Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a132fb4-7cf2-36a2-93c1-92fed43c8191.roa
File:                     1a132fb4-7cf2-36a2-93c1-92fed43c8191.roa (raw, json)
Hash identifier:          Zht0QGA9N7vqNFLiPB3MOqYYV14Us1hWN6gZ3fM5xtQ=
Subject key identifier:   CF:34:37:07:0E:05:0C:CB:AE:C7:AC:BA:14:69:F7:AB:27:8F:2E:FE
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A187002043A797CDC06300
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a132fb4-7cf2-36a2-93c1-92fed43c8191.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        47.2.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:87:00:20:43:a7:97:cd:c0:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=af65fe3c-1922-418d-a7d4-399a0c9e56a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:a5:2b:6e:ec:c7:78:2d:e0:8d:ea:56:22:
                    f3:b6:df:30:64:0a:97:eb:a7:ed:cb:84:64:72:9c:
                    f1:bd:5c:ed:c0:46:a8:3a:fd:50:ef:87:31:c1:8c:
                    56:e3:17:7e:75:3e:4d:0c:06:a9:02:56:b0:20:c2:
                    b9:e0:e9:df:5f:7a:30:6e:d7:e4:ea:de:4f:0a:b2:
                    57:9f:21:42:ee:98:4e:53:46:98:07:ff:36:f8:a3:
                    2b:8a:17:75:df:38:2a:3d:f7:92:df:26:ce:da:31:
                    c1:db:70:4f:e2:43:04:bb:0c:82:51:0f:36:c3:de:
                    b0:2e:81:c7:47:2c:60:78:1f:a7:18:df:34:a5:d6:
                    90:fa:92:29:81:80:8f:42:f0:47:cc:de:11:07:5a:
                    c2:ad:4f:15:7c:ea:e1:92:64:bb:69:04:bd:3f:3b:
                    c3:40:74:2e:02:ff:2b:26:72:b2:a3:16:b9:a9:f7:
                    22:3b:39:c7:f2:b4:c2:ae:2b:06:08:8c:26:d0:0a:
                    63:80:17:41:68:2a:24:3e:a2:2d:e5:e7:7a:54:04:
                    2d:a0:48:c5:91:27:66:7f:09:12:2c:cd:0e:84:67:
                    f4:f3:7d:be:9b:38:8a:6c:ba:a9:77:8d:43:5d:c1:
                    04:3a:00:e5:75:90:be:d2:69:3c:c5:dd:f9:f6:eb:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:37:07:0E:05:0C:CB:AE:C7:AC:BA:14:69:F7:AB:27:8F:2E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/1a132fb4-7cf2-36a2-93c1-92fed43c8191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.2.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:69:0e:ec:70:1e:97:aa:b2:8d:38:a5:ca:53:ea:18:be:
         ee:a1:e9:8a:e3:74:85:e0:ed:2c:33:da:95:42:5a:53:9d:91:
         d9:50:37:5b:e8:c3:d4:48:e5:33:4b:4d:c2:6c:fa:0c:ad:84:
         4a:1b:93:c4:f8:50:34:53:0c:29:58:a9:20:97:86:e3:cc:d2:
         38:4a:ad:d3:54:76:66:0e:bc:54:54:fa:a4:21:d7:25:15:54:
         0e:69:91:df:75:bd:15:e9:a2:c5:58:86:15:11:90:33:9c:37:
         57:9e:90:a0:33:9d:40:03:11:af:f9:07:ad:69:3e:8e:95:70:
         d5:11:23:aa:41:26:fc:f6:99:7e:fc:03:fc:88:83:b6:4d:19:
         00:28:b5:3b:d8:ae:a0:03:9b:3d:75:53:bd:f8:e2:be:2c:71:
         c8:9d:b4:b9:e4:64:f0:06:18:0d:ce:22:bc:df:bb:ae:e3:9a:
         34:ad:b3:cc:2b:87:54:75:12:79:19:dd:59:95:d2:db:61:ba:
         89:1b:7e:53:23:7d:36:8f:f7:23:4d:f2:9f:86:de:75:ca:4d:
         28:53:82:cf:bb:2d:7c:e1:51:9a:99:48:b3:1d:53:95:e9:14:
         c0:63:f0:e6:a7:8a:22:0b:f4:c5:08:f8:4a:1f:8c:a5:5a:ef:
         21:c4:dd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:03 2024 by rpki-client on console-fra.rpki-client.org