Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbc8bb86-a50d-3033-bca5-67992526d0f9.roa
File:                     fbc8bb86-a50d-3033-bca5-67992526d0f9.roa (raw, json)
Hash identifier:          RnYfY6O4zZ+2W+r9P4w/b6c8ClDOcoxPxFIyO8sbv1I=
Subject key identifier:   4B:98:96:BA:D5:39:B0:C0:BB:A6:7F:4D:82:72:3E:37:AC:A9:7B:25
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584722A0C5A56C124539F3854180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbc8bb86-a50d-3033-bca5-67992526d0f9.roa
Signing time:             Sat 07 Sep 2024 13:00:41 +0000
ROA not before:           Sat 07 Sep 2024 13:00:41 +0000
ROA not after:            Fri 06 Dec 2024 14:00:41 +0000
asID:                     8052
IP address blocks:        159.111.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:22:a0:c5:a5:6c:12:45:39:f3:85:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  7 13:00:41 2024 GMT
            Not After : Dec  6 14:00:41 2024 GMT
        Subject: CN=f443ec7b-2898-460b-afae-3415c33fab45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:24:77:b6:dd:e5:7a:c4:84:5d:45:d0:aa:
                    33:5a:fd:dc:93:d9:01:3a:7d:35:52:2e:14:6b:ee:
                    f7:d5:5b:d3:a4:f4:d4:25:1b:d2:1e:cf:6a:60:c9:
                    a5:82:ec:47:f3:df:72:dd:9d:6f:60:33:53:c1:90:
                    5d:0b:49:4c:a6:86:73:1b:8f:81:2d:67:a9:25:e9:
                    ab:0b:0b:97:48:7a:ab:e9:a1:6e:fb:12:f5:f5:bf:
                    b3:ec:c4:c3:7e:cc:98:75:79:4c:51:2b:4a:6f:b7:
                    a7:ce:f7:3a:48:93:8b:2e:5b:4b:dc:5a:8a:7b:32:
                    8f:45:1a:7a:c1:a4:09:81:91:dc:b8:ea:2f:b2:a6:
                    a2:3a:34:4d:4e:15:b6:b8:e9:a8:4a:11:1b:c6:46:
                    bb:a2:b0:4f:36:df:7d:48:fa:72:a3:c3:a3:da:a0:
                    79:df:ae:04:a7:60:8e:e5:eb:df:4b:2d:fb:fa:79:
                    fb:f2:75:26:40:37:37:72:b2:ca:18:79:2a:83:fd:
                    e7:80:dd:7b:09:32:52:21:2e:6c:b9:1b:96:f0:16:
                    6a:ce:e5:e5:32:84:bf:b5:19:ea:54:58:3c:6a:b6:
                    27:e4:e1:f5:3b:b5:e6:91:89:db:d7:f8:00:63:77:
                    7b:93:6a:90:16:dd:d7:d7:a7:3c:34:7c:a2:86:83:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:96:BA:D5:39:B0:C0:BB:A6:7F:4D:82:72:3E:37:AC:A9:7B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/fbc8bb86-a50d-3033-bca5-67992526d0f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:29:fa:08:35:8f:85:8e:23:21:d0:40:68:c5:48:f7:4a:
         3f:5a:25:6c:a9:b1:8c:ec:c9:41:a2:55:1a:f8:11:c3:ad:9c:
         28:db:20:e1:62:82:1f:51:04:70:96:ac:ef:0b:f2:66:44:df:
         dd:c4:35:2d:73:26:02:4e:46:98:3f:2d:16:0e:ab:59:00:ae:
         60:78:bd:48:8a:a3:1d:c1:1d:32:ee:25:52:26:5d:4c:10:a0:
         3d:a2:be:3e:33:b9:59:62:6e:71:55:c1:9b:96:73:6d:ca:ee:
         2e:a8:c4:7e:29:7e:1c:09:fc:23:99:48:41:3b:50:1b:ed:24:
         e4:72:1e:65:81:2e:da:15:d7:e2:66:50:fb:77:c9:5e:f6:64:
         89:44:f7:c5:64:1e:95:3a:f8:cb:9c:ce:b0:65:b0:8e:16:0f:
         87:8b:ae:7d:78:fc:e4:23:59:a3:0b:31:2c:b6:e8:e1:78:4d:
         45:f6:3c:4a:11:33:83:52:f2:06:06:99:58:e9:38:f8:af:5e:
         fa:e9:a2:4e:d8:9c:05:d5:6e:70:27:4f:b7:e4:dd:66:e2:85:
         a9:07:d1:ff:03:cb:02:ab:4e:97:f9:d7:71:d0:27:67:21:da:
         95:f0:eb:32:db:55:93:07:bd:42:7c:ef:7a:88:5a:a0:ff:a7:
         03:4c:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:26 2024 by rpki-client on console-fra.rpki-client.org