Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
File:                     628b6158-a17d-3d6e-8752-71761eeb9967.roa (raw, json)
Hash identifier:          TLi1eu/IwqUwWlJkxBn6sG5PqrNkSUmqsmeVz9rsgz0=
Subject key identifier:   15:74:0A:D8:2B:2B:F6:AA:EE:6C:61:AD:D5:C5:AA:1D:C3:7E:28:2A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0DFC292C746161D206B00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     20115
IP address blocks:        47.44.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:df:c2:92:c7:46:16:1d:20:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=d2739725-4efd-4cd8-8c8a-aca241fa1b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:10:70:35:c9:08:a5:9f:8f:68:d6:e2:d1:
                    b0:f7:c2:0b:1b:97:69:3d:82:10:6f:15:50:68:3f:
                    ca:dc:c9:2b:ff:35:21:ae:48:5e:37:97:7a:d6:20:
                    ca:d1:f0:dd:29:97:4a:09:49:9c:1d:c3:07:2d:74:
                    39:43:b0:20:1c:fb:cb:7b:a6:29:0e:16:bf:ac:39:
                    c6:2b:95:c5:85:70:b3:bd:5a:20:ee:18:5a:a3:b9:
                    95:18:a6:08:81:74:d5:46:22:32:86:a6:6f:a0:05:
                    aa:79:6a:99:6a:3c:b1:e6:c6:3b:46:a5:7a:85:36:
                    a5:af:1c:e0:ce:c1:77:bb:df:f0:b2:e0:b7:45:28:
                    bd:cd:d0:52:7d:4a:71:48:47:7a:a8:e2:90:ff:a1:
                    c4:32:81:2b:40:f3:a5:b1:79:c1:f3:fe:93:ce:cf:
                    02:1e:54:78:d8:3d:40:08:eb:04:14:0b:93:0e:87:
                    24:b6:20:65:a7:3d:0b:35:22:e0:93:bb:4f:e8:a7:
                    d9:f7:ef:5b:a4:3c:85:5a:29:3e:17:1f:3e:29:4a:
                    38:ca:2a:a4:98:48:62:06:42:44:6c:ef:dc:78:26:
                    7d:b5:20:86:e0:7f:7f:75:a5:19:28:e8:34:96:a2:
                    a0:fa:1e:84:d2:7c:75:58:8f:74:5c:e1:27:4e:53:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:74:0A:D8:2B:2B:F6:AA:EE:6C:61:AD:D5:C5:AA:1D:C3:7E:28:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/628b6158-a17d-3d6e-8752-71761eeb9967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a2:30:dc:d6:a1:7e:ce:72:75:f8:cf:c9:e8:c1:fe:92:f7:
         e6:9d:96:a0:9b:49:fb:79:7e:a6:45:a8:4c:d2:3d:00:33:8f:
         e4:16:3f:d4:c8:12:7d:37:79:d9:1f:fa:27:1e:d1:ca:dd:20:
         97:44:21:39:53:a6:cc:37:ea:83:86:45:4a:53:94:15:ad:b4:
         76:4c:9e:18:68:5b:23:3f:66:9e:14:42:bc:0b:30:76:8b:7f:
         85:5a:9d:33:97:89:5c:a5:15:cb:ee:b7:1a:d9:1f:04:0c:93:
         66:e7:87:99:65:0b:9a:5d:f5:8e:e5:f8:3c:9e:c5:d2:97:65:
         c0:c9:42:13:6d:c4:c6:fc:25:40:b6:3b:d1:ae:83:0b:ea:bd:
         d7:75:a8:ea:47:2a:f9:71:b0:14:3a:d5:9b:cf:16:06:5a:48:
         8c:c5:af:63:69:d7:31:d5:9f:f4:a3:77:35:8f:42:0e:16:2a:
         7f:b7:b0:93:dc:f5:29:62:c4:11:b5:2e:26:e7:82:78:5f:c2:
         db:1c:6e:2c:b2:ee:3a:93:97:04:d5:74:ae:ec:5d:da:d4:34:
         50:b4:59:4d:45:b6:39:87:d2:84:41:6f:4d:c5:18:71:5d:32:
         e8:b5:e6:92:a4:08:b6:19:80:38:60:48:7b:e9:a9:d9:d7:80:
         90:38:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:09 2024 by rpki-client on console-fra.rpki-client.org