Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa
File:                     84cb115f-d113-307d-a81a-56c9031a0184.roa (raw, json)
Hash identifier:          3ZtFD0PfLmb2sYQtn64DRgfRG0bGtVk0wJoP7iYJG+M=
Subject key identifier:   24:4B:E1:93:34:52:16:D6:9C:81:3B:DD:29:AA:99:A8:EB:BA:08:EA
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584742BB53807866DB732F79E380
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        199.249.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:53:80:78:66:db:73:2f:79:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=92538011-2f8c-4db7-a817-e633d17925d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:24:b4:2d:da:d7:cc:f7:40:72:13:08:01:
                    18:6a:f2:1d:a2:10:d9:67:91:3e:7e:58:71:76:21:
                    02:41:1f:59:65:30:41:6a:dc:68:9e:91:db:82:0c:
                    35:86:0e:93:26:e3:74:31:ab:75:5b:3e:08:df:2e:
                    38:b1:c1:6f:99:a0:49:42:c8:94:a1:b2:72:4b:a3:
                    8b:1d:5f:eb:e4:c9:58:11:4b:04:d6:51:99:dc:66:
                    19:4a:e2:b9:51:9b:72:9f:74:1a:01:ae:d1:68:10:
                    24:2f:73:e1:0a:b5:e2:8b:4c:94:8e:dc:7a:60:4f:
                    a2:28:82:90:7f:8a:4f:f6:08:9c:4c:46:43:f2:eb:
                    a6:6c:12:5f:11:f3:bd:81:b2:ff:8e:d6:27:9e:24:
                    28:21:0a:50:c9:f9:41:87:c4:b5:1a:74:71:0b:61:
                    ae:0c:4f:a9:f2:d7:56:11:48:1e:0d:de:ca:48:2d:
                    99:26:ea:38:4f:c4:be:60:70:1b:8e:0c:70:71:21:
                    3c:97:60:30:aa:d2:a3:dd:fe:c8:6a:8d:c8:89:1e:
                    f8:cd:cd:f2:3f:ec:a0:9a:43:81:4c:20:c2:4a:f6:
                    e8:8f:94:a5:26:fc:29:a3:21:0e:44:85:c2:61:be:
                    4a:f4:eb:ac:43:ad:e9:ca:36:8f:a6:55:86:72:68:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4B:E1:93:34:52:16:D6:9C:81:3B:DD:29:AA:99:A8:EB:BA:08:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/84cb115f-d113-307d-a81a-56c9031a0184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:19:d3:06:1a:41:3b:a3:8a:55:b2:a3:46:91:f4:0e:75:
         fa:c4:92:ae:e1:21:a8:94:ac:ba:d2:97:c0:be:a4:b3:23:1a:
         e3:d9:aa:66:91:27:b0:d2:24:a6:c7:17:ea:76:70:62:65:52:
         7b:d7:eb:bf:7d:11:b0:22:3d:e3:73:62:d4:e8:39:13:7a:d7:
         83:5e:82:7d:6d:66:45:7c:01:39:e1:83:d9:4f:56:1b:5d:eb:
         ae:b4:0a:fa:f6:90:3e:30:45:cd:ed:29:ff:be:54:f5:b0:7c:
         39:e3:28:98:74:9f:00:8b:48:d7:8a:36:08:ba:fe:d8:e1:0f:
         87:7a:e6:9b:65:3d:eb:4c:95:76:c1:95:e6:78:84:c3:56:fb:
         4a:8e:01:23:ed:cf:14:b7:a9:ec:d4:8c:96:ad:f6:e7:7c:f7:
         cf:cf:be:16:a5:c5:8d:58:99:d8:bb:42:fa:7f:ec:1b:42:33:
         11:57:c5:d8:aa:e8:f2:86:a7:64:28:44:3d:e3:cb:42:d1:7a:
         74:99:dc:7c:da:3a:32:96:41:25:7a:96:d5:54:bd:ce:ca:ee:
         78:29:d3:75:d9:0b:cb:43:c6:6f:f9:ec:3d:a4:0e:e0:9e:29:
         d9:d7:b0:d6:b9:eb:c0:3f:30:30:7e:f1:59:dc:0a:73:60:ed:
         f5:53:cf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:39 2024 by rpki-client on console-fra.rpki-client.org