Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
File:                     7750e7a6-bfbf-32e2-98ca-db25150e8279.roa (raw, json)
Hash identifier:          NkThS5Gy69SynsyGfLHKpSYCHo4omzT6KqCBlx+Iukw=
Subject key identifier:   33:0D:5C:07:2B:F6:80:3D:AF:04:A9:83:EB:F9:E8:A6:B7:C0:B1:2B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584797E13A00B62D25364195E100
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62651
IP address blocks:        216.131.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3a:00:b6:2d:25:36:41:95:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=1898c32d-f860-43e0-8f0c-6c68a225296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a9:63:cb:c3:40:6b:f4:ac:51:41:29:24:96:
                    5d:82:27:e1:13:40:79:11:8b:b7:bb:44:5a:c9:64:
                    24:af:4d:ee:e2:cd:6e:2a:50:b2:85:17:1a:9a:88:
                    45:f2:8c:05:fd:f7:0f:3f:34:ce:83:52:31:fe:1d:
                    9e:3b:ee:5b:c4:96:b6:8f:41:10:f6:e7:39:e4:49:
                    b9:9e:2f:dc:9c:6b:4a:ed:65:97:0b:b1:dd:9f:cb:
                    31:ad:88:21:d5:11:39:4b:f5:4c:89:34:63:b1:3a:
                    db:91:50:f8:c3:3d:d3:35:5a:45:ac:67:94:7e:5c:
                    0f:7c:66:d8:2f:1f:54:cd:b3:f1:d4:e4:7a:1b:dc:
                    1e:72:2b:00:aa:30:ec:b8:a1:35:b1:66:7c:9c:ff:
                    26:fe:24:a9:51:a2:10:50:de:10:f5:b0:84:2a:90:
                    fd:32:fe:d2:61:0f:25:2f:9b:e3:7c:3f:b9:11:c9:
                    a7:33:54:f8:1d:32:9e:bf:99:4c:85:c6:57:c8:fd:
                    eb:15:c3:54:77:1e:12:42:84:87:89:eb:ed:46:95:
                    98:b8:89:f3:fd:44:95:05:86:45:26:9c:a7:32:4b:
                    76:2c:b0:b2:69:a6:b4:4c:2e:8b:22:97:c6:1f:ac:
                    ff:4b:9c:a1:87:9a:0f:1c:b9:bd:9d:6a:64:55:a9:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:5C:07:2B:F6:80:3D:AF:04:A9:83:EB:F9:E8:A6:B7:C0:B1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7750e7a6-bfbf-32e2-98ca-db25150e8279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:13:a6:30:7d:12:a0:19:3c:29:22:56:30:65:2b:99:8d:
         a3:9f:e3:ea:2d:1a:dd:fc:18:23:75:36:03:c9:80:3c:05:80:
         78:d4:df:5b:23:dd:ec:d5:c2:17:77:76:c6:03:16:64:10:28:
         d7:bd:51:c3:4d:27:19:e0:ca:2f:af:ad:cb:be:ce:73:ee:f2:
         6e:4b:d3:73:e9:d5:d3:dd:3c:9e:a9:3a:1b:c6:16:e6:33:32:
         21:e2:e9:70:e1:08:e3:26:5d:9a:ba:b8:a4:8e:fc:9e:20:a7:
         3a:52:64:76:e3:bc:4f:77:26:b4:61:f2:44:9b:28:1e:b2:2b:
         93:81:17:9c:77:3a:11:8d:0f:d0:ac:2e:58:30:95:0b:9a:dd:
         ef:1d:ea:a1:64:36:17:36:e4:a7:d8:ac:0e:58:a2:b7:b5:f4:
         5f:34:9d:63:c5:66:68:4c:00:bd:ca:dc:81:61:04:73:34:e7:
         9d:f1:37:9d:e6:ea:05:82:bf:f7:15:8b:45:55:6d:f0:02:2d:
         63:1b:da:ca:c4:88:60:14:3e:f5:bb:a0:4a:02:ad:7e:d2:55:
         bb:bd:64:56:7b:86:f8:a5:c7:8d:84:a8:2f:a6:d8:a1:8a:da:
         f8:69:59:63:35:6c:71:2e:8d:31:83:b3:71:57:42:eb:48:6d:
         74:36:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:37 2024 by rpki-client on console-fra.rpki-client.org