Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
File:                     4947827a-81e3-3c67-8152-d53e2abb4dab.roa (raw, json)
Hash identifier:          PoxUTxkmO2V+aGbm9VPpDIf+LgLDd16Z3TJIIY067kE=
Subject key identifier:   C0:D8:4D:38:56:70:6D:CF:89:26:84:1D:E4:6B:53:9C:70:F1:25:6A
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F43285847A73BDBD5116604E554561740
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     46450
IP address blocks:        158.106.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:db:d5:11:66:04:e5:54:56:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=2499aa1f-d65c-4f0a-95a3-c6c26e3df6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:1e:1c:a2:ec:5a:4d:65:6a:f8:10:c1:06:
                    ff:a5:aa:9d:ea:20:9c:7c:d7:81:40:bf:07:99:95:
                    09:e4:5e:cb:de:69:e2:60:c5:b9:6b:2c:34:52:93:
                    4f:ab:1e:0f:a5:f6:0f:79:c9:be:96:27:d9:53:20:
                    e4:dc:ef:93:4a:23:98:30:3d:94:fd:13:9c:e3:6e:
                    60:74:e6:16:37:56:8c:0f:dc:2d:31:d3:09:9f:cf:
                    65:b0:64:58:10:bc:94:ea:77:4e:24:2e:06:25:bb:
                    09:7d:7e:a6:50:78:67:ca:f8:b8:66:57:51:fe:d7:
                    02:97:5f:5b:ef:5f:a7:19:7c:13:bc:3a:11:8c:c3:
                    1b:18:7e:48:95:dd:c0:97:3c:0e:68:00:cf:62:7a:
                    27:72:61:13:5e:95:85:cc:4a:0f:c3:f6:e8:21:77:
                    89:11:2c:7d:76:7c:ae:1c:f1:a2:d3:12:9f:d7:94:
                    8c:4e:28:2e:5e:36:e8:93:44:17:2d:f9:0e:20:a1:
                    70:b7:55:a4:dc:2e:ff:5f:f7:d9:f6:f1:df:17:f2:
                    9e:22:d7:19:94:80:92:2f:f4:42:80:93:41:41:51:
                    35:e1:04:84:97:e1:ef:f5:97:61:90:91:f7:94:82:
                    79:17:5f:39:a0:bc:28:76:6d:6f:3e:95:40:a4:ed:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D8:4D:38:56:70:6D:CF:89:26:84:1D:E4:6B:53:9C:70:F1:25:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/4947827a-81e3-3c67-8152-d53e2abb4dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.106.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:54:20:22:30:bd:1d:5b:09:44:2e:0b:b9:e1:7b:48:e9:
         34:ee:69:9a:9d:76:39:e2:d7:52:52:31:58:6d:53:28:a9:26:
         3e:93:00:2e:0e:b5:ed:f2:54:20:ad:b4:82:2f:83:93:cf:30:
         d3:7c:43:1e:10:e6:01:29:cc:5d:0d:31:f8:b2:79:1c:96:ce:
         27:9c:ad:4f:70:0e:4d:ed:92:7e:ae:36:01:05:1f:df:2a:03:
         17:51:92:f1:f4:0e:43:a1:41:d0:30:2e:0f:98:51:e4:7d:b8:
         fb:43:b8:63:2e:f4:11:0a:de:5d:2c:07:8e:cb:72:3e:e3:01:
         36:d6:ae:4c:44:e4:86:7f:21:c3:42:6e:51:b0:78:a9:ed:69:
         39:f6:79:fc:1c:5c:d2:9d:b1:eb:5b:87:7c:64:56:aa:e9:0f:
         46:f6:0f:83:a6:ae:1a:99:c3:55:91:8d:e3:a2:15:e8:c0:ef:
         45:63:54:94:18:61:69:be:76:29:ad:23:59:17:f7:34:f8:68:
         dc:66:07:73:3a:9b:6e:95:6d:5f:e5:04:af:3a:c9:70:8c:da:
         a3:b9:99:58:ce:fd:af:c1:8a:8a:dd:aa:58:e1:65:40:23:af:
         fd:95:cf:ec:4f:eb:31:fb:bd:d8:69:b4:0d:11:36:90:e2:62:
         32:ca:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:42 2024 by rpki-client on console-fra.rpki-client.org