Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa
File:                     493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa (raw, json)
Hash identifier:          5U3qHt//v/gejCBdT68Vg4fbMvStSNCh1dbSnYk2bdE=
Subject key identifier:   50:EB:3E:07:CE:B8:2F:45:F7:C9:91:D3:A6:3B:AA:4A:12:0F:71:DC
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285847C4AA12CB90742158D8A17F20
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     212238
IP address blocks:        216.158.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:12:cb:90:74:21:58:d8:a1:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=6c6304c9-bf5d-45e4-b24d-255e511beb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:d0:28:e8:19:98:9c:4f:ea:59:7f:94:e2:
                    51:b3:6c:ae:0c:b8:52:87:2c:e0:30:66:cf:94:68:
                    89:9a:54:88:37:37:5a:77:66:42:84:9a:c0:3d:4a:
                    38:eb:92:5e:ec:e2:34:bd:94:6e:d3:9c:df:08:ac:
                    ba:6e:c4:9c:8e:5d:21:76:6e:fc:3f:12:2e:72:45:
                    75:6f:8e:b2:79:f0:ee:7b:99:8b:c0:85:b8:98:93:
                    55:43:57:eb:38:49:bb:6a:d8:69:bc:41:fb:c5:b0:
                    8c:f6:c3:f3:d3:a6:87:37:23:32:6b:f1:24:8e:24:
                    b8:19:7b:33:1c:08:c1:1d:47:b6:1f:38:78:4d:19:
                    51:e0:33:be:45:c1:01:e2:54:b2:73:59:d4:98:eb:
                    7b:16:fa:0f:40:86:70:d4:84:ff:0a:c1:5e:81:bb:
                    d8:3f:ab:81:fc:2b:11:b9:ad:00:99:c9:f2:3c:c4:
                    f9:0f:f5:f6:a2:41:4f:86:29:47:44:bb:ed:51:24:
                    43:55:b9:df:69:dc:7b:da:06:23:4f:a8:de:2d:36:
                    df:50:96:1b:04:13:d2:58:39:c4:fe:a2:b4:2d:1c:
                    31:43:7b:0d:db:19:ad:c0:ff:3d:3d:26:94:e3:dc:
                    c7:89:fa:30:31:e3:ba:fe:77:6f:06:b5:67:66:d1:
                    55:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:3E:07:CE:B8:2F:45:F7:C9:91:D3:A6:3B:AA:4A:12:0F:71:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/493352dc-12e4-3ff5-aaa1-b54d3b0ef83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:07:00:62:42:9f:42:ac:e7:60:6a:08:ad:ae:82:c3:07:2c:
         e0:74:fe:28:28:cd:64:11:eb:30:9e:42:9f:5a:ff:0c:fc:41:
         f3:ef:71:c0:c1:55:4b:4f:62:21:39:66:dc:07:44:bb:8e:01:
         6c:23:df:7a:f8:7f:b4:db:1b:63:22:a2:dd:10:6b:ce:c3:6c:
         02:7d:85:68:d9:65:3a:33:87:43:2a:10:7e:95:29:fe:e0:73:
         d3:1e:dd:94:86:70:97:4e:3e:d1:f3:c4:83:e0:bf:51:9a:0c:
         5a:8d:d5:79:01:a1:3e:fe:2f:f8:65:a6:d9:8f:12:17:8f:34:
         81:9a:8f:6b:9e:9b:c2:46:9c:e0:5d:70:f7:00:61:aa:94:0d:
         ab:0c:43:5f:e2:7d:9a:32:b4:5c:0b:62:2e:6f:ef:8b:c0:91:
         56:bc:8e:9f:2f:df:86:91:83:27:f2:2f:74:f2:cf:33:1d:72:
         1f:ef:3e:af:bf:dd:29:2b:7c:85:d1:4e:c1:92:76:5f:bb:d0:
         7f:84:8a:96:ef:0f:b9:54:02:87:ed:e2:fd:bb:40:9f:51:5a:
         67:06:18:fc:f0:71:5e:e9:57:17:39:e8:20:bb:c7:b5:e5:b3:
         b7:64:1d:1a:e8:05:9b:a8:3c:04:a7:c3:74:39:a5:44:15:5c:
         a4:ff:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:55 2024 by rpki-client on console-fra.rpki-client.org