Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
File:                     e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa (raw, json)
Hash identifier:          VyN6r1rLyqK5YBW+Mzoihhi03TGngjRS4n5F0X5dd8g=
Subject key identifier:   58:5B:66:D9:F1:27:A7:3C:29:B0:36:5C:E8:8E:39:E6:F3:27:4C:AB
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F432858477EC10B7BE3121695C90DFCE0
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        209.127.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0b:7b:e3:12:16:95:c9:0d:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=ff45b1b3-ff88-4b70-aeb9-5c52656bc32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:f7:1f:df:a7:b7:87:9b:47:52:b0:6a:ce:
                    dc:d0:1d:95:f6:ee:3b:7b:34:99:2a:cd:e7:dc:71:
                    6b:9a:a8:11:31:6d:f2:47:68:08:ef:58:a9:f1:4b:
                    fb:58:fe:31:23:5b:87:16:8c:71:19:56:94:f4:1d:
                    80:08:80:f5:0a:00:98:b9:c2:5c:77:18:73:c5:d5:
                    c7:a6:b8:a7:0d:fa:b3:b2:bc:75:91:87:67:b2:dd:
                    63:8b:08:52:66:cb:2f:85:2a:49:80:46:1f:e4:18:
                    06:83:4d:07:90:22:f5:b6:e0:27:8b:bc:99:84:3e:
                    2c:d3:9a:77:47:12:8f:b7:e8:35:20:ef:57:26:20:
                    15:c4:f6:36:37:ee:f8:ca:3a:36:f9:3c:2d:b7:95:
                    b5:dd:e9:41:b1:c0:aa:2b:0d:f8:1a:98:c2:eb:14:
                    c0:d8:18:ea:35:95:29:93:c4:68:7c:e7:ef:34:9e:
                    6a:80:7a:5a:6d:62:32:59:70:01:4f:07:3f:8e:06:
                    6b:9b:be:81:e8:77:04:92:ca:1b:dd:5c:bc:d4:70:
                    d9:01:25:18:a8:fe:a3:45:2d:cb:28:2d:5f:b7:7b:
                    58:1f:3d:e6:7a:6c:e8:08:fc:7b:57:51:94:f0:81:
                    52:cc:54:4e:85:6c:c4:03:72:87:e7:e9:96:40:f3:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:66:D9:F1:27:A7:3C:29:B0:36:5C:E8:8E:39:E6:F3:27:4C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:cc:30:5e:c6:3d:5b:42:ce:4e:cd:a3:9c:79:07:13:55:
         5c:2b:d1:02:d8:98:a6:eb:1e:4c:66:ba:7a:e3:b1:e8:ce:b4:
         67:ac:bd:ba:be:ca:4b:79:a8:66:3d:f6:ca:6e:c0:7a:3b:62:
         86:7d:ce:7e:6f:41:44:2c:58:af:35:58:04:5a:d8:60:49:cd:
         7c:88:a1:76:73:92:a2:96:3f:6d:6e:87:e7:5b:a6:46:c5:63:
         5e:0b:75:e7:78:bb:e3:1c:c2:04:34:5b:2c:c5:a0:db:03:38:
         1e:a6:78:7d:ef:fc:28:6f:a9:57:19:76:c2:56:af:da:07:9a:
         c0:97:0b:d8:d4:37:0f:64:78:5d:9f:c6:e9:e0:69:8e:6a:5e:
         0a:0d:77:56:b0:75:ad:d0:1f:76:dc:d8:66:b7:89:60:f6:f7:
         45:60:73:3e:9f:6a:26:4b:df:91:ec:c8:28:80:9f:b3:85:ef:
         9e:ba:83:19:27:15:d4:1f:ba:1b:8d:26:e3:d1:4b:d5:50:a9:
         ef:21:c1:c6:f5:c1:1f:0f:54:6f:1a:be:6e:ab:fe:35:6c:69:
         41:5d:66:f2:56:2d:02:45:65:26:e2:a8:42:82:41:8c:a4:73:
         26:59:ae:23:fb:1b:b8:d2:74:0a:c0:77:8d:2a:cf:f5:21:77:
         47:d4:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:03 2024 by rpki-client on console-fra.rpki-client.org