Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa
File:                     6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa (raw, json)
Hash identifier:          4yHkw9lZ6+EUFlmcN6AYUHc+XpaCybG/CzRU73MFCx8=
Subject key identifier:   29:C9:CC:26:43:BE:BF:98:E3:45:62:20:91:AA:AF:E3:DB:25:5F:E6
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328584784566BB1F37BF9BEF0A8EC80
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     40065
IP address blocks:        216.38.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:6b:b1:f3:7b:f9:be:f0:a8:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=5e957031-7846-43b7-b0c4-fbfc33b76b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:92:46:5e:f5:58:05:90:7e:45:2d:32:13:
                    59:77:15:89:82:1d:a3:34:15:c7:e1:bc:6c:49:ee:
                    12:ec:11:8e:e4:84:23:1d:9b:b6:5c:37:97:93:24:
                    a8:cf:5e:31:f8:62:ed:83:57:e0:84:3f:e1:ae:4f:
                    f7:be:b7:6e:b7:20:32:8d:fc:4c:be:06:dc:93:6f:
                    22:91:31:9c:bd:dc:5f:ca:3b:b2:ed:89:34:6b:d7:
                    c2:5d:2d:67:0f:11:4d:42:42:15:4a:ab:54:22:ad:
                    ef:d7:c5:4d:2a:6d:a5:db:fd:7f:33:a0:31:92:32:
                    d8:c3:ba:28:d9:fa:d1:a0:d0:b8:c7:78:70:0e:39:
                    b0:e3:e5:b2:eb:ad:49:f5:96:4f:dc:d4:41:d0:5b:
                    2b:d9:e8:16:1f:0d:f1:8d:83:74:ad:d7:45:71:48:
                    c9:80:44:61:c0:62:15:06:87:e0:9d:c5:12:2a:67:
                    c2:c0:d0:c6:44:63:76:99:05:70:0a:d3:29:38:fb:
                    ea:6b:78:12:6f:6a:7e:08:b0:0e:7e:aa:11:69:9d:
                    d8:9f:0e:bb:88:42:bf:34:32:1d:d9:df:45:a2:1c:
                    fe:ea:15:f6:96:7e:ca:44:41:7a:f5:3e:23:79:51:
                    2b:19:40:06:ac:38:91:ab:b7:05:54:34:98:2b:f3:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C9:CC:26:43:BE:BF:98:E3:45:62:20:91:AA:AF:E3:DB:25:5F:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/6e55369f-3dd7-3e9f-8a9f-a6249baa8e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:19:6b:75:79:d7:d9:6b:d7:f0:63:43:c7:41:72:7f:98:
         d7:63:3d:5b:ab:af:be:d8:21:4d:32:31:80:43:cb:d7:fa:d5:
         ca:14:67:2e:7e:7f:38:1b:dd:08:67:d8:7a:c5:b7:15:1c:a0:
         44:ed:72:0a:9d:fd:5b:1f:2a:c0:7b:6c:03:49:a3:09:67:a5:
         a8:c2:d0:b7:8b:3b:c2:c3:a9:2f:ab:67:ea:49:e0:98:f5:b3:
         6a:5f:8a:80:1a:9e:5d:d6:b6:2e:06:d4:f7:68:a6:7d:cd:c0:
         56:cb:b1:86:c3:31:63:7d:74:30:48:2a:93:8b:0b:07:a9:e0:
         35:96:ae:2d:22:27:72:4c:65:78:e4:b0:dc:83:2b:e1:0d:a3:
         06:1d:cb:4b:59:17:05:a9:d5:3f:be:4a:75:a2:fe:25:2a:4f:
         b8:b4:64:7f:fe:53:02:3d:c3:f1:a5:da:e9:17:2e:69:60:c6:
         6d:a4:8e:37:56:84:ba:02:bc:14:25:ef:61:7b:52:5e:6b:ce:
         9d:fa:55:6c:f0:51:fd:52:00:0f:41:54:c7:a3:ad:73:15:ef:
         e1:06:ff:c1:df:d7:ae:72:cf:d4:88:b8:d8:05:4d:09:a4:c3:
         95:18:8a:72:a4:48:1d:23:1d:de:0d:b1:ae:1f:c0:4f:a1:50:
         aa:05:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:15:04 2024 by rpki-client on console-fra.rpki-client.org