Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa
File:                     ba5248ae-4a33-3fab-8df7-45862103195e.roa (raw, json)
Hash identifier:          Kuf5cox7ZqP2Y7p3W9b5G4d5YD2PmayJTywMrlAKJwU=
Subject key identifier:   6B:C4:1D:9C:F0:D3:02:29:20:7D:86:28:99:9C:C6:D1:8A:6C:C2:D2
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F432858479AABE6926567BD6D62D45100
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     7057
IP address blocks:        216.174.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e6:92:65:67:bd:6d:62:d4:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=5a1ebdbb-9ef3-4831-a2bc-d28ea4de9698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:3c:33:09:58:2a:bb:de:29:d0:d4:75:2a:
                    23:9a:b4:09:53:80:7d:fd:da:5d:cc:52:15:fd:db:
                    87:36:65:9c:d7:d4:07:2e:15:4a:71:c1:b1:c2:74:
                    8b:7b:3e:98:49:fd:cd:c1:d2:f7:05:b9:42:a7:5f:
                    e5:2a:0b:5c:71:93:3c:c0:b2:ea:04:47:62:b1:85:
                    61:db:ba:c4:53:5c:d9:a4:a4:01:fa:df:74:6c:3e:
                    e6:e7:8f:e2:84:f1:7d:10:1b:56:85:bc:93:55:1e:
                    ed:70:be:e0:f7:c9:a5:09:4c:33:d9:c2:95:a8:22:
                    4c:97:9e:7e:bd:71:e9:cd:ed:7d:70:be:29:76:1e:
                    21:86:4d:f1:d7:23:5a:48:15:97:79:f4:7b:79:73:
                    71:05:2b:5d:34:05:52:80:a9:1e:24:8b:d1:e9:f4:
                    e0:9c:6f:3a:e2:3d:c6:cc:e4:43:02:ad:37:25:4c:
                    b2:4e:98:d8:20:e8:6f:b3:41:61:3c:65:bb:f1:22:
                    a9:3b:6b:1b:38:27:8f:20:82:c1:60:94:12:b4:cd:
                    c5:37:54:9c:42:6f:87:ab:ec:87:54:58:b8:01:28:
                    09:df:e5:26:63:a0:ad:86:da:27:63:fe:c1:b6:6b:
                    58:f6:be:31:9b:fb:f7:ef:d2:5a:4a:e1:75:b8:ae:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:1D:9C:F0:D3:02:29:20:7D:86:28:99:9C:C6:D1:8A:6C:C2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ba5248ae-4a33-3fab-8df7-45862103195e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.174.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:1a:9b:5c:a9:dc:8f:2d:e0:35:ea:37:4a:e1:22:69:31:
         16:0f:e9:63:ed:fa:52:15:75:e4:b7:79:7c:8c:dc:69:5d:df:
         ac:a2:c6:17:10:79:e7:3a:9e:36:1a:48:75:a4:40:59:b3:77:
         d8:3f:fc:60:93:53:10:2d:c7:78:e6:c9:01:75:76:5c:b7:04:
         d9:6b:0e:d5:f8:0e:20:9f:3c:a3:d0:bd:3b:b8:04:13:e7:74:
         19:1e:72:c3:57:37:2a:b2:9d:00:ff:14:c6:92:2d:25:0e:bf:
         74:c6:c8:b8:66:db:05:31:aa:66:78:1a:78:9d:11:a2:c0:dd:
         16:80:0c:0d:bc:24:42:de:a8:a5:18:b1:4c:a1:4c:22:9a:9c:
         b5:7f:19:f0:b6:55:86:45:99:a7:90:b6:e8:ce:73:9d:a4:79:
         80:69:a3:6c:28:98:60:d7:05:33:c3:65:c2:ca:28:b2:17:7e:
         2d:66:b8:76:06:e2:83:53:76:1d:18:c3:97:92:86:0c:7d:fb:
         88:78:4c:47:75:6f:a3:fd:60:e2:82:89:65:70:91:d5:c0:11:
         4f:f7:fe:d3:89:ae:b8:90:4b:c3:fd:74:25:33:99:8d:51:68:
         e0:2c:50:75:1f:24:59:23:62:8c:81:f3:f2:d5:6d:d5:97:a2:
         cc:c3:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:51 2024 by rpki-client on console-fra.rpki-client.org