Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa
File:                     0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa (raw, json)
Hash identifier:          aCbu1Z1CUka3sVnXF659v+KxSNrOUSX4+v2lGNhTp1M=
Subject key identifier:   3D:C5:4B:23:F5:BE:67:05:B5:A4:20:B2:65:E7:EC:C0:2D:73:74:07
Certificate issuer:       /CN=ebe4e372-a81b-4281-b3fe-19178dec0235
Certificate serial:       010D0C9F432858472C65E212D1490FF2D10EB3C4
Authority key identifier: 0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     16954
IP address blocks:        209.54.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e2:12:d1:49:0f:f2:d1:0e:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe4e372-a81b-4281-b3fe-19178dec0235
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=47429c24-032e-4b20-893b-d5ca7b805865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0a:4a:ef:28:51:2d:cc:0a:5d:40:dd:74:2e:
                    38:d1:c9:0f:41:82:17:0d:1d:2c:62:bf:3a:3e:fc:
                    6f:d1:e1:45:9f:b3:d6:91:bb:56:d8:b7:18:b5:c4:
                    24:77:9e:81:4b:9b:4e:7b:88:b2:0e:8a:51:db:e4:
                    53:c3:f8:db:cf:ed:60:50:c0:df:6a:4b:f5:36:84:
                    6d:64:14:23:6f:27:8f:b7:7d:70:45:65:c6:30:cb:
                    f8:9a:ed:e9:78:33:86:bf:99:6f:4d:43:6d:d7:94:
                    31:cf:f6:ca:10:8d:e4:ae:a3:a5:25:5f:03:37:89:
                    b5:19:3a:51:b3:26:a0:53:67:25:34:26:aa:a0:b5:
                    cf:8f:09:00:8d:04:1a:35:b6:8e:16:73:04:cd:25:
                    54:42:98:8c:7b:aa:7c:92:1c:a9:d9:c9:9a:ed:43:
                    89:03:21:90:77:67:60:be:d6:7f:23:42:cc:73:37:
                    86:c7:7a:6a:4b:e2:0c:93:bd:7f:e0:89:74:f7:06:
                    bd:13:3d:47:5c:0e:21:13:7d:bb:76:e0:d6:a4:2b:
                    9a:07:18:09:31:5b:ff:ee:14:a2:20:97:17:82:1e:
                    33:d0:95:58:46:5f:e9:1a:32:c5:0f:34:92:fc:38:
                    57:f7:8c:80:ff:80:50:e3:54:ba:82:c2:0f:d2:32:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C5:4B:23:F5:BE:67:05:B5:A4:20:B2:65:E7:EC:C0:2D:73:74:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/0cbea9c5-9c1e-3fbc-b5f8-51c541e17775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235/ebe4e372-a81b-4281-b3fe-19178dec0235.crl

            X509v3 Authority Key Identifier:
                keyid:0C:58:64:9B:CB:6F:FF:34:45:70:9D:A2:B8:5C:8D:E0:FC:9F:F5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ebe4e372-a81b-4281-b3fe-19178dec0235.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.54.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:74:26:3c:78:3e:27:74:1e:01:5b:bd:c2:8f:3e:61:9a:
         ff:36:4a:1f:73:a4:7c:03:06:d5:23:77:87:be:a9:6d:2d:79:
         31:57:e2:f1:ac:80:d3:4f:0f:20:ff:18:18:f2:bc:24:65:f7:
         3b:3e:db:df:39:5f:ae:5d:2e:8d:e0:38:a2:52:0f:f1:39:ce:
         21:54:7e:38:da:ee:fc:4e:4d:e6:41:bc:ae:e8:a4:58:fb:81:
         a1:84:0b:d5:54:b9:2b:54:ba:67:17:f4:9e:0d:9b:59:77:de:
         97:0d:01:7f:d0:35:08:a2:ab:89:ae:fa:bd:a5:35:f3:c2:46:
         52:92:d4:72:11:70:a8:1b:f7:0e:80:1a:e0:50:43:c8:55:38:
         06:00:13:e0:64:33:57:32:87:e0:d6:96:c0:f1:c8:12:d1:c7:
         71:fa:2c:38:2b:04:cf:9b:d1:bc:cf:62:85:09:40:f3:32:7e:
         03:5a:31:e3:c8:d9:db:b6:a3:f7:20:b6:78:4b:33:d0:1b:37:
         48:6d:5a:6a:a6:da:48:5c:23:a3:65:70:bf:3b:12:07:f2:9f:
         09:a0:ce:2f:88:77:0a:7f:9c:f9:32:ca:da:71:85:8d:6d:e2:
         1b:29:1f:ac:a6:fe:62:ab:bd:70:57:4a:28:c9:4d:00:a3:c7:
         f3:b8:ec:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:47 2024 by rpki-client on console-fra.rpki-client.org