Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
File:                     4db02882-9972-309e-8162-dbdd8d5ea807.roa (raw, json)
Hash identifier:          TV0+42vo0gFrJB98gwxaEm907xsZhuV9RHqeKUYV3UM=
Subject key identifier:   5E:87:8B:F7:09:FF:44:57:1D:13:C9:28:B4:7E:73:C2:23:85:BD:AF
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858474585FCC3F2A93210FA914B00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        216.120.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fc:c3:f2:a9:32:10:fa:91:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=f64c2a18-cb9d-4741-a678-e6501592620d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:58:7c:f2:ed:23:47:b5:9d:90:96:3e:fa:2f:
                    2e:e7:c1:f1:f1:22:58:69:01:d4:8b:ed:62:c7:6b:
                    1f:2d:3e:26:cf:9a:0f:9a:2e:7c:f7:a3:8a:87:52:
                    bc:5e:71:8e:c2:3d:a5:e5:ff:60:cd:29:4f:2b:ca:
                    f7:fd:cc:53:4f:ed:62:a4:ca:e9:2f:5a:ef:0d:52:
                    5e:a8:d8:5c:c2:e2:2e:c6:b9:ff:06:46:da:48:06:
                    54:15:c3:ea:c1:9b:4f:d5:35:b7:6a:f9:f4:ba:70:
                    03:27:5f:6b:cc:fd:d3:a4:14:48:9c:30:5d:24:46:
                    64:90:25:94:a7:57:23:61:7d:fb:60:32:87:4a:a0:
                    66:7a:ac:7a:4f:14:ea:e2:b9:84:29:44:f0:fb:3f:
                    08:de:cd:8c:23:2a:98:51:95:98:54:75:f0:91:00:
                    4d:c7:bc:5b:d8:9d:3c:e3:1f:de:80:9e:fc:29:dd:
                    5f:23:ab:be:07:85:b9:53:23:ea:e9:6d:71:63:60:
                    73:a2:4d:e4:30:c5:a2:01:3b:4d:06:4b:3d:62:42:
                    07:0b:c3:d1:e2:1d:00:51:48:1b:d8:51:0e:7f:f6:
                    76:7c:ab:5e:2b:e9:7c:67:ae:4b:9c:e0:ad:85:95:
                    fb:3b:b7:63:30:3b:2b:e4:25:b0:08:3b:58:de:ec:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:87:8B:F7:09:FF:44:57:1D:13:C9:28:B4:7E:73:C2:23:85:BD:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:f1:00:95:f3:54:0d:86:65:88:86:b4:9a:7a:bf:a0:09:
         49:0c:34:7d:54:3b:a7:da:b1:30:eb:19:0d:fd:c0:09:5e:00:
         9e:2d:c2:12:a1:4d:8b:83:0a:da:a2:44:80:10:4d:93:3e:1c:
         a2:5b:7c:11:2a:52:bb:77:37:c2:b4:c5:21:52:44:32:f3:a6:
         82:9e:74:97:79:54:e0:6a:a5:e6:c7:4c:86:a0:8b:1e:dc:6d:
         16:46:ec:52:dc:60:d3:4a:5e:cf:00:66:e9:12:88:8c:9d:94:
         ab:f7:f1:ac:3d:0b:bf:e8:a2:79:c5:5c:d4:0b:98:11:bf:1b:
         34:1d:29:ba:ab:4d:4c:e3:69:55:cb:44:ad:51:5d:78:b5:d8:
         78:da:f4:95:19:67:6d:6e:73:a6:ca:81:29:50:62:c0:8d:05:
         c5:20:0f:fc:2f:5a:71:c6:3d:e0:43:a8:b8:62:f2:b9:a2:c9:
         23:09:d8:2b:3f:d0:d4:ba:1a:5f:55:0a:6b:41:f5:c1:b4:a8:
         83:b3:1a:9e:2c:66:c5:30:7b:a5:71:98:de:41:f7:b1:78:29:
         56:72:db:f1:04:43:e2:de:a2:92:c1:6c:90:89:ed:3e:b4:d0:
         39:29:f1:9a:4f:2a:ef:e2:f7:33:4b:fb:54:b2:8f:98:83:e5:
         c4:eb:ce:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org