Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa
File:                     bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa (raw, json)
Hash identifier:          pLDJd2uFhuGgtVFJ0aWn/UKj66Nib1Y9Z5RxufB98I4=
Subject key identifier:   CF:69:D4:54:E7:BE:73:2B:95:B4:94:17:85:9B:9A:E0:CD:B0:3A:8A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A18AEF5A26743D80054280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     33588
IP address blocks:        47.28.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a1:8a:ef:5a:26:74:3d:80:05:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=26f20ff0-87c8-48a9-a8ee-2e14688fe110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:dc:a2:fe:36:38:30:27:b2:76:9d:ee:99:
                    e9:8c:3a:59:bf:dc:d4:70:0f:af:62:42:ca:a2:98:
                    a1:d9:01:a4:b8:25:4c:a2:15:c8:44:b0:cb:ba:ba:
                    29:dc:61:80:eb:b1:49:f6:a4:e8:d7:14:e3:e9:53:
                    36:90:0e:99:d4:65:a3:54:7c:cb:bc:fa:ad:74:d9:
                    1d:8a:ef:24:79:b3:8b:0c:60:b9:79:b2:4c:88:48:
                    ee:52:7f:43:9d:bc:1a:c7:2d:a8:15:1f:f2:6f:9c:
                    05:93:95:48:fa:73:c1:59:0d:69:e1:e4:1a:c0:00:
                    41:74:73:22:0c:43:31:03:ab:b3:21:cc:da:f7:d2:
                    ac:2c:f7:d7:41:e3:c3:2f:7d:71:8c:5a:e8:84:01:
                    16:55:4f:18:4e:7e:d0:6c:0e:47:fa:76:f3:17:11:
                    40:32:a8:25:99:d0:c8:c6:f9:2f:21:38:bb:d5:7e:
                    8e:b6:2d:14:b3:c0:7d:e8:a9:f3:4d:8b:50:73:1e:
                    24:84:66:6d:78:b3:23:ce:ac:87:59:1b:55:86:24:
                    29:28:13:40:79:94:67:77:93:dd:d9:72:77:72:2e:
                    7a:b1:20:ca:1c:96:45:76:d4:f2:16:1c:8f:09:6a:
                    7b:66:b9:c4:e1:1a:d6:57:8c:03:51:f1:40:7e:f9:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:D4:54:E7:BE:73:2B:95:B4:94:17:85:9B:9A:E0:CD:B0:3A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bf231238-4c95-3e98-bd1a-7b99c8fe177f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.28.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:31:5b:ba:3f:41:d3:8a:97:4b:37:7e:5a:fe:a0:f6:6a:
         28:88:2b:10:39:28:e8:1e:fd:06:86:01:a7:0d:10:0d:ab:e9:
         50:ae:f1:28:b1:65:a7:ec:66:e5:6a:03:ac:82:9d:de:e3:81:
         98:a7:21:92:93:95:90:00:64:6d:30:cf:bf:b5:70:2e:28:68:
         01:43:40:0c:95:db:1e:3f:fb:71:23:20:cd:50:8f:dd:46:cf:
         59:ae:63:c0:2d:4b:c7:87:da:1b:85:94:72:d9:a7:8b:26:df:
         8a:9d:15:32:e0:70:0b:c6:33:74:f4:62:89:de:72:67:b1:a7:
         67:a7:4e:4d:01:9b:dd:af:77:04:5d:f5:c2:47:69:5d:21:fd:
         7a:42:c1:48:1e:7f:d5:e1:8c:6c:fe:b7:41:d0:fe:9f:1f:64:
         0f:a3:ec:77:cb:1c:08:9e:14:46:1f:64:f5:ef:43:f8:50:07:
         65:55:15:a0:2a:4b:3f:ff:79:f3:b2:4a:13:b1:94:89:32:9e:
         2d:bf:55:c6:39:61:d2:95:dc:7b:b5:0e:fb:41:ea:8f:71:78:
         e7:43:9f:e6:4f:94:84:5f:41:9c:d0:45:14:a4:38:8a:3e:55:
         cf:f7:b0:87:59:b4:a0:93:53:da:de:de:c1:2e:e9:bc:e4:81:
         e8:f0:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:19 2024 by rpki-client on console-fra.rpki-client.org