Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa
File:                     f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa (raw, json)
Hash identifier:          3cxYAoe4lic0e6rtDlgaH7oBCK0dRaaVzX1xz/00td4=
Subject key identifier:   DE:AC:2B:30:0C:F5:83:36:F3:74:60:C0:E7:4F:49:C5:CA:EB:B8:D1
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F432858474585FCD804365625C9AF9A00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     16696
IP address blocks:        216.120.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fc:d8:04:36:56:25:c9:af:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=82aece96-a1ce-44f2-8e72-388925c56a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:81:03:1f:77:fe:2b:4d:50:92:c5:61:f8:e3:
                    49:5a:3d:84:cb:be:30:3e:3c:85:56:cc:eb:fc:60:
                    37:3b:e1:a8:01:1a:b7:0d:ce:a2:b3:48:0d:04:df:
                    41:bf:0a:66:72:a5:c2:cb:25:f7:5f:2a:83:4d:60:
                    07:96:bb:59:e3:bf:6b:33:8c:4b:82:a8:a6:cd:26:
                    6c:ad:b2:75:da:26:f2:d4:07:01:aa:61:2c:93:da:
                    dc:87:de:63:17:29:8d:a9:32:79:69:76:b8:ab:1d:
                    ca:d4:ab:cf:02:3c:1a:af:06:0c:93:2c:da:93:48:
                    02:fd:55:cc:0a:e9:76:14:4f:a3:23:9f:5b:cf:5d:
                    69:ac:db:20:15:64:7c:3b:13:3c:3d:30:b2:66:48:
                    35:a6:bf:6c:48:67:ea:5a:0a:6b:4f:a6:49:9e:9b:
                    18:a8:57:8c:05:50:d7:db:51:da:36:2b:59:3b:97:
                    e9:9b:5d:64:af:0c:ba:95:dc:5e:e2:27:92:2c:6a:
                    56:13:b5:5b:ff:a2:46:96:7c:ee:0b:dd:80:a8:d2:
                    5d:fe:5a:f4:2a:40:35:25:c8:2e:a2:23:48:6a:cd:
                    30:54:d4:3d:35:5a:e5:a0:7e:03:9f:50:73:c2:03:
                    83:18:83:2f:5e:a3:68:1a:6d:46:a4:cd:68:42:ff:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:2B:30:0C:F5:83:36:F3:74:60:C0:E7:4F:49:C5:CA:EB:B8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f8e4c33d-1d7a-3ad4-965c-a237a13ed699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:bf:54:4e:2f:04:0f:ec:7a:31:13:9b:4c:02:28:b2:12:
         24:b5:cb:7b:a5:ed:96:31:e7:31:58:40:91:2c:3a:ed:1a:d2:
         fa:32:70:25:f0:7d:f0:e5:c4:ff:1d:2e:cd:ab:01:31:c9:be:
         36:ea:b3:15:32:56:0d:f4:ea:ed:2e:8e:64:67:16:e9:e2:e2:
         8d:64:9d:81:03:27:eb:63:4b:30:7d:e0:99:19:97:4f:d6:31:
         28:7b:25:f0:38:39:2c:08:d9:c1:08:e3:70:12:ad:9d:9c:e7:
         37:78:23:d5:ca:cf:e3:ef:4a:16:aa:0f:34:93:27:37:9c:54:
         2e:ec:f9:bb:09:ab:fe:a1:82:e5:a7:06:f7:ec:29:22:5f:b1:
         c6:7b:dd:ad:87:08:c9:5c:6a:73:fd:50:fa:da:12:30:38:3c:
         55:9b:79:53:0c:3d:e6:37:c3:47:ba:b2:d0:d4:a7:d6:9a:d9:
         31:7d:6d:d9:31:dc:ed:f3:ef:70:da:d8:c3:e6:4c:8f:a8:1f:
         f3:b5:6c:78:0e:b5:a0:ff:60:80:7f:70:27:43:ec:c3:c2:0c:
         a8:8a:92:ee:a7:88:7e:65:2a:b8:55:14:e8:68:5c:2f:d3:0e:
         8e:93:aa:92:e2:7c:90:2b:3f:4f:fb:24:75:a7:dc:90:15:4e:
         61:8d:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:30 2024 by rpki-client on console-ams.rpki-client.org