Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/26dc885f-68e3-3c86-abc7-eda0efa25261.roa
File:                     26dc885f-68e3-3c86-abc7-eda0efa25261.roa (raw, json)
Hash identifier:          cd7D4a5sJNp8QrmV+d422Z/Hf0OuOtdDFFQlqz0WP8Y=
Subject key identifier:   D7:67:5A:92:9E:A8:81:59:AC:F1:04:9E:35:EA:84:C2:19:C4:D5:DA
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F43285847D01E5278F011D778CC1FA4C0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/26dc885f-68e3-3c86-abc7-eda0efa25261.roa
Signing time:             Fri 08 Nov 2024 16:29:11 +0000
ROA not before:           Fri 08 Nov 2024 16:29:11 +0000
ROA not after:            Thu 06 Feb 2025 16:29:11 +0000
asID:                     397363
IP address blocks:        16.7.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:1e:52:78:f0:11:d7:78:cc:1f:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Nov  8 16:29:11 2024 GMT
            Not After : Feb  6 16:29:11 2025 GMT
        Subject: CN=4a7e6cb5-d969-4463-8fcf-e4c68a5f312d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:1d:ec:2b:f1:b8:01:d1:0e:c4:de:45:c8:
                    93:8f:59:9c:c2:cd:18:2f:dd:db:d4:65:8c:6a:b3:
                    fb:38:23:f5:1e:53:1b:f7:7f:5a:ec:bd:37:99:0a:
                    87:da:b3:57:e8:1d:fa:2b:df:e6:ca:4d:74:c9:9c:
                    b6:cb:f2:7c:cb:c7:3a:44:09:b6:c2:19:c4:31:46:
                    de:be:98:fc:28:c9:77:03:cb:22:0b:75:e1:ae:aa:
                    9c:8b:f0:2c:07:f6:9a:ba:1e:5c:5a:5c:d5:45:2b:
                    cd:b6:55:97:ba:cc:c8:0b:1e:7b:de:c4:7f:84:db:
                    3b:30:d8:cd:b6:b5:34:1c:87:d5:4f:39:0c:8c:19:
                    7a:f7:ba:24:17:7b:d5:22:1d:5e:ab:47:10:3a:a5:
                    6f:77:02:3c:bb:5f:de:e9:54:9e:05:ef:ee:eb:b4:
                    99:e3:e0:3e:7d:0c:2d:2b:fb:09:f5:e7:ac:c7:4d:
                    dc:5d:64:f6:8e:c4:02:b1:a8:25:ee:78:f5:7c:08:
                    77:50:a6:ff:05:c9:0d:ad:56:6b:62:88:34:c2:bc:
                    b2:4d:8c:19:9d:c1:44:fb:9b:93:e5:24:23:10:65:
                    58:31:99:9c:50:f1:c0:98:a8:f9:49:85:40:c5:46:
                    55:ec:ed:e5:f1:0e:78:1b:a8:ff:d5:3f:0e:d2:db:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:5A:92:9E:A8:81:59:AC:F1:04:9E:35:EA:84:C2:19:C4:D5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/26dc885f-68e3-3c86-abc7-eda0efa25261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.7.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:d8:b5:8e:86:9f:62:e3:c3:6c:26:62:1a:73:c1:76:7c:
         a9:29:72:e8:c9:d1:eb:63:13:98:75:fe:5d:1f:a6:f0:ad:93:
         02:f7:02:bd:8a:41:01:a2:7c:22:1c:16:e9:2f:1d:ba:3b:cc:
         31:3e:1a:fe:d3:f7:70:d5:54:f4:43:15:ce:a6:03:2f:60:64:
         f8:33:49:72:e4:0b:c1:80:76:f7:6b:39:db:67:de:39:74:58:
         1a:47:9b:02:93:2e:7d:1b:ac:ef:a6:f0:c2:f5:ab:cc:97:d9:
         79:a2:76:6b:d5:dc:9d:10:ab:a9:50:37:5d:27:21:ab:27:64:
         7f:3d:39:2a:67:85:ae:d3:b5:ea:fa:c9:75:80:a9:e8:c0:9e:
         f9:48:36:c1:15:61:d3:0a:a2:b5:f1:85:0c:fb:78:cf:50:c1:
         ea:93:96:45:f8:17:f9:95:12:f2:47:b4:2c:d8:14:92:57:12:
         30:8f:6b:63:ce:94:cb:4d:32:f3:68:d3:e0:3a:fc:2e:28:1a:
         fe:08:09:39:4c:c8:df:35:21:d4:2f:07:8e:0e:2a:b8:24:52:
         d1:f7:10:67:3d:31:d7:0e:1c:cb:c9:42:98:f8:3d:33:4f:5d:
         2f:09:16:14:70:47:87:10:95:9b:f0:6f:c7:94:c8:30:3b:c4:
         b2:19:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:31 2024 by rpki-client on console-ams.rpki-client.org