Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa
File:                     8c132f7c-982b-3312-834a-60a366477a88.roa (raw, json)
Hash identifier:          x2WDW19WacH7GnPKX1aGpQ3PslXKgrPXbqSymb8LNBo=
Subject key identifier:   53:F3:B6:24:88:35:0D:DC:AB:08:D1:4D:5A:27:9B:AF:26:B3:50:B4
Certificate issuer:       /CN=c8cbe89c-d0be-4948-ba08-b681d11aff00
Certificate serial:       010D0C9F4328584787213061143F76D1429E64C0
Authority key identifier: D2:C4:E1:7E:88:C6:8A:F2:17:F4:27:DB:8F:12:D1:29:B4:20:6F:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     29758
IP address blocks:        216.183.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:30:61:14:3f:76:d1:42:9e:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cbe89c-d0be-4948-ba08-b681d11aff00
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=0b7002fc-7002-4647-b7aa-77666cd08428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f0:b6:87:e0:4a:14:20:44:46:25:5e:a5:06:
                    38:2c:bc:ca:e7:09:51:6c:ea:37:78:9d:02:76:d9:
                    f9:2d:2d:d5:ae:92:10:f8:3a:95:8c:af:4b:c5:12:
                    dd:58:79:70:58:25:d1:02:65:4a:14:13:f0:6b:52:
                    2c:7f:29:b2:4c:b2:71:82:27:68:72:01:a7:69:57:
                    d7:d2:ad:1a:1c:8a:32:8f:27:89:27:2f:24:e8:1b:
                    ca:e1:f0:9b:a2:c9:a3:6e:31:06:1e:eb:45:ea:0b:
                    cf:df:14:fe:02:4f:99:56:2c:a1:0f:5b:83:04:74:
                    7a:7b:43:a1:94:52:c9:2c:77:b3:99:82:1e:d3:68:
                    65:64:39:a4:e7:c0:08:5f:a6:ea:db:17:b9:ad:ec:
                    06:db:24:95:76:ba:1a:fb:49:cf:1b:23:61:43:e2:
                    55:4f:1b:ae:5f:4a:57:ee:6a:53:0d:29:d6:a3:37:
                    bf:f7:84:63:4a:2d:0a:64:71:4a:3a:6e:be:4b:19:
                    a2:4a:c6:c0:29:e9:aa:7d:29:2e:6b:04:7e:33:7e:
                    1a:94:72:d6:7d:71:4f:b5:64:8f:73:da:bd:21:87:
                    e6:d7:29:f4:50:3d:54:23:76:22:45:ef:ab:2e:7e:
                    94:57:09:1b:42:b2:65:fa:15:20:51:1f:d2:2e:a9:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:B6:24:88:35:0D:DC:AB:08:D1:4D:5A:27:9B:AF:26:B3:50:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.crl

            X509v3 Authority Key Identifier:
                keyid:D2:C4:E1:7E:88:C6:8A:F2:17:F4:27:DB:8F:12:D1:29:B4:20:6F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:64:7e:63:51:cb:17:4b:55:ad:1d:ed:41:fc:41:49:c6:
         9e:04:52:05:54:70:b4:2b:02:27:75:45:79:c4:08:78:3f:45:
         c3:1e:a3:83:6a:d3:be:e2:63:97:5d:48:97:37:fc:90:83:d8:
         b8:76:9e:6a:ab:3c:fe:46:4d:10:7c:2c:47:ab:92:40:68:dd:
         14:07:6e:06:20:c4:a9:40:b5:31:b1:54:dc:d7:5e:4c:00:6b:
         23:6c:cd:11:24:be:95:5b:9f:b0:0f:e5:12:c0:f5:dd:e6:3a:
         a1:b2:11:1b:92:2e:eb:5b:51:51:b9:13:03:69:e3:50:cc:93:
         a7:85:ba:65:0d:17:94:d0:27:9f:cc:8e:91:af:ac:3b:da:28:
         6a:2c:14:b7:aa:f1:98:e4:c0:0a:2e:3b:7e:a8:2b:c6:de:e2:
         97:dd:9d:6e:fd:50:50:80:db:95:40:41:c2:ad:72:d6:4b:24:
         1f:91:da:f9:f2:dd:25:4a:cf:81:6a:fe:77:21:de:0f:4f:7e:
         7e:82:14:d9:f3:38:96:b9:69:35:3d:fc:4f:2d:35:ba:8b:44:
         a7:b9:fb:67:fc:be:fc:d9:44:4a:8f:ec:6e:58:4d:41:da:8d:
         e6:64:b4:75:a3:fa:a9:5c:68:83:2a:46:8a:d3:9b:ad:b4:2b:
         db:85:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:29:58 2024 by rpki-client on console-fra.rpki-client.org