Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa
File:                     47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa (raw, json)
Hash identifier:          lMOsrtaezmGB+MyXZae8uImn2pUJL+NpK5Ma/YxBDxM=
Subject key identifier:   F1:AD:23:07:83:6E:5D:5A:D4:7C:81:49:95:A5:55:06:24:A7:58:BA
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F43285844E66FEB1ACBABFC8773A00200
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa
Signing time:             Thu 15 Feb 2024 14:00:30 +0000
ROA not before:           Thu 15 Feb 2024 14:00:30 +0000
ROA not after:            Wed 15 May 2024 13:00:30 +0000
asID:                     14618
IP address blocks:        159.112.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:6f:eb:1a:cb:ab:fc:87:73:a0:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Feb 15 14:00:30 2024 GMT
            Not After : May 15 13:00:30 2024 GMT
        Subject: CN=49878789-b88c-4c8e-a309-3a8b4e093645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:e8:c2:b6:c0:45:25:26:84:70:d4:18:e0:
                    2a:24:4f:af:ef:e5:f8:6b:b3:0a:f4:9b:bc:5a:de:
                    4d:df:21:ef:d3:d9:25:08:01:82:c2:db:a1:e3:7a:
                    24:4a:1b:4a:17:ef:ac:16:b8:d8:1c:ce:89:46:d9:
                    84:9e:b5:c6:36:c5:7c:cf:f9:ba:39:cb:cd:34:5e:
                    47:7c:fb:db:a3:49:d0:73:a0:06:ec:85:65:02:e7:
                    92:41:16:32:29:02:bc:a3:66:79:c9:f3:b2:d8:42:
                    09:c7:28:60:a8:1c:7b:4d:4c:93:b3:db:39:7c:bf:
                    f0:54:a1:c6:83:b8:bf:5f:56:1a:28:fa:7c:f8:1c:
                    d2:d5:31:8e:fc:67:4a:23:9d:03:be:73:30:e3:49:
                    9f:d4:5c:18:97:2e:d0:48:4c:2d:6b:46:ad:6e:17:
                    f8:75:5c:ef:64:ea:a0:17:e8:d0:e9:1e:ec:9b:52:
                    25:b5:fa:f7:4d:b0:c9:22:6f:76:0f:8c:fd:20:27:
                    ad:2f:01:29:47:73:f7:48:6c:2f:7c:b9:f4:39:21:
                    28:58:bb:5a:c6:f3:a0:c0:35:9a:ec:2d:a0:0f:08:
                    b5:cf:c5:f7:06:2d:6f:78:55:0b:7b:28:75:11:b1:
                    0e:ad:b9:97:91:33:ff:17:0a:46:25:2c:60:05:07:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:23:07:83:6E:5D:5A:D4:7C:81:49:95:A5:55:06:24:A7:58:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/47ea2d17-33fd-35e6-b0d8-b6603b21510d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.112.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:15:27:e1:6d:65:4a:c5:ab:ef:c6:7f:1b:bf:ef:0c:22:e0:
         d9:b3:f4:72:ef:8f:5b:94:c3:fe:79:6c:38:cb:91:5f:d2:cd:
         53:ba:40:a8:a4:55:3d:b7:97:22:93:87:c5:0a:ef:28:07:05:
         b4:e3:7b:82:4d:13:54:79:a5:31:8c:bc:38:3c:70:d7:48:ad:
         52:95:ea:70:ca:4c:f0:2f:59:c6:ff:0b:e4:63:fb:7a:0a:d6:
         75:d2:1b:fe:63:8f:e7:b3:c9:6a:bf:cb:4a:bd:d7:07:09:47:
         5a:96:e0:11:d5:bb:92:b3:00:85:27:f0:09:15:26:5a:9b:5d:
         39:8b:4e:a7:99:29:bb:33:bd:aa:64:9c:4a:54:29:ce:a5:60:
         2d:73:dd:54:1e:14:07:35:4c:3b:1b:92:64:4f:f9:8f:4c:0b:
         4b:60:88:8a:b7:5c:26:32:48:41:e6:e7:dc:9a:5a:83:f1:45:
         1b:ec:b6:41:1d:64:c2:b4:b5:6f:4e:5b:ef:33:25:68:93:f7:
         45:f0:28:8f:7a:5f:f3:59:4e:c3:2c:5c:5a:b9:63:44:d2:3c:
         ac:26:a2:6a:10:f7:ee:e0:19:83:7a:2d:91:75:2d:80:a8:df:
         2a:11:a5:7c:9e:ec:91:e8:80:5b:41:4b:db:3c:5f:d3:eb:30:
         b1:a2:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:29:58 2024 by rpki-client on console-fra.rpki-client.org