Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa
File:                     88968477-21f3-3588-901e-e56dfa23609a.roa (raw, json)
Hash identifier:          GxqRBsiNZN/i3qXPoM9WbFfU02/GuKNiIK1StCoZUDQ=
Subject key identifier:   21:3B:FC:07:33:6E:0D:9B:05:27:1B:CD:96:92:FE:EC:09:D5:76:2A
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F4328584569885DA87D1E8E97BCB24D00
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa
Signing time:             Tue 02 Apr 2024 13:00:37 +0000
ROA not before:           Tue 02 Apr 2024 13:00:37 +0000
ROA not after:            Mon 01 Jul 2024 13:00:37 +0000
asID:                     16509
IP address blocks:        216.24.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:69:88:5d:a8:7d:1e:8e:97:bc:b2:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Apr  2 13:00:37 2024 GMT
            Not After : Jul  1 13:00:37 2024 GMT
        Subject: CN=29a4096c-d8f9-47dd-b0de-4f03a108ca0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:b3:ce:15:25:1f:ab:09:e2:11:12:53:94:
                    ef:80:32:76:50:a7:6f:85:2c:88:e4:70:cb:4a:b2:
                    ba:f3:7d:f8:19:f8:d1:0d:4c:6f:ec:77:e0:08:81:
                    9d:c8:30:6a:a8:3c:a0:94:0e:bd:42:0d:4c:65:25:
                    f9:e5:e7:e5:14:67:c7:e4:cf:5c:b3:1b:93:6a:20:
                    72:4d:8c:50:03:04:41:19:17:37:b8:5b:b5:f9:c9:
                    43:49:23:27:88:df:90:fc:f4:6c:d4:5b:1d:d3:bc:
                    56:a4:c0:56:1b:4b:58:42:fe:34:ac:9a:23:a5:30:
                    e5:d0:42:33:ca:a4:1d:b0:3c:10:aa:23:05:dd:e8:
                    8f:2c:49:25:f2:b7:2c:a0:1b:ca:e6:04:e7:75:87:
                    1c:72:bc:bd:8c:c1:95:41:b3:ec:3a:f0:f7:6e:13:
                    93:20:ce:ec:52:91:8a:1a:c7:eb:dc:ab:8d:a3:b7:
                    2a:cb:32:a9:3e:e5:b2:b3:ec:fd:1c:30:3f:a8:f7:
                    e5:60:70:43:a3:2a:09:3f:aa:50:cd:73:2c:02:bc:
                    c5:95:e4:20:06:e3:82:19:48:cd:ad:60:b4:59:92:
                    01:79:97:7a:2d:7d:ae:5f:c6:6a:fa:24:19:9e:d8:
                    99:db:26:70:10:44:ab:90:f8:99:81:46:ee:c2:93:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:FC:07:33:6E:0D:9B:05:27:1B:CD:96:92:FE:EC:09:D5:76:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/88968477-21f3-3588-901e-e56dfa23609a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:49:5f:cf:00:54:75:db:f3:56:28:7c:4f:58:da:fc:19:
         fd:37:e3:00:14:f1:12:01:99:66:68:2d:9f:9b:0e:da:f6:0c:
         2f:9a:f3:91:62:5c:31:7f:5e:68:22:f2:5e:dc:a5:39:da:2e:
         3c:12:0d:e7:5e:9d:18:46:58:2e:28:a9:a6:57:48:0b:11:df:
         ba:0e:99:08:dd:f3:7f:4c:bf:15:25:a9:5c:03:a6:41:c7:17:
         f5:51:a0:b6:ae:de:60:a8:fe:3f:9a:92:91:48:d7:36:76:d9:
         86:ec:79:9f:f4:de:9e:65:a1:76:3c:7b:ca:f5:67:25:e6:4c:
         fa:b1:c6:5a:27:73:61:e2:7a:36:62:85:d2:ee:68:95:10:ad:
         78:69:05:f1:0f:b5:39:b0:6c:8b:c1:40:36:54:93:55:fc:c3:
         a5:c9:8d:e4:90:62:72:b4:62:65:3b:08:67:e5:f1:c8:4f:22:
         4c:f5:88:0d:c4:87:df:18:e4:71:6e:c7:eb:37:67:0d:f6:7b:
         2b:64:e1:2f:0f:a7:6c:65:8f:07:b4:9e:6f:67:b3:46:71:a6:
         b4:7b:3b:60:7f:99:fb:43:8b:36:38:6c:1c:5f:a4:ce:c7:cc:
         14:90:f8:07:f4:d0:2d:0a:ad:bb:c7:b0:21:97:72:ce:42:80:
         2c:7f:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:49:24 2024 by rpki-client on console-fra.rpki-client.org