Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa
File:                     0253e5ee-877d-38d4-a970-551d593f295d.roa (raw, json)
Hash identifier:          nvmkYqIYbJPDR5NozoLowII8S5AWWsi1mnmt0LKvZd4=
Subject key identifier:   E6:36:32:6F:18:1A:3C:93:25:34:90:C9:2E:AE:D5:71:77:9B:48:E2
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584754E0CF802BF56DE9401C8E00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     6461
IP address blocks:        216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24
                          216.158.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:cf:80:2b:f5:6d:e9:40:1c:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=8d64407d-53f3-4b06-a469-b005067b4b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:81:6e:d2:f6:48:ee:72:01:a4:36:48:8b:
                    15:4e:58:e1:85:d0:40:1f:41:bd:8d:58:78:7d:a1:
                    e2:e4:d1:12:9c:63:78:24:5c:e1:d9:a1:e3:dc:aa:
                    b1:2d:50:23:49:5a:9a:0b:4d:e7:b3:6a:7b:f8:35:
                    af:81:60:8f:3a:05:5f:2e:87:12:5a:c8:d2:fd:2a:
                    65:35:66:b4:80:34:74:b3:79:b9:8c:93:54:1a:d6:
                    48:7e:79:f3:88:92:09:34:ae:0a:b7:03:c0:22:cc:
                    82:19:39:a2:29:29:d6:af:74:05:c9:4c:40:fa:f1:
                    27:c0:4d:d7:d5:4e:a5:49:b2:4a:9e:ac:c5:fc:9e:
                    c5:2d:a0:74:0b:1b:be:e8:5b:60:1d:61:ba:4e:db:
                    fa:df:8a:7a:62:2e:3f:04:a7:bb:62:6c:39:19:63:
                    f5:5e:31:ce:d1:35:db:4c:d0:0a:91:76:27:80:11:
                    aa:12:88:d2:04:67:59:c1:9d:9c:98:72:ce:3b:6d:
                    29:79:ae:84:d0:b9:4e:fc:01:d1:0c:cd:88:57:b1:
                    20:79:0b:3a:8b:55:0d:bc:6c:7d:05:b7:2c:fc:c6:
                    6f:ee:78:fc:ee:7c:8f:91:eb:8d:a9:21:88:3f:28:
                    22:c0:39:c7:37:b6:80:d8:ed:38:04:24:3a:31:f3:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:36:32:6F:18:1A:3C:93:25:34:90:C9:2E:AE:D5:71:77:9B:48:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0253e5ee-877d-38d4-a970-551d593f295d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:ff:48:d5:63:a6:ea:d1:50:c9:44:37:71:f0:9e:b1:b1:
         ff:92:ae:43:3d:bf:77:85:68:34:72:c1:12:75:e0:74:69:5d:
         3e:2d:c0:55:ae:97:23:f8:73:85:1b:3e:94:a5:cb:f2:fa:b1:
         a9:87:15:f5:d7:be:86:8f:b4:dc:77:55:d5:f9:be:78:4c:34:
         0c:e1:ae:2b:51:f2:3e:ac:69:73:69:eb:d2:4d:cc:89:c2:b7:
         7d:20:69:10:4c:4f:0d:68:cd:54:ed:83:f4:90:49:fd:d8:11:
         21:1e:b2:c0:80:ba:62:84:4f:0c:14:e2:84:de:e6:64:c1:44:
         9d:36:47:09:e9:47:53:8e:c0:bf:6d:30:5f:e1:9a:e6:03:88:
         49:65:5c:92:d3:84:26:c2:73:2c:f8:27:90:4d:12:87:43:d8:
         a9:3f:66:9a:4b:b2:fc:f5:ba:a6:49:99:8d:7d:c9:b4:54:36:
         28:25:c0:e9:67:fe:2b:ec:bf:5c:5d:55:3e:94:f1:3a:2a:f1:
         7f:93:fa:46:cd:21:1c:4b:ea:a2:16:e4:c8:ab:49:46:2a:af:
         e0:69:fe:cd:0f:f9:e8:13:30:4b:d7:46:85:bf:57:e6:36:18:
         78:1e:66:8c:47:1b:37:c4:6c:ba:8c:bd:b9:7e:70:a6:d2:31:
         82:96:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:34 2024 by rpki-client on console-fra.rpki-client.org