Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
File:                     9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa (raw, json)
Hash identifier:          Wqtt3Uo8bXPF+yBcDitN/dJ8MmezI1Nsy9cpgfd7fUk=
Subject key identifier:   2F:54:67:F0:0E:38:3A:C6:7A:BD:C1:20:D0:7D:A3:79:9B:14:B9:4B
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285847600B8CEAF1FA3B8B4C4E4740
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     11426
IP address blocks:        216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24
                          216.158.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8c:ea:f1:fa:3b:8b:4c:4e:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=71f9d811-7d0d-4eda-89a9-5eb8d12db4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:c8:1a:49:ad:f7:56:6c:d7:2d:e1:bc:bc:
                    12:ed:e9:0e:ce:ac:3d:f3:07:bb:66:97:4e:7e:cd:
                    ba:96:90:be:d2:d4:f7:a2:9f:f4:20:95:16:80:c1:
                    6b:32:52:da:50:3e:1a:d8:c1:c5:53:3f:b2:71:eb:
                    9c:e4:c3:a5:4b:ab:6f:41:cf:b0:be:3c:8a:e3:b4:
                    53:da:a1:0d:6d:91:df:e6:34:7f:83:b2:c4:9b:ea:
                    42:c2:45:be:7b:95:d2:f7:74:42:90:9d:b0:34:5a:
                    4b:c7:9e:bd:14:4d:fc:f7:96:0e:0c:3d:50:74:0a:
                    67:e1:46:c2:8a:c3:ef:6b:33:ad:c1:b3:7d:48:84:
                    78:7f:24:61:17:0e:2e:d0:3d:df:5b:cd:d3:0d:c4:
                    21:8f:86:ee:4e:40:44:8d:5f:35:d7:21:98:91:30:
                    b7:b2:de:1c:a7:12:e4:48:95:b9:22:3e:35:90:d8:
                    94:df:78:4d:c8:3e:23:76:f3:17:5d:06:4c:4b:8a:
                    26:93:7b:24:5b:de:32:c0:d9:67:32:19:57:93:0d:
                    87:a1:bb:64:8b:d8:fd:67:cb:1e:15:a6:0c:66:03:
                    7f:e6:37:86:d3:5a:0f:4c:94:f7:20:dd:e7:89:0c:
                    64:df:bf:41:57:03:c4:90:3a:18:bd:dd:61:25:b1:
                    95:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:54:67:F0:0E:38:3A:C6:7A:BD:C1:20:D0:7D:A3:79:9B:14:B9:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:ed:66:82:8b:4e:08:48:f1:50:40:24:5b:e4:60:d9:63:
         49:2d:ed:64:79:15:0f:aa:af:89:43:a1:8a:41:15:7a:c8:4a:
         ba:a9:b1:36:ee:3d:17:e9:fc:bc:13:79:0a:fb:80:49:74:53:
         04:39:58:14:28:3a:64:c5:41:b0:2d:33:5e:75:f4:24:04:96:
         e6:f7:2f:71:51:d8:88:e5:59:ea:c2:14:4e:12:e7:79:1e:35:
         fb:b0:10:4d:ec:83:d7:df:90:3a:2c:48:18:1c:b4:db:48:af:
         a8:1a:cb:e8:59:6b:78:2b:b6:94:8a:4e:c1:00:f8:bf:8b:f1:
         9b:c9:57:1c:a9:a6:dd:f6:bf:0f:b1:3d:68:15:f0:93:ff:67:
         0d:9d:b2:68:15:e4:81:d1:8b:8d:23:5b:8b:da:bf:2e:5d:e3:
         6f:07:62:47:bd:dc:03:9a:a6:c0:7f:35:63:71:0f:32:a2:75:
         c2:47:1a:80:5e:fa:3b:8b:6f:00:22:30:69:70:c7:de:8f:ef:
         fb:d6:47:b8:bd:37:e3:96:11:13:17:d4:d2:f7:d7:2a:53:83:
         af:de:9a:06:19:16:66:56:03:a5:e5:1b:c8:cc:31:4f:50:25:
         57:75:1b:31:c4:01:0e:0c:a1:7e:4c:50:89:bb:35:7b:75:9d:
         f7:49:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:55 2024 by rpki-client on console-fra.rpki-client.org