Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
File:                     0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa (raw, json)
Hash identifier:          ytkPbPUdnLfXEbZCGw3td2BApnvMGNIHcMeplTJXoDk=
Subject key identifier:   03:72:CD:A7:C3:DA:94:25:42:7E:10:54:5A:49:27:B3:BD:69:C2:41
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F4328584789EC020C634845E52E149940
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     201917
IP address blocks:        47.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:ec:02:0c:63:48:45:e5:2e:14:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=4fd36530-6d54-450a-920c-3aac8a2909c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:20:7b:7c:ba:38:9c:2f:6d:3c:89:58:6d:
                    85:88:b9:78:87:72:ad:c8:43:99:8c:5d:44:47:4e:
                    f7:52:57:56:61:1e:ea:7c:ac:3e:d4:e0:dd:66:d3:
                    20:c4:61:64:39:30:e6:0e:83:be:7f:37:01:68:c6:
                    d7:9e:37:e6:79:0f:b9:a3:ec:ab:c1:f6:44:c8:c2:
                    af:54:b4:da:a9:14:35:6b:91:6d:97:a5:9d:ea:e8:
                    93:cc:a0:fb:39:55:c1:86:0b:ed:4a:2d:55:16:33:
                    e6:2a:d0:d4:3e:47:bf:38:dd:43:7a:7f:64:fb:55:
                    0a:40:32:61:4d:aa:a3:4b:23:c3:67:c1:97:d3:09:
                    ca:b6:95:33:7f:cb:6b:67:8c:80:ff:1e:1a:cb:fb:
                    7c:50:ed:78:2f:50:6a:64:5a:5f:31:e2:33:86:44:
                    19:bf:ac:98:ea:ad:80:9e:b4:ad:fd:c1:62:94:53:
                    29:4b:05:77:de:cb:1e:8c:1e:74:de:c4:6a:a8:e4:
                    99:66:62:17:49:41:c2:bc:28:e6:43:b8:2d:26:ce:
                    c5:ab:5f:13:c6:b1:8a:9d:ba:1d:ac:f5:58:57:80:
                    b6:eb:77:ed:f3:29:a1:29:c2:1b:08:e6:b0:a6:47:
                    ce:f5:e9:87:c4:8a:f5:98:3e:56:f2:fe:73:7f:99:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:CD:A7:C3:DA:94:25:42:7E:10:54:5A:49:27:B3:BD:69:C2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/0f0f87c9-4fe3-3b07-8499-fa609e122d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:61:3d:5d:73:e0:33:13:9e:23:2c:79:5c:bc:23:26:7b:04:
         89:19:fe:e8:bd:b8:dc:ee:36:7e:2d:b8:8a:9d:5d:a6:86:ee:
         7c:d5:8e:a3:63:52:b7:07:fe:a5:90:51:08:b2:34:55:f8:53:
         ae:d1:1a:0f:be:33:d8:9e:fc:a7:22:cf:71:7b:ff:b1:97:6a:
         fe:0f:9c:ba:78:ed:2c:d2:34:37:f8:86:4f:c1:74:25:c5:ac:
         2b:2a:06:70:27:92:b6:f1:0e:3d:51:fc:ca:73:55:bf:44:00:
         d5:e2:e1:2e:ca:b8:a3:83:6c:d7:0c:52:c2:ed:19:5c:80:72:
         17:d4:fc:8d:10:05:fe:8e:ff:50:4f:51:d7:51:f0:36:fd:11:
         43:a7:5e:f9:02:e7:47:6a:c7:e6:41:fc:d7:98:fe:10:90:70:
         ed:e6:2d:b9:52:e0:e6:89:e1:2a:17:51:a4:73:43:51:f8:9e:
         6c:f6:04:41:1f:32:5f:48:e1:99:4d:99:dc:bb:23:74:1b:0b:
         ce:6b:7b:af:29:f4:2b:af:ba:ff:5e:d2:dc:ab:76:0e:e2:fd:
         c0:b3:ae:be:b2:23:66:79:fd:6a:7d:f4:12:93:6a:92:2f:3e:
         9e:a2:c1:2c:52:af:64:57:31:75:ed:ab:66:b2:ba:af:d4:af:
         0f:18:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org