b5:aa:
         b1:0f:e8:3e:6b:15:f0:12:d8:6f:6f:24:d7:0d:f7:10:aa:9b:
         34:aa:79:82:81:30:c1:89:f7:b2:18:64:60:36:3a:a5:ff:3e:
         99:cf:7f:ab:27:c9:51:51:46:92:96:18:20:0f:70:77:04:3e:
         d9:b9:97:7e:b3:e9:03:d4:4f:a9:e3:02:1a:54:c5:f8:a8:9d:
         09:61:c2:38:6a:82:f5:15:8c:27:80:c5:84:4d:85:52:b8:f1:
         81:a9:90:6c:1a:db:c8:86:2f:8a:8e:7e:11:f2:44:6c:94:95:
         25:ff:f9:99:76:24:36:d1:ab:d8:61:b7:08:3f:6e:66:23:28:
         cf:67:64:39:15:e8:20:ff:d2:eb:ae:9e:f3:c5:97:c8:ff:21:
         a4:a4:f7:78:60:6d:12:3e:0b:4f:c1:2b:e1:1b:23:2b:51:01:
         3d:26:7c:29:83:9e:a2:04:12:cc:91:1a:7d:3d:40:21:ba:89:
         39:61:70:99:2c:fe:03:31:ba:e8:96:df:b2:6b:99:05:db:12:
         83:b3:6c:39:7a:b0:d1:fa:69:45:66:b8:7e:c0:5a:2d:bb:ce:
         99:aa:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org