Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
File:                     2a3dd29d-c7c4-3c26-822a-864742fe7486.roa (raw, json)
Hash identifier:          r2iMPiNEmjVmNnFo8CEK/HyQy6vZ7qXgrmZIf5fl7nY=
Subject key identifier:   5D:EB:B7:08:1A:66:35:2B:D7:4C:42:D1:F8:9D:7B:18:F7:0F:E4:3D
Certificate issuer:       /CN=786ab4fb-a46d-40d6-8281-3c79061676da
Certificate serial:       010D0C9F4328584797E13B597847E20EBF13CB00
Authority key identifier: A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     30263
IP address blocks:        216.7.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3b:59:78:47:e2:0e:bf:13:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ab4fb-a46d-40d6-8281-3c79061676da
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=0f89b5a2-8acd-497b-8061-aeb56af33899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:95:3c:61:f9:bb:c1:a2:48:0a:a9:20:76:71:
                    78:2b:c1:e8:19:cd:03:14:69:47:38:12:98:81:cb:
                    c1:87:59:d4:ce:f3:7f:cf:42:2c:4b:e6:05:cc:fc:
                    09:1b:1b:ed:ee:36:c4:ba:f7:e7:43:1f:65:cc:8e:
                    b3:20:3d:61:a4:3b:a1:97:52:9a:73:5e:48:a6:61:
                    da:f8:1b:63:aa:ae:87:e1:39:17:49:e6:b4:bb:e7:
                    00:3d:66:4c:f5:a7:4c:1d:63:fb:85:0c:9e:e2:31:
                    89:d4:ed:3b:82:15:cf:48:44:98:ed:48:53:9b:8a:
                    96:c2:0f:7f:1a:1b:2e:83:2a:71:d3:0a:5d:04:c4:
                    ff:b8:05:97:e9:2b:aa:56:28:f0:15:9d:59:45:47:
                    5d:18:21:46:f6:45:6f:f3:83:bd:f4:a9:c9:6a:15:
                    ad:c1:93:22:38:46:5b:5a:2e:43:70:fd:70:aa:b1:
                    09:d8:3c:75:d7:fd:7f:3a:a7:a5:b1:c6:8a:99:8a:
                    3d:9c:81:6c:15:ab:86:3c:1f:5a:a5:2a:e5:bb:51:
                    99:20:d1:64:fc:1e:bb:2d:31:47:53:55:36:37:e5:
                    52:ed:57:0c:7e:cf:74:4c:59:81:70:19:45:73:98:
                    d2:34:ef:10:f3:49:3b:2f:ba:76:02:48:55:b6:72:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:B7:08:1A:66:35:2B:D7:4C:42:D1:F8:9D:7B:18:F7:0F:E4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/2a3dd29d-c7c4-3c26-822a-864742fe7486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da/786ab4fb-a46d-40d6-8281-3c79061676da.crl

            X509v3 Authority Key Identifier:
                keyid:A7:29:B8:4B:2E:46:D9:2A:BB:04:68:D4:3B:1D:18:A1:F8:B8:EA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/786ab4fb-a46d-40d6-8281-3c79061676da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:d4:3a:83:3c:1c:8c:ea:a2:f2:02:d6:28:db:b2:df:b6:
         84:31:d4:88:65:0e:fe:f3:02:53:c7:76:77:b2:9f:7a:00:8f:
         d1:d4:5b:43:5e:ef:53:fd:82:be:f7:a9:f9:8e:b1:f5:f4:1a:
         50:f7:07:69:ba:38:e3:66:4e:0f:13:50:12:fb:af:71:95:3f:
         c7:84:98:c5:b4:4c:72:4c:fc:80:2a:5f:3b:54:66:ac:05:2a:
         98:cc:9f:1a:7b:60:d8:89:e3:88:a2:04:ab:3b:98:14:41:49:
         db:58:a3:9b:af:8d:ce:0e:f5:1d:3a:98:d5:8f:13:f0:dd:9a:
         1c:34:36:96:12:ed:70:3c:4b:f5:88:e2:b8:d6:e6:a3:81:29:
         5c:de:9d:2c:4b:95:d3:ec:66:b3:41:79:24:29:57:57:85:44:
         e6:79:0f:22:9f:c8:60:32:71:e6:3c:46:d7:ef:0d:6f:0e:fe:
         f6:90:6a:3c:21:de:fd:f1:7e:c4:40:cf:0c:1f:ee:8b:26:16:
         ef:e8:02:ef:6c:ac:d4:dd:0a:51:06:d7:ed:b2:71:f9:bb:65:
         6b:d8:2c:08:9a:12:d7:00:73:34:c8:db:56:c9:9f:4f:11:48:
         91:5f:60:b3:2f:57:26:37:69:e0:6a:51:b9:88:13:4d:a1:a0:
         01:5d:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:08 2024 by rpki-client on console-ams.rpki-client.org