Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
File:                     4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa (raw, json)
Hash identifier:          BfJdvLO3Bjwfr8S6T1IX4+vA/ojgz8NTTRPmUmxqTCA=
Subject key identifier:   52:78:00:6B:18:CD:F2:00:19:CB:6A:BC:E4:8D:93:40:5E:5F:6F:36
Certificate issuer:       /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial:       010D0C9F432858472405CBE288EBF93009910A48
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        216.99.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:cb:e2:88:eb:f9:30:09:91:0a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=8dc5a06d-be0f-407e-a8da-98cfd979d1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:32:64:8b:1b:76:62:07:d5:5a:18:e0:d8:
                    30:27:c5:c1:d1:1b:ea:e3:16:57:17:96:26:ae:90:
                    3d:a8:0d:18:b7:5c:45:72:f0:f7:c4:6e:38:64:90:
                    2a:cb:e2:17:d7:a2:5e:a4:92:fb:24:e4:73:61:02:
                    2c:64:2e:cb:44:6b:c7:97:8d:3e:be:f2:2e:18:83:
                    28:0e:6b:d8:15:ec:f3:cd:c1:c2:5e:b9:ca:c6:65:
                    06:31:4d:9a:39:62:fc:00:61:36:dd:f8:83:27:a3:
                    b6:c2:85:b5:37:3c:9d:a2:ed:6a:0d:97:df:2b:1e:
                    f0:0d:fc:d8:39:57:5e:f1:a4:38:6d:99:0d:05:13:
                    f0:b5:9e:e9:53:0a:0b:f5:0b:53:8b:d0:e0:02:46:
                    5f:c8:02:f1:83:6d:8f:7e:53:50:80:12:71:22:d2:
                    75:a3:92:01:05:84:19:0d:be:62:48:47:6f:f5:32:
                    28:29:db:c5:67:7f:74:39:7a:08:7e:15:95:1c:9e:
                    53:72:cc:d0:4e:06:07:c3:64:ae:f8:37:5b:a1:ed:
                    10:7a:9f:92:64:2c:d8:eb:59:51:23:b7:17:25:e6:
                    08:af:02:40:ba:e6:38:59:ba:03:91:34:fc:4a:a5:
                    15:91:9e:b0:18:18:d6:c3:41:cf:ac:db:68:ac:56:
                    3b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:00:6B:18:CD:F2:00:19:CB:6A:BC:E4:8D:93:40:5E:5F:6F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7b:e1:72:f1:5a:4f:ab:4e:68:5f:a7:87:f0:66:d3:1b:fa:
         40:00:2b:ec:2f:4a:0d:f5:34:26:9f:f3:e7:3b:2d:e6:f4:66:
         1b:78:e4:31:30:a2:38:f2:15:b3:c2:24:2b:11:05:5c:c7:2e:
         15:84:2f:4a:a0:ea:30:ca:d0:6a:b2:c2:03:00:95:85:34:0e:
         21:40:9b:72:78:29:0b:ef:e2:be:62:fc:77:b6:4b:be:f5:ec:
         29:ab:45:fc:36:76:30:5b:1a:14:4c:2c:4e:12:39:30:a8:fd:
         8b:0a:a4:d8:a9:c1:38:c8:72:40:ac:36:41:9d:8f:53:2f:a9:
         0b:ae:18:11:33:64:9c:08:d0:d1:69:a1:0f:db:61:67:93:8d:
         e1:86:8c:67:ac:07:20:4d:ec:82:94:c4:16:e5:81:e3:c9:7f:
         18:52:f4:dc:df:9a:a8:5d:07:38:6a:77:cc:cc:f3:f8:11:14:
         d9:e7:22:a6:44:5b:6a:52:6d:39:e5:d6:50:80:db:58:3a:e2:
         71:64:42:c0:8f:71:19:cd:d0:3d:e3:c0:27:66:46:5b:48:37:
         cf:bf:8b:36:e2:7f:18:72:23:07:c4:45:46:61:7b:70:d6:44:
         df:3f:4b:78:62:ec:ca:68:7c:14:3f:bf:58:b5:a5:11:6d:69:
         f6:98:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:14 2024 by rpki-client on console-ams.rpki-client.org