Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa
File:                     3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa (raw, json)
Hash identifier:          eN4bufbKaBgTovqlccxe6WumpQRu9HeunA7rdKXAaz4=
Subject key identifier:   D6:B8:2D:A6:59:E3:D7:F6:63:B3:14:5B:A9:A8:67:3C:26:FC:1E:4A
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584797E139EE3E5C196CAA819140
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62651
IP address blocks:        216.131.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:39:ee:3e:5c:19:6c:aa:81:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=dfda7b7b-810e-464c-9a0c-e7b4abf81239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:dc:e8:e5:3f:5f:e7:97:e1:d3:d3:b8:70:
                    6f:4e:65:4d:0a:b8:37:8d:0d:82:73:b7:a1:80:6d:
                    ef:ec:f1:a2:65:d4:87:b3:68:24:15:e7:d8:06:d7:
                    87:cb:f9:9a:79:77:76:27:9d:59:ae:18:9b:d8:b0:
                    e5:00:9e:42:e2:c1:53:1e:e2:11:af:56:25:15:34:
                    33:9d:61:d4:69:e3:78:df:11:11:63:db:2d:97:66:
                    4a:59:a5:c8:60:33:14:bf:93:cf:84:99:67:7f:72:
                    9d:df:09:79:80:cb:73:0f:39:fe:64:f0:7d:93:f8:
                    b0:43:bf:28:88:1c:29:e9:e9:c2:09:ac:93:7c:fc:
                    13:36:bd:21:cb:b7:9e:2f:08:d0:2f:f8:c0:cf:88:
                    39:5e:89:b9:ed:df:11:4d:7b:b8:b3:af:dc:f5:fd:
                    19:7a:cc:65:10:51:70:93:c2:89:bc:9e:af:fe:5d:
                    9a:63:c5:a9:86:f5:fa:bc:fe:f2:81:fd:fa:99:06:
                    f9:02:50:9c:00:ef:75:44:8f:7e:cb:a3:d4:86:55:
                    28:47:24:9a:a7:f4:38:75:45:78:e9:52:df:ee:6c:
                    a1:25:5a:21:98:28:f9:f0:6e:16:8b:c3:53:55:0e:
                    36:ad:83:51:2f:1b:cb:b5:0c:dc:c8:b4:6d:f9:b4:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:2D:A6:59:E3:D7:F6:63:B3:14:5B:A9:A8:67:3C:26:FC:1E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/3f3ae9c5-7cab-35e7-a76f-4f792ccb7783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:fe:7b:48:75:3d:df:95:be:a4:23:85:40:b4:dd:79:70:
         f9:1d:7e:ed:93:2a:99:7d:75:76:98:c0:c9:8e:18:bd:0f:39:
         38:b1:6d:39:66:3a:e6:2e:5c:3c:dd:28:22:29:c2:6c:38:99:
         98:57:11:0c:76:9c:7d:73:65:b6:56:cc:98:fd:45:3f:7d:76:
         84:a9:e2:3c:3e:62:8e:a5:78:6c:be:fc:36:89:f0:2f:3b:e6:
         00:c5:0b:d8:0d:d8:36:5f:8c:3a:ba:32:95:13:5d:e8:bb:94:
         ba:d0:83:65:cb:f8:24:5f:4e:2c:7a:8b:6f:d2:3c:16:0c:5c:
         43:64:94:e4:39:d0:15:27:45:60:f8:20:8e:cd:95:e6:f3:05:
         6a:12:7f:93:1c:0e:f9:0f:56:ab:af:cc:00:60:ec:43:e1:6a:
         83:dd:1b:97:c9:26:da:9f:35:8b:04:b1:22:60:4e:c6:3c:8b:
         a4:e8:24:47:45:6a:4b:26:6f:e9:38:cf:e9:e9:ce:78:4a:42:
         69:40:36:35:56:e4:19:64:17:0a:7a:ae:8a:98:38:bc:13:2a:
         ab:83:7b:01:88:55:5a:4a:8f:5b:ea:ed:1b:cc:51:45:91:0f:
         a2:43:f0:2b:2f:da:c1:bd:fc:37:47:6d:87:67:bf:6d:b1:54:
         2f:33:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org