Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
File:                     fab751c3-5070-3404-a031-06397c719220.roa (raw, json)
Hash identifier:          +ADVREXr17ZstKVad486ccd84bz23G3l0d929Q765vk=
Subject key identifier:   3D:2F:6E:3E:37:FE:99:47:AC:26:E7:34:FA:4B:CF:B0:95:D3:F5:01
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F43285847213B181B8B1E63CB924B1D00
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     1403
IP address blocks:        216.25.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:18:1b:8b:1e:63:cb:92:4b:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=7c627c49-ce83-4842-ac77-cb8d06869c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:d5:40:78:25:a5:f2:a1:e1:bc:4f:de:b3:
                    70:75:0c:e3:7b:08:85:c8:83:63:4b:8c:80:6c:62:
                    0b:a0:03:dd:45:c6:3b:6c:e9:93:b0:91:a5:e5:67:
                    a7:78:ec:a5:ce:9f:5b:52:1c:30:57:9a:3d:d8:f4:
                    57:be:0a:d0:35:63:b5:80:53:2d:82:fb:60:4e:e8:
                    0c:6c:cf:71:6e:2f:78:7e:bd:cd:22:a4:cc:c8:a7:
                    da:8b:a4:4b:3b:dd:d5:ba:a1:bd:32:78:73:e1:8b:
                    27:73:f0:04:1e:6e:bf:de:87:22:3e:fb:a3:dc:13:
                    75:36:aa:73:a3:0a:fe:10:92:e9:e7:0b:c9:ef:b2:
                    74:48:08:ad:73:75:6d:29:7c:42:da:1e:0a:b7:95:
                    d0:bb:69:f8:10:59:12:7b:bb:c7:b2:04:8c:b4:a0:
                    c6:d0:e0:41:cd:fa:f3:92:c0:da:c8:bd:40:03:f6:
                    7d:78:f2:94:d7:b6:0b:59:63:e0:c2:bf:64:26:8a:
                    7d:34:2f:ee:d6:66:9c:6b:93:37:bc:84:9f:8d:5a:
                    ee:eb:fe:35:36:c9:65:68:cf:f2:8d:c1:92:6e:ef:
                    43:48:7b:a7:1c:4e:66:38:77:f2:fa:b8:86:06:67:
                    89:cf:72:91:99:b3:ad:21:bf:72:d1:6f:1b:c5:4f:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2F:6E:3E:37:FE:99:47:AC:26:E7:34:FA:4B:CF:B0:95:D3:F5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/fab751c3-5070-3404-a031-06397c719220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cb:52:0a:c9:25:0b:9b:10:e3:c3:d8:b3:9b:e4:75:cb:65:
         6c:92:31:e0:15:dc:6d:3d:86:23:f8:f9:2a:47:5f:22:3e:70:
         78:53:23:23:e4:ec:48:26:f6:0d:6a:06:96:cf:f7:05:e0:1f:
         e4:d3:27:01:0f:a9:e1:5e:bc:17:6c:29:cf:4a:ed:61:2b:14:
         72:ff:5a:0c:14:24:fe:27:f1:78:82:ab:e2:12:f7:30:65:40:
         c1:33:36:78:68:43:df:c2:1d:2c:2d:af:7d:19:81:ee:00:b7:
         de:83:87:e3:5f:c5:01:42:52:af:16:a8:43:dc:69:9c:2d:d9:
         84:d2:04:63:d8:eb:f0:56:ba:6c:68:1a:c5:ab:0d:33:dc:9f:
         15:50:80:b5:b3:13:b6:34:03:92:b4:56:e3:4c:7b:bd:df:fa:
         30:0e:ed:5e:54:10:c4:7e:63:e7:c7:bd:8e:c7:a7:4b:43:d2:
         3c:8e:59:81:28:a5:61:df:6d:07:b3:01:99:dc:66:bc:3f:c8:
         71:8e:ca:aa:4c:75:ae:72:8c:fb:04:59:dd:9e:69:49:a4:5c:
         40:c4:4a:b5:d1:f3:58:cc:2a:1b:98:16:00:26:38:a5:2a:25:
         bb:c4:f2:59:98:ab:8f:a9:88:cf:ed:a9:5a:20:bb:6b:06:f6:
         29:8d:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:57 2024 by rpki-client on console-fra.rpki-client.org