Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
File:                     3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa (raw, json)
Hash identifier:          D8Pyeni2j//QhYsMy3CouOMR+0sRva3KQxY9hZB1TGk=
Subject key identifier:   E3:C9:52:62:E0:75:37:2D:B7:FB:CF:8D:A8:EE:4E:6A:F1:CC:7F:34
Certificate issuer:       /CN=45b0b374-863f-468e-a08d-342445e7a940
Certificate serial:       010D0C9F43285847A0414ADB6D566791AF6C3800
Authority key identifier: 59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa
Signing time:             Tue 22 Oct 2024 13:00:40 +0000
ROA not before:           Tue 22 Oct 2024 13:00:40 +0000
ROA not after:            Mon 20 Jan 2025 14:00:40 +0000
asID:                     63270
IP address blocks:        209.212.48.0/20 maxlen: 24
                          2604:9fc0::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:41:4a:db:6d:56:67:91:af:6c:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b0b374-863f-468e-a08d-342445e7a940
        Validity
            Not Before: Oct 22 13:00:40 2024 GMT
            Not After : Jan 20 14:00:40 2025 GMT
        Subject: CN=45c531fe-1074-4582-b9c1-ffec3bc474b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:75:8c:13:76:22:3d:5b:e4:bd:fc:e7:60:
                    c0:78:1d:37:5e:e1:a4:97:53:04:61:63:a7:1d:d7:
                    6f:eb:e0:b1:6e:85:09:ad:f4:96:f0:c5:b5:69:b6:
                    24:6d:7c:0a:4c:49:82:c6:08:b7:fc:36:c1:6c:83:
                    b4:e3:25:bf:46:db:9b:12:d6:1a:5f:13:bb:66:63:
                    f1:28:82:9b:ba:50:32:40:51:66:43:14:ae:f2:77:
                    78:d1:4b:22:8c:4a:a4:1e:8c:cb:13:cc:1a:4b:60:
                    70:6b:54:63:98:3d:71:c1:9c:38:2d:0d:90:06:b3:
                    a6:1e:72:78:4c:91:be:a0:16:b2:45:1a:e6:c3:cb:
                    6a:5c:5c:c2:6e:95:c1:43:ca:d7:c9:df:79:05:0f:
                    00:9b:74:56:d4:42:d1:9f:ac:cd:22:ea:ad:c1:a0:
                    48:4c:9f:9a:8d:f5:2b:d5:16:ff:c4:cc:8e:26:c2:
                    e4:8c:a7:0f:41:4d:be:b2:2c:50:5e:72:ea:f7:76:
                    8e:8a:48:f3:92:fd:08:cc:5b:e0:b2:74:59:28:b5:
                    03:17:82:53:aa:d8:f7:79:52:a5:36:87:d2:b7:9a:
                    e1:cf:be:58:2c:8f:cd:9f:60:70:40:25:01:5c:f4:
                    ad:87:cb:c4:4e:ea:f4:4a:fd:af:65:6d:9c:51:36:
                    d8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C9:52:62:E0:75:37:2D:B7:FB:CF:8D:A8:EE:4E:6A:F1:CC:7F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/3cb28ead-3381-3c31-82f4-f7a91e45f61f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940/45b0b374-863f-468e-a08d-342445e7a940.crl

            X509v3 Authority Key Identifier:
                keyid:59:FA:91:A8:EA:FB:2B:2D:FE:57:AA:23:D6:D4:D5:97:6F:BC:6A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/45b0b374-863f-468e-a08d-342445e7a940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.212.48.0/20
                IPv6:
                  2604:9fc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5a:b8:26:d2:c0:49:a3:35:37:e4:fc:2f:e9:18:f3:28:df:
         55:ad:47:1e:97:1c:17:72:61:62:4d:02:43:0c:1d:98:79:27:
         df:ef:e8:8a:4a:e5:10:16:b7:10:27:a1:17:3a:ee:0c:0a:3b:
         2d:a8:96:f2:66:a3:93:21:1f:9d:6b:6a:3b:4e:03:f1:15:fb:
         22:6f:20:61:13:ef:2b:fa:9d:3b:59:e6:15:81:18:4e:ff:76:
         df:c1:f7:04:60:ba:34:a6:3b:ec:99:bc:7d:90:51:b2:ce:bb:
         1d:44:c3:12:27:bb:d6:ed:61:0a:d7:1e:13:1c:8c:01:18:b6:
         b5:e7:4f:7d:c3:05:79:e2:36:1b:8e:12:28:d9:a5:ae:d1:1f:
         4f:f9:49:3f:55:f2:ac:35:5f:c7:d5:b3:91:01:03:98:76:d9:
         b5:e1:e1:3e:c6:34:c4:a3:44:0f:b1:18:44:95:4c:70:9a:db:
         9c:72:89:03:01:f1:98:cb:db:af:53:a5:6e:eb:b9:8e:3d:7d:
         49:78:7c:38:3d:7f:f4:b5:62:9e:03:24:7f:cf:0d:09:60:18:
         14:de:aa:99:63:5b:c3:af:e6:ca:d9:8f:17:de:a5:07:77:21:
         b4:bc:7c:dd:29:2f:90:52:17:b9:98:02:40:35:ab:d4:20:ac:
         92:1b:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:11 2024 by rpki-client on console-fra.rpki-client.org