Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa
File:                     2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa (raw, json)
Hash identifier:          Iy8JkHQqjI6DiVQ+eurtR2AUnPdp3504Qq53VbQYN+E=
Subject key identifier:   5D:E8:5D:CF:7A:96:00:D5:76:B2:01:27:F9:A9:B6:1F:8B:4B:9B:4A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847924BD80F3BEEBC71C2027B00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     54203
IP address blocks:        216.131.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:d8:0f:3b:ee:bc:71:c2:02:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=9d0afb9c-69c6-4a6b-b27c-0833e25531ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:6d:a0:f3:a1:ba:98:f7:3f:d3:a8:5d:7e:
                    65:17:ac:87:43:66:a6:f6:6f:46:a4:65:0a:00:df:
                    89:22:ff:d1:90:8e:73:da:3c:d2:7f:40:3a:c6:33:
                    c6:71:99:3d:a1:e3:c5:c7:b0:f7:10:9b:f9:9e:6e:
                    36:ef:48:6c:95:0c:56:8b:70:36:27:da:5c:57:99:
                    2d:86:79:f6:c0:60:e9:4e:db:0a:e1:90:ca:af:f8:
                    0b:be:0c:c7:b6:c5:51:c5:1a:f9:db:6a:76:15:69:
                    36:f3:d6:44:d5:25:d2:45:34:14:ca:81:70:56:e0:
                    d6:e3:a5:39:5d:4f:3c:3c:db:0e:f8:3a:35:02:6e:
                    aa:74:dc:91:15:fa:24:bc:63:08:19:86:66:5f:dd:
                    3e:c2:7a:cc:14:0b:7d:52:72:56:8f:39:ad:8e:da:
                    b9:24:59:e9:63:ac:be:71:85:b4:e5:8f:58:97:cf:
                    8c:ba:9b:1a:87:3b:e4:35:54:62:62:94:e4:d4:0d:
                    06:bf:38:9b:ba:e6:31:96:22:5f:51:68:35:b9:db:
                    13:b4:d9:c3:d5:e9:5e:f0:8c:ea:f9:19:ad:03:20:
                    84:1b:78:ac:de:e4:d4:99:e5:04:01:e4:c6:b3:4c:
                    d2:d3:66:8e:33:64:e0:c3:82:3c:72:38:aa:1b:e0:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:5D:CF:7A:96:00:D5:76:B2:01:27:F9:A9:B6:1F:8B:4B:9B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2355fa21-75bb-3237-b4a0-c63da3c31c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:06:80:8f:89:fa:ff:4a:70:e7:43:86:ff:53:ab:6a:9f:76:
         d4:8d:fe:fa:d3:23:0d:92:99:7f:49:97:cc:95:88:79:ae:3d:
         0a:14:61:1d:15:ed:31:e9:96:48:1a:a5:e4:ce:5c:5f:4c:21:
         3f:1c:d3:fa:f7:23:cf:59:50:8a:f0:b4:7e:b9:eb:fb:60:20:
         00:41:e8:14:5e:b3:b1:e7:e7:85:73:08:ed:82:ce:c4:12:43:
         a8:99:aa:03:d9:99:84:ac:9e:af:6b:25:5c:56:fd:fd:0f:4c:
         9a:c5:33:37:07:1c:3c:13:cd:b5:37:6c:dd:dc:aa:66:49:b3:
         ce:f0:58:59:4a:fa:11:2d:0f:1d:ee:8a:88:7d:43:df:dc:40:
         3d:af:a9:76:51:0a:65:5a:19:44:4a:9c:11:70:69:07:46:ae:
         e0:93:3b:f0:d2:4c:ed:4c:f8:14:1c:da:d3:aa:5f:5a:8a:d4:
         d1:1c:99:9e:99:c4:bb:88:17:c6:9f:48:91:67:32:13:3b:07:
         a8:eb:57:da:b7:ff:f3:4d:87:da:bd:e9:0d:68:a7:d0:77:ec:
         ea:95:c7:8d:38:c4:06:4a:32:88:1d:b5:51:21:f8:73:79:e0:
         9d:4d:ae:eb:04:79:e1:a3:81:62:e1:97:04:32:18:77:55:81:
         d4:ee:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org