Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
File:                     f1adbd29-319d-377f-910e-3fd95df8a73b.roa (raw, json)
Hash identifier:          oE6Ft8RBoFN4bvsH6c5dsV4VwHDp4GVWF1XCJbvM7Zc=
Subject key identifier:   58:CE:53:58:FE:F9:1F:B0:2F:05:4A:10:FD:1B:AC:A3:B5:9F:09:62
Certificate issuer:       /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
Certificate serial:       010D0C9F4328584733609D5E69532ADCCDD0CA80
Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     16509
IP address blocks:        162.219.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9d:5e:69:53:2a:dc:cd:d0:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=dddbdd0b-67b9-4f9f-9ea2-4901b6f16a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:7d:dd:56:f6:c2:2f:b8:b5:19:0e:ba:02:
                    7f:ec:50:da:1b:46:9e:78:d9:9e:ff:a7:91:96:e4:
                    d5:a0:a4:6c:46:0d:e7:50:f1:56:6d:1e:cd:a0:0c:
                    57:1a:16:3e:a3:3b:50:bf:e6:f6:bd:cd:9a:05:af:
                    b0:b1:2c:f9:81:04:7f:c2:db:ea:e8:f4:0d:e4:6d:
                    50:96:69:65:20:67:2e:59:a6:aa:e0:18:a8:90:12:
                    37:2e:ae:fb:a7:f2:7f:3e:c6:f6:4a:76:9a:4a:26:
                    d4:f5:d5:5c:2d:7c:d2:ec:a0:aa:03:17:39:fd:f1:
                    ba:75:6c:e2:8c:bb:eb:84:31:7d:1f:8a:fa:c1:6c:
                    9f:9a:2a:f8:5f:ce:a5:ff:ba:45:8c:af:2c:b4:65:
                    af:7f:3f:dd:45:50:c2:5c:c1:2b:39:48:3e:1e:ad:
                    8f:0b:91:bf:65:88:5d:3d:20:dc:22:62:24:28:cc:
                    5c:f1:eb:7e:d8:63:fb:92:d4:fc:57:61:1e:00:cc:
                    19:d2:5b:92:a0:c6:0e:b3:8a:41:68:f2:ea:14:46:
                    0a:00:83:aa:ce:4d:77:b6:85:67:21:3a:c4:72:db:
                    ef:f2:7f:93:96:43:87:29:93:ea:47:6f:37:2e:9d:
                    33:7a:7f:66:d0:10:8c:09:92:3a:19:4c:ce:79:7c:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CE:53:58:FE:F9:1F:B0:2F:05:4A:10:FD:1B:AC:A3:B5:9F:09:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/f1adbd29-319d-377f-910e-3fd95df8a73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:81:09:76:58:62:cd:0f:21:de:37:41:cd:6e:02:04:af:da:
         ec:b1:75:54:be:99:62:11:ae:93:1e:d3:3a:a2:dd:26:cb:8f:
         95:66:55:dc:da:65:cc:8c:60:a2:84:4b:2f:18:ec:e8:d7:81:
         df:af:79:45:50:dc:ef:99:5c:1e:45:0f:bf:aa:b9:d0:28:66:
         67:8a:c9:5a:99:12:79:d4:61:bd:77:7a:82:54:e0:3a:86:de:
         76:14:fb:6c:db:f3:da:01:1d:43:01:36:86:b6:82:11:24:57:
         89:f1:db:e8:c8:ef:11:d2:ee:52:fb:54:89:91:de:91:d8:1e:
         a5:39:7b:04:f4:e1:3d:fe:ad:ff:75:47:8a:f1:ff:9f:90:ad:
         8e:46:ed:a0:1a:eb:27:92:33:44:40:ea:b3:03:49:54:51:c5:
         78:1a:a1:d5:1a:fc:16:71:10:bd:ce:23:f0:a3:b6:a1:85:db:
         84:ee:12:5b:d3:b5:fc:79:26:19:b0:07:ad:28:7f:5e:92:0a:
         28:7b:15:c6:52:46:6e:1e:06:6c:46:1f:0b:af:fe:00:60:b2:
         a6:a3:bd:30:53:ed:79:46:1f:05:cd:d5:74:86:02:03:db:82:
         f5:0a:12:f5:e7:e2:3b:47:df:a5:ac:91:14:4f:a4:4a:25:c6:
         c6:58:0f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:10 2024 by rpki-client on console-ams.rpki-client.org