Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa
File:                     51ec918f-e1fc-301e-9429-3273266c6019.roa (raw, json)
Hash identifier:          f23DItX8a6iVMgd+sJWuiRDTXAGg4Qd+Prqxo6WjjCk=
Subject key identifier:   B1:F8:3A:14:50:69:87:71:A9:15:0C:EB:51:65:F0:DF:67:E7:B9:4D
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F43285847B53148D6A5C118F042FA9400
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     18519
IP address blocks:        172.81.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:48:d6:a5:c1:18:f0:42:fa:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=9f03ecdf-0626-4ede-a4b2-001fad5c68f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:40:84:ca:0b:9f:16:ea:0c:40:ec:41:49:
                    c1:3e:32:bf:e1:69:98:54:58:e5:8a:9f:d2:c0:6e:
                    14:01:b8:28:5e:1a:ae:b9:95:71:03:60:fd:34:4a:
                    ef:45:6f:bb:68:ca:af:37:cd:fe:66:cc:32:4c:65:
                    9a:cf:dc:72:0f:b9:e2:fa:c2:c1:a7:52:dd:d0:e7:
                    c3:2d:11:d1:d9:df:d0:83:58:a1:41:06:90:dc:11:
                    99:54:38:20:90:42:8a:2e:30:dd:a5:ec:56:61:19:
                    4f:39:d1:a0:d5:c0:04:9e:c3:c5:13:ab:84:0f:31:
                    eb:14:20:3e:16:5e:73:7c:28:70:b0:91:21:ca:fc:
                    0e:cd:c0:bc:8d:61:96:0f:19:e0:24:37:3d:65:9e:
                    11:d1:e2:22:c3:68:4b:07:30:0b:37:76:95:b4:42:
                    7b:24:de:d9:17:6d:40:0d:27:9a:2e:35:26:2a:ed:
                    30:35:6c:40:d4:be:f0:49:2c:7f:a1:4d:a3:5c:66:
                    d6:5b:95:13:0d:02:3f:ab:95:11:33:fe:3f:b4:2c:
                    e1:e8:2c:61:21:7d:26:80:bd:16:76:8d:f5:c8:bf:
                    96:03:25:bc:d9:cf:18:69:2b:ce:cb:36:27:d2:ac:
                    7e:85:c7:d9:56:b3:17:fb:e4:5e:19:95:d0:fe:10:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F8:3A:14:50:69:87:71:A9:15:0C:EB:51:65:F0:DF:67:E7:B9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/51ec918f-e1fc-301e-9429-3273266c6019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:7d:ca:7f:dc:93:61:68:68:76:dd:cc:21:ef:fb:96:af:92:
         c2:67:3e:7a:aa:d9:f9:0f:bd:bb:0a:fc:05:9c:27:74:17:14:
         9c:62:73:06:43:3d:23:4e:60:14:39:16:91:e5:5f:a8:87:29:
         9e:64:56:f0:77:b2:9f:6d:21:0f:35:6a:8d:f9:c6:d5:76:2a:
         8e:e3:86:8c:95:69:7c:f9:ce:53:b8:9d:4c:bf:b1:44:57:c8:
         f0:06:62:d3:d4:7c:e5:32:6b:a5:62:8d:12:83:9a:d4:9a:e6:
         38:18:1f:32:fd:9d:1a:7a:b0:bc:d8:a3:cb:36:4e:ac:4a:1c:
         b3:03:86:9d:ff:4e:63:ec:6d:3f:59:10:2f:15:0c:b2:ce:43:
         9c:61:31:30:9d:b8:80:00:c4:1b:c8:ce:d7:d3:8b:1e:44:22:
         e2:67:a2:4c:4c:8b:04:ba:f5:5e:fe:ec:3b:23:bb:52:c3:4b:
         53:1d:a6:1f:7a:b7:9e:ff:95:60:fd:c0:4a:95:ed:0c:9f:28:
         05:9f:f8:27:04:7d:6c:7e:7a:54:11:0b:ee:29:e4:29:e9:60:
         d3:db:30:15:95:ed:9b:91:44:3c:ed:2a:49:ac:6c:ed:18:fb:
         96:14:c6:9f:ed:9a:03:60:0b:b3:e9:71:1e:0b:81:af:04:42:
         d7:75:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:59 2024 by rpki-client on console-fra.rpki-client.org