Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa
File:                     04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa (raw, json)
Hash identifier:          FA+DcczUip1RzALm52Pbol0ysH88AUnPWtziM++YNyI=
Subject key identifier:   97:05:19:C7:FE:4B:24:06:53:B1:B1:21:CD:10:D9:7C:72:98:AB:4F
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285847CA74906C90DBA3C682F26380
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa
Signing time:             Wed 06 Nov 2024 15:48:06 +0000
ROA not before:           Wed 06 Nov 2024 15:48:06 +0000
ROA not after:            Tue 04 Feb 2025 15:48:06 +0000
asID:                     16509
IP address blocks:        216.139.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:74:90:6c:90:db:a3:c6:82:f2:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Nov  6 15:48:06 2024 GMT
            Not After : Feb  4 15:48:06 2025 GMT
        Subject: CN=fe87ccd0-3bae-4d51-ba11-5f3791aa983d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:11:33:6d:32:a4:be:f8:30:da:79:59:ad:
                    77:b5:e7:60:20:c0:47:a8:ed:66:aa:4b:f0:3e:94:
                    6e:6a:9d:e7:c7:15:b1:96:22:18:b7:4a:54:f4:86:
                    c3:9a:bc:06:9b:e6:9b:ce:f7:c2:b9:ab:99:77:66:
                    16:35:66:7c:f7:75:1b:ea:74:a5:0c:3f:2f:8d:86:
                    6d:41:8f:02:b1:a9:7b:15:63:f7:da:88:b0:9b:24:
                    ca:f4:3b:40:68:aa:cc:f8:e7:b7:62:5c:6c:1b:df:
                    56:5a:bd:9e:85:6c:75:37:95:9b:04:56:16:58:39:
                    56:da:92:19:40:fb:6a:d4:b5:26:b5:86:f4:89:ca:
                    0e:60:2f:af:3c:6c:0a:55:83:bc:60:b7:33:67:6e:
                    fa:ee:73:04:e8:3b:3a:69:38:ca:ad:7f:b2:a1:2b:
                    76:f9:db:b8:22:99:42:48:ca:3e:df:ee:27:73:f3:
                    22:4d:2b:92:ac:33:67:85:23:47:86:3d:74:07:82:
                    d6:99:4d:4a:35:55:28:40:78:09:d7:fd:88:2d:a8:
                    2c:cf:7d:75:4b:29:17:d0:f9:c9:2e:39:03:fc:95:
                    5c:1e:86:89:a6:d7:a9:d3:9c:64:49:8f:22:5e:a3:
                    3b:3c:51:63:0d:e9:0f:a1:76:6c:9e:01:ff:48:82:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:05:19:C7:FE:4B:24:06:53:B1:B1:21:CD:10:D9:7C:72:98:AB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4f:78:94:f6:2e:d4:54:56:be:c7:0c:94:48:dd:8d:d4:df:
         90:f2:03:d2:86:f0:e9:b6:cc:50:aa:d6:54:6b:f0:9c:75:a5:
         46:c6:61:b2:ee:ea:2d:11:af:66:ef:0c:06:b0:36:18:0f:c2:
         c0:df:17:be:ff:4c:6b:4d:1e:8c:ba:a7:ae:f2:57:7c:c1:37:
         39:11:75:22:f3:08:33:28:42:8e:9e:e3:e7:77:92:b9:32:1f:
         48:bf:33:68:ce:f0:bd:eb:cc:44:e5:62:85:de:03:6d:91:25:
         0e:da:b9:0f:5f:70:2b:bf:86:12:92:e0:b4:4a:d2:8c:01:e1:
         0b:97:2a:7c:15:af:39:01:a8:4c:c4:12:17:f5:a1:fe:8d:76:
         19:40:df:ff:88:b5:61:1c:6d:ad:b7:32:e4:19:bb:83:3d:86:
         9b:cb:22:5d:f6:bb:59:8f:b6:f2:71:bb:18:64:76:19:18:d6:
         6b:ee:54:c3:59:8b:b0:74:8c:86:00:51:2d:4b:4b:43:e4:ae:
         66:be:9f:25:50:0b:65:27:c1:ad:8a:0b:22:18:df:61:8d:3d:
         ec:94:7f:e9:b4:b0:43:bc:30:97:b1:bc:2d:17:9b:12:4d:a1:
         71:84:1a:3b:9a:43:a1:e5:b0:76:4b:e1:1c:2f:08:63:97:3b:
         6a:41:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:35:26 2024 by rpki-client on console-fra.rpki-client.org