Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
File:                     459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa (raw, json)
Hash identifier:          ReBzNUMJbQF5b01QExpWhMus0gP+BqAN2YLGEPI+lvM=
Subject key identifier:   2A:82:1D:B3:B0:DC:FF:6B:AF:DC:08:F1:8A:C0:21:26:50:5E:82:09
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858474F4B77C28BC9D6FF9CCCF380
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     400624
IP address blocks:        16.0.57.0/24 maxlen: 24
                          16.0.58.0/24 maxlen: 24
                          16.1.96.0/20 maxlen: 20
                          16.7.6.0/26 maxlen: 26
                          16.7.6.160/28 maxlen: 28
                          16.7.6.176/28 maxlen: 28
                          16.103.138.0/23 maxlen: 23
                          16.143.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:77:c2:8b:c9:d6:ff:9c:cc:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=db2e4af9-aea5-4a39-9cff-679ab9cf8f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:07:9e:82:a9:81:cb:f0:bd:cf:2b:d2:1b:
                    f2:e1:e6:ec:5c:4f:7a:65:b7:9a:7c:fb:d5:fb:ce:
                    9f:34:46:46:c7:20:4e:f2:d9:9a:30:13:50:ff:76:
                    c6:af:58:34:79:2c:ee:d0:58:1d:91:46:6f:0a:57:
                    4a:1c:3d:70:3e:02:61:b6:da:e5:30:38:63:01:3e:
                    15:b5:32:d0:ab:7d:0e:e7:e8:30:ab:9d:96:6d:d3:
                    ce:c8:c4:19:5f:ef:45:2a:31:d8:cf:51:1b:5f:3d:
                    46:fa:95:75:9f:c9:43:ef:7c:13:b7:da:a3:dc:5b:
                    a2:74:6f:d7:45:32:0f:f5:9e:45:06:87:54:83:74:
                    eb:2f:d1:5d:c0:30:cc:bc:ff:e5:e6:32:34:cb:1f:
                    c8:a0:60:6c:d6:6f:10:f8:c5:32:45:2a:95:dc:58:
                    18:0f:d9:9f:7a:f9:18:78:d4:24:1d:bd:dc:19:98:
                    48:63:f0:33:04:fb:9e:7c:13:ca:50:f0:b8:61:15:
                    07:65:09:32:e4:1f:e8:13:4e:b3:17:e6:fc:00:bd:
                    1b:da:26:1a:37:18:3a:f9:1e:df:e2:04:3a:b0:9e:
                    a2:4c:ec:6b:18:83:2c:e7:94:07:1b:5d:27:56:17:
                    5d:0b:fb:03:02:7a:43:7e:19:26:a4:7f:51:eb:e6:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:1D:B3:B0:DC:FF:6B:AF:DC:08:F1:8A:C0:21:26:50:5E:82:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.0.57.0-16.0.58.255
                  16.1.96.0/20
                  16.7.6.0/26
                  16.7.6.160/27
                  16.103.138.0/23
                  16.143.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:46:82:77:1c:64:2c:87:bc:a2:98:94:be:36:59:8c:f8:
         8e:42:e0:c2:88:6e:cb:2c:2b:03:50:99:8f:39:a0:2c:ca:73:
         7f:af:46:3f:d1:b5:bf:8d:d0:84:24:33:86:64:96:8e:69:17:
         15:06:e8:39:18:7d:59:4e:5b:dd:d4:30:95:c1:d3:57:35:1c:
         c6:24:da:03:04:c0:0c:96:1e:42:ff:3e:85:0d:3a:d5:80:51:
         9a:c6:47:e4:31:b6:37:cc:17:39:36:0b:3a:0c:c9:e1:e9:f1:
         a4:24:a3:61:1e:0e:0a:c5:1b:be:f1:c1:5e:5d:6b:fd:c4:e9:
         84:40:26:7b:ea:c6:13:bf:82:a1:09:6f:6c:0d:67:47:9b:39:
         c2:30:c2:9b:d4:4d:79:fd:36:0c:22:3d:b4:21:c6:ea:d6:a9:
         e3:7e:90:d5:36:e4:8a:3a:02:a5:d7:91:16:3e:64:d3:c2:ae:
         7c:b9:b5:19:13:d3:0c:21:f9:aa:d6:ad:5b:ff:23:e5:a6:77:
         d9:10:fe:93:71:10:12:ff:a6:64:d8:95:c7:d9:06:1f:b4:d9:
         ed:ae:e6:51:ee:50:f4:8e:e3:c3:b6:27:1f:59:49:ae:81:35:
         19:7e:2e:e1:3d:ce:52:30:41:02:31:22:00:eb:6d:03:d1:6e:
         be:44:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:52 2024 by rpki-client on console-fra.rpki-client.org