Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa
File:                     ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa (raw, json)
Hash identifier:          j/FmhFFkRmK9Xkj5MinHNK3g0PUIeKClGbG8crM3SOY=
Subject key identifier:   ED:CE:85:82:F7:2C:B5:EE:18:2E:F4:8F:27:6D:70:D1:7F:FC:B9:1F
Certificate issuer:       /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial:       010D0C9F432858476E00FBEC38A7001327547974
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     10439
IP address blocks:        216.98.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fb:ec:38:a7:00:13:27:54:79:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=d5674699-57c9-43fd-88b7-d959e170c85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:ea:92:ba:2c:90:65:76:aa:15:a5:e9:e9:
                    26:e7:42:f5:80:3c:71:c8:67:e2:fc:02:12:f6:48:
                    fd:a5:5b:fd:29:2f:bb:13:39:d2:64:08:b8:15:60:
                    82:49:af:61:e7:1e:58:75:4e:5d:d5:ab:77:bb:16:
                    46:12:24:91:d2:8e:d3:28:d1:b0:f4:e3:86:7f:df:
                    75:12:f9:db:6d:c0:96:c0:e4:b5:9e:7f:12:96:ef:
                    35:c4:56:d2:03:b6:a7:f2:81:cd:67:6b:62:46:b3:
                    96:f4:1c:cc:0b:5b:2c:2a:c3:cf:aa:fe:aa:32:55:
                    22:39:50:2b:72:15:de:ef:47:63:73:80:f5:50:4d:
                    02:35:25:2d:ed:52:a9:47:ae:55:22:72:56:73:b3:
                    b4:93:f0:a1:ea:5a:a1:73:3b:7a:69:a1:ad:6a:61:
                    b3:6d:89:07:b7:99:49:a4:f6:30:dd:81:f0:cb:7f:
                    09:b6:0b:3d:ea:58:80:bc:65:84:df:6e:59:76:4f:
                    79:5a:ee:11:0b:50:57:28:a4:17:b5:20:26:f8:54:
                    93:c8:18:7d:b8:95:34:78:42:c3:4b:cd:34:cf:22:
                    13:63:fe:22:87:c0:b0:23:62:fe:d3:2c:74:15:4e:
                    fc:9b:5e:c6:b4:09:0d:5b:e6:c5:8d:ac:9d:50:15:
                    a2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CE:85:82:F7:2C:B5:EE:18:2E:F4:8F:27:6D:70:D1:7F:FC:B9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl

            X509v3 Authority Key Identifier:
                keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:1f:38:2a:f4:7c:c6:09:18:21:3f:73:28:cb:d7:96:bc:f7:
         70:df:58:6b:84:0c:b7:6b:b0:c9:d8:56:b9:fc:24:60:40:d1:
         65:24:10:27:a5:83:b7:ec:7a:63:21:86:ae:d4:43:12:fc:0e:
         1d:bc:fc:dd:30:fc:15:38:4d:25:42:08:7f:bb:86:b7:04:4a:
         28:df:22:05:80:ea:fa:67:cb:aa:4f:d9:92:a0:ad:7a:62:12:
         85:fe:82:28:09:7b:6d:f4:ff:49:4b:f1:0b:7a:2c:8a:e1:8c:
         12:a9:ce:17:6b:0e:ce:ec:17:cb:a0:ad:fd:b7:fd:00:5b:4a:
         cc:fd:6e:b2:1d:d2:cd:61:6d:4e:08:c8:b8:2c:1b:9d:16:3d:
         52:24:52:e9:4a:6d:a7:d4:6a:20:68:0c:34:88:f9:34:58:44:
         f9:d5:52:5b:d4:2e:75:0b:f8:be:66:aa:a6:fc:58:a4:de:d8:
         11:2a:a7:02:ed:69:5d:2f:e6:3e:8e:8f:26:3d:8e:79:2b:41:
         3b:f9:2c:8d:0e:ce:77:31:87:97:04:ba:2f:59:57:1a:43:3d:
         f4:d1:c0:0f:db:81:bf:b3:e9:66:92:dc:96:0c:58:b9:fd:c0:
         89:35:cf:f3:5e:0d:79:8f:23:03:de:06:95:ea:5c:66:34:ca:
         05:b1:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:25 2024 by rpki-client on console-ams.rpki-client.org