Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
File:                     564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa (raw, json)
Hash identifier:          DrI4uQqYol3uIKaZU6zmoCgRQjpMEljG+MchHfY+u3M=
Subject key identifier:   63:28:E0:1F:92:D2:1D:65:CC:B6:DB:3C:58:E5:F6:5E:98:73:4F:6D
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285847792BB9545D3C9FD7B055F880
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     30722
IP address blocks:        47.53.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b9:54:5d:3c:9f:d7:b0:55:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=8aac91ed-61f8-4d4e-9631-dbc64bbf81a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:05:8b:f1:f8:8a:2b:11:5d:1a:a3:d7:e9:
                    0b:d0:f5:b8:ed:ba:4a:10:3b:7e:a7:9d:c5:88:ae:
                    59:e4:77:3f:ea:07:c6:2b:91:1a:3a:8a:c7:72:aa:
                    27:8a:77:a8:99:df:82:57:6e:a2:31:7a:e5:0a:07:
                    fd:d9:f9:59:31:00:4f:cd:62:57:25:70:b7:01:ff:
                    1d:bc:34:91:36:d4:bf:c1:41:67:dc:fc:50:e5:74:
                    68:e0:03:4c:34:98:df:c8:8e:92:3b:83:35:17:9b:
                    d5:7c:23:7e:5b:64:2a:71:12:cc:5c:f0:8d:e9:2f:
                    de:73:c5:04:dc:a8:8e:60:7e:1a:f3:0d:58:78:34:
                    82:42:f3:6f:ca:70:a1:06:92:75:6d:50:73:00:16:
                    d5:10:35:39:22:b7:7e:6b:26:0c:43:9e:00:d3:45:
                    89:3b:ca:08:71:70:83:ae:b5:ff:cd:57:38:75:4b:
                    83:d9:3b:05:74:b3:02:78:61:7a:2c:0b:3d:35:a0:
                    a5:13:f0:fa:b0:48:c0:e2:74:93:36:5a:b8:17:1b:
                    cc:7a:75:37:4a:fe:b2:c6:f8:1f:9d:70:e2:d3:4a:
                    16:43:1c:8e:35:ca:4b:aa:8c:e4:2d:a0:3c:5a:18:
                    27:a5:5b:08:d8:7e:5e:2b:b1:a4:8a:d3:22:17:74:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:E0:1F:92:D2:1D:65:CC:B6:DB:3C:58:E5:F6:5E:98:73:4F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/564f16c6-fbe1-34c9-9e12-1d10d74d59f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:26:09:62:42:dc:dd:2c:ab:e0:9a:d0:46:3c:6e:40:7e:9f:
         9a:cc:85:a6:28:54:b8:3c:e4:a3:1b:35:58:8d:d9:a9:6b:ce:
         96:c7:d7:1d:9b:0d:9d:68:7d:a0:75:6a:aa:2f:40:35:ce:a2:
         3f:05:3c:23:8a:8b:bd:eb:c7:c8:12:f3:08:4e:0a:06:49:ec:
         5d:af:fb:7d:74:06:54:c2:60:b7:0e:5b:7b:3a:72:6b:8f:66:
         a2:26:21:f7:8b:d3:f5:7f:a5:f5:aa:99:6f:8a:64:7d:1c:67:
         65:3b:dc:88:81:2c:30:b1:7d:cb:be:1f:b9:ae:b8:3f:13:ed:
         67:7a:73:7b:9d:2a:3e:02:b3:76:0c:c6:f0:5e:ce:fc:a8:9e:
         e9:29:ac:b4:dd:2d:4a:9b:82:18:f8:d3:01:30:c8:c4:f9:b2:
         bc:26:45:e4:dd:98:c4:f3:75:91:eb:73:6c:29:57:c2:63:26:
         61:1b:fd:6e:6a:4d:17:37:0e:c3:f6:44:0b:9d:7f:5f:ef:0d:
         dc:5c:83:4a:ce:b3:8d:95:09:fa:54:f0:a8:c3:8d:dc:e8:63:
         5f:25:57:0a:b1:da:26:0f:56:0e:0f:a7:ee:59:20:ca:05:12:
         ba:2b:bd:4d:4a:ea:46:b6:dd:24:5e:98:72:a4:1e:2d:9d:88:
         b3:92:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:55 2024 by rpki-client on console-fra.rpki-client.org