Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
File:                     87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json)
Hash identifier:          fsWk7dvnjWWUqoGkVwBS6NPDhbch7uy6hJSJrVKTvnU=
Subject key identifier:   B7:9B:B9:E9:33:5C:14:1D:3D:10:35:09:8D:DF:A5:8F:B7:BA:8C:BF
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858477230ECF91546D14634C09840
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     395831
IP address blocks:        216.157.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ec:f9:15:46:d1:46:34:c0:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=d61df58b-7d8a-423d-8da0-9356c00443eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:f5:e1:f3:c3:e1:cf:1b:06:69:20:b8:91:
                    1a:f2:79:5a:72:1e:c8:43:c8:02:46:8a:18:cc:cf:
                    19:12:4e:1b:ec:b6:94:5b:cd:79:64:27:d5:71:0d:
                    6c:92:81:7a:af:db:aa:9a:6d:7e:32:0e:36:d0:4f:
                    c7:19:7e:71:e2:90:b1:71:64:a5:7b:da:91:f0:3b:
                    8a:56:80:49:f5:12:c4:8a:63:1d:c6:95:35:60:e2:
                    9a:a7:6e:26:f3:57:f4:01:74:22:10:bc:c9:ed:81:
                    ec:22:28:61:23:82:32:79:ee:14:50:7f:c1:37:50:
                    44:f6:bd:6e:6f:fe:65:08:ed:44:c2:42:c8:ed:e5:
                    54:ba:9a:c9:c5:b1:1b:2e:ca:a3:1a:fd:cf:84:4b:
                    3b:6d:64:10:77:6d:f7:bd:88:30:a2:11:7e:c2:b2:
                    d4:bf:33:fb:3f:6d:93:04:eb:23:b5:1c:0d:89:14:
                    4f:a0:f7:5b:39:83:6f:ba:01:a7:9f:33:7a:19:fa:
                    8c:18:08:1f:3d:25:32:77:fc:d3:bf:5f:1f:1e:d2:
                    b2:5d:c5:23:b5:5d:86:56:9f:58:1e:fe:be:dc:67:
                    d3:e7:a8:1c:9b:08:98:5e:a5:a2:4f:bc:26:3c:3d:
                    ea:75:dd:0f:1d:51:9e:1f:f7:fb:eb:de:e0:84:2a:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9B:B9:E9:33:5C:14:1D:3D:10:35:09:8D:DF:A5:8F:B7:BA:8C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:76:a9:6c:b8:2d:ae:bc:ee:c1:00:ec:ef:4e:e9:62:20:
         93:c9:7d:cc:d9:f6:ce:05:d4:10:53:8c:39:ae:f9:07:e6:f4:
         e9:77:72:35:3f:a9:c8:8b:1d:37:57:e6:99:8a:89:5e:86:00:
         d6:5d:0b:c8:2c:a4:64:a4:7c:ab:9a:76:5c:a7:55:c5:eb:c4:
         f7:3f:5d:c9:de:41:85:72:fa:ae:f7:a7:20:6e:22:75:77:b6:
         ce:6a:5d:b5:fd:5d:4b:ff:f3:d4:db:6a:28:6a:cf:8d:fa:0b:
         5f:44:f6:d4:e9:7d:2e:16:2e:03:14:e3:47:6b:46:f7:2a:19:
         43:3b:ca:f9:fb:cb:3e:bb:f8:0e:6a:0c:39:d1:97:82:af:e7:
         08:d2:58:cf:04:71:1a:c9:65:a2:2b:f7:8d:3c:f7:80:e6:97:
         bf:a0:fe:17:d2:c7:c3:63:6d:33:90:16:25:d0:34:34:4c:ad:
         7a:1a:0b:17:4c:8d:77:ea:52:8f:3f:68:f2:07:71:b0:80:79:
         44:7e:68:22:f6:fe:3a:0c:e6:4a:fa:61:e2:81:a7:ff:6a:af:
         8d:fd:81:eb:f3:5f:84:f8:00:a7:b0:b7:c0:3c:ea:34:72:6e:
         56:19:05:f2:c2:26:7c:b4:32:8e:57:e1:6b:24:f5:a0:9a:ef:
         ac:c5:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:30 2024 by rpki-client on console-ams.rpki-client.org