Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
File:                     cd011bcd-5b47-3a26-a048-12e973e67b5f.roa (raw, json)
Hash identifier:          KHI16wo9JQ4TBM8gwpRkgsJ8JXnw9bDOw/rCBb08Qm8=
Subject key identifier:   6E:17:CE:72:3C:C8:85:BE:1E:24:8B:E5:51:61:18:24:24:3E:8D:CE
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F43285847CFD4D4EE334399DA975B0F00
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     53334
IP address blocks:        216.59.58.128/27 maxlen: 27
                          216.59.58.160/27 maxlen: 27
                          216.59.58.208/28 maxlen: 28
                          216.59.58.224/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d4:ee:33:43:99:da:97:5b:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=269acbe5-a46f-48eb-830f-81b7a09fd42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:57:f8:20:80:ed:b9:48:a6:12:ed:b8:75:
                    22:84:f4:ec:02:7a:bf:34:c2:26:4d:ac:01:5c:7d:
                    53:3a:45:3a:3c:07:be:eb:a6:8f:d2:96:2b:73:56:
                    d0:76:be:93:21:23:7f:64:d4:8d:f8:6d:ac:cd:77:
                    ea:87:06:c7:f2:4b:67:b9:41:59:8a:15:dc:3d:66:
                    3a:e5:68:e6:21:44:78:0d:70:b0:57:aa:24:04:29:
                    a4:22:91:17:e0:c4:03:d9:64:43:03:3e:d2:31:0c:
                    87:d3:a4:54:43:f5:b0:3a:09:92:c8:f0:53:6b:f0:
                    ed:b8:47:39:3c:b7:08:ef:46:28:05:95:5a:7b:18:
                    8f:56:38:52:7c:53:d5:1b:7c:40:7a:86:83:84:5d:
                    2a:81:17:5d:8d:5d:ad:06:14:c9:bf:0c:eb:b0:8d:
                    0e:cc:d2:3e:3a:20:9f:83:54:1a:8b:0f:1d:85:bf:
                    06:d7:4a:38:23:19:54:ff:b9:d8:d9:13:e0:c2:5e:
                    71:c5:a3:a6:24:24:e2:f7:92:58:8c:97:1a:4b:5b:
                    e7:f9:d1:45:7c:3c:0a:94:c3:8b:2d:4c:f0:6e:07:
                    92:45:91:41:08:85:c4:d3:c2:cc:b6:8b:7d:34:ab:
                    ec:55:f9:bb:1f:d9:a0:ec:86:0b:56:62:9f:1b:28:
                    76:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:CE:72:3C:C8:85:BE:1E:24:8B:E5:51:61:18:24:24:3E:8D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.128/26
                  216.59.58.208-216.59.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:09:c1:3b:85:ea:59:d9:fb:61:41:8d:80:90:c1:45:71:e3:
         6b:57:d8:d1:a1:df:aa:a3:48:fe:95:3d:87:a4:f0:d4:ab:b1:
         c6:69:9f:21:d2:09:e2:0d:bf:c1:a8:ac:61:c8:b6:ba:4f:ee:
         ce:c8:c8:d0:64:d5:33:91:54:4a:aa:11:1b:6d:d7:00:7c:c1:
         f2:55:7f:65:ba:5c:7d:81:ce:a9:ae:0f:00:31:f1:d0:f5:a4:
         75:c7:9f:a1:5a:f4:76:03:be:a9:1f:bf:44:f1:fc:ec:ce:fd:
         f1:d4:25:89:3d:d9:5a:92:a3:59:3c:12:ec:29:6c:eb:55:41:
         13:c1:9b:9f:31:18:ea:8a:2d:e6:e1:2a:88:32:5b:56:b7:d8:
         1d:fe:79:c0:eb:49:c7:7a:df:b3:04:52:54:ff:98:31:8e:31:
         1d:07:d3:45:70:05:21:f1:33:78:d5:de:45:52:39:c9:66:eb:
         0d:ad:26:17:6c:4a:7b:7c:b2:3e:5e:0e:39:07:d6:9e:85:e3:
         cf:a6:1b:fc:1b:4a:b5:ec:e8:c4:7e:4c:4a:86:9f:e6:3a:09:
         9a:73:f5:17:32:d5:7f:ae:25:5d:9a:e1:be:14:e0:65:dc:a5:
         13:59:82:73:75:3e:1c:b3:c5:48:6e:a6:64:56:4e:84:90:ed:
         df:fb:36:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:16 2024 by rpki-client on console-fra.rpki-client.org