Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
File:                     19707577-a550-35cc-9aa1-82013a93096f.roa (raw, json)
Hash identifier:          ijgfb109kuN/3mTT85BhGDEZEOgQKQAc/+IQVPjQvKY=
Subject key identifier:   37:A1:FA:3F:3E:26:71:72:9A:BA:F4:1A:FF:EF:8C:D8:A7:D4:A8:6F
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F43285847EFEF807384ABC47FBB09CE00
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     14230
IP address blocks:        2001:49f8::/32 maxlen: 48
                          2604:9b00::/32 maxlen: 48
                          2604:ac40::/32 maxlen: 48
                          2607:fb20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:80:73:84:ab:c4:7f:bb:09:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=48c147e1-5aec-4d50-946d-8df08434c1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:e4:f4:e7:aa:c2:bd:c1:80:5a:c7:76:ce:
                    97:e3:bb:7f:fc:fb:cc:8d:02:c9:4a:ef:66:02:b7:
                    5b:46:ee:16:4c:9b:0e:c9:54:75:5e:97:a3:49:c6:
                    80:39:af:fa:cb:68:3a:88:1d:33:07:05:e7:97:d6:
                    82:ec:02:c5:78:dc:62:a6:f2:fd:7d:80:44:db:75:
                    0d:cd:9d:37:f7:bd:d6:ee:72:9a:05:43:61:29:a5:
                    5d:ba:54:1a:06:97:9c:c9:49:3f:db:72:0d:40:cb:
                    e2:ba:7a:8d:7c:64:5f:4b:84:85:10:2c:c0:e5:c3:
                    a2:a2:42:22:2d:f0:53:35:bf:81:ee:96:0f:13:89:
                    bc:61:15:2c:17:9c:d1:3f:ab:13:54:10:65:6b:af:
                    13:1b:e0:93:f7:32:01:25:87:01:0d:12:93:55:7b:
                    68:8b:2b:9e:a5:b9:4e:c2:a1:c2:8a:f3:1d:56:49:
                    5c:01:ff:99:93:7b:cb:df:ff:dc:e2:09:02:90:4e:
                    37:d1:3c:ea:63:86:28:8d:be:71:51:46:4d:82:55:
                    8e:62:d0:3e:76:f6:3a:df:49:82:89:9d:b7:71:cd:
                    39:20:fa:71:d0:38:3c:51:75:f8:a2:18:0a:9f:19:
                    cd:fe:45:63:ad:18:db:84:30:fb:b5:c9:c9:aa:67:
                    b8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:FA:3F:3E:26:71:72:9A:BA:F4:1A:FF:EF:8C:D8:A7:D4:A8:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/19707577-a550-35cc-9aa1-82013a93096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f8::/32
                  2604:9b00::/32
                  2604:ac40::/32
                  2607:fb20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:62:9e:d4:b1:61:b2:21:a8:ab:02:07:0f:4d:92:83:51:
         84:27:4e:f8:6b:a8:b0:f8:90:ef:00:b3:11:64:4e:78:08:01:
         80:fe:f9:15:bf:22:17:d9:0f:29:5f:53:aa:dd:e5:82:1d:be:
         60:7f:7b:5b:23:74:54:b5:40:4d:95:dd:fb:c3:40:c8:97:ac:
         4b:f8:92:de:bc:02:d2:47:46:ec:07:24:5a:09:92:78:81:4a:
         2b:63:d2:7c:d8:7a:5c:d4:73:2c:4d:f7:32:04:03:6f:41:ee:
         d6:81:8e:9d:37:4d:e6:25:6b:15:3e:f7:92:e3:9c:0e:16:ff:
         20:5f:38:c5:58:98:f0:37:41:03:41:24:7d:ba:bf:d9:97:1b:
         f9:95:6e:ac:89:73:cc:b0:d6:e7:bb:14:62:7e:23:a8:07:7e:
         24:c1:f2:33:eb:ea:ef:55:d0:61:a2:fd:52:da:d0:a5:3d:58:
         44:8f:30:94:6e:ee:1b:e1:a2:cd:7d:67:be:b1:24:ce:58:99:
         75:10:c4:cb:72:0e:7b:e0:f5:ce:98:b7:9e:b7:10:c9:e0:11:
         b8:1e:f3:18:e7:e0:f0:0f:b3:6c:2d:e5:48:ac:c1:28:03:ba:
         0a:7c:ec:2f:a7:09:bb:00:e9:42:2a:92:34:13:f1:6e:60:92:
         d7:14:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org