Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
File:                     6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json)
Hash identifier:          /CNANJ3boHzxnXtclwv8YuMErBYDF0b1grqXOWtCwtI=
Subject key identifier:   BA:4D:57:B7:CE:E9:EC:6C:A2:8D:C4:6B:5B:3B:15:0E:E5:D4:4E:AE
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F432858477EC1124E90C663FC90664680
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     8635
IP address blocks:        16.1.38.0/24 maxlen: 24
                          16.240.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:12:4e:90:c6:63:fc:90:66:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=0ab3843e-976d-4cfe-ba97-9758a5e43fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:24:bd:4c:d7:36:e4:8e:a9:34:99:ff:b9:
                    73:4f:fa:d9:1a:9b:81:1f:88:9b:ab:f3:75:eb:17:
                    98:85:f3:0e:ec:cb:65:e7:e0:a4:2c:a0:0a:55:ba:
                    02:d3:fa:a8:b7:29:92:84:fc:0a:de:1b:45:c9:88:
                    f9:28:d9:c5:47:8f:1a:3f:74:88:89:61:63:0c:46:
                    29:87:a9:68:d6:d0:ba:f5:2d:1d:e0:d0:f8:94:7b:
                    32:10:a9:c2:c8:a6:47:79:af:3c:0b:b5:b8:a2:c5:
                    f0:ce:b1:30:e7:aa:4c:d6:89:5c:55:a1:f3:64:94:
                    1d:5a:d4:f5:a8:66:50:92:6c:af:b6:de:d8:19:fc:
                    7f:ab:b7:db:82:dd:9c:c7:2f:b7:0a:a4:36:16:af:
                    56:d7:97:11:8a:ea:52:e2:e6:92:b8:05:85:59:8a:
                    81:0a:f1:e8:d8:d5:2a:8c:8d:05:53:56:55:81:e3:
                    29:0e:dd:a3:3b:6f:c6:26:c0:13:84:5f:d4:4f:63:
                    de:29:77:41:f5:96:1d:d4:4a:b3:54:14:ba:65:9a:
                    5e:63:06:f4:37:28:f1:56:62:1f:4f:36:3c:f5:e8:
                    fc:a0:88:ae:ad:99:02:0e:c8:09:24:7b:7b:64:ee:
                    3b:e5:c1:47:ed:f4:44:83:da:12:2d:eb:a0:19:d3:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:57:B7:CE:E9:EC:6C:A2:8D:C4:6B:5B:3B:15:0E:E5:D4:4E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.1.38.0/24
                  16.240.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:6c:cb:9b:eb:b8:42:3a:be:6e:df:fd:35:18:32:80:d2:
         5e:b8:33:d1:cc:56:33:83:0a:fe:16:92:3c:1f:20:2d:f1:1a:
         07:ea:6c:df:e4:10:76:e2:76:22:41:3d:40:1f:0f:a3:06:db:
         80:84:81:e0:10:24:7d:06:0e:62:d0:fe:27:9d:29:8f:61:ca:
         22:be:f8:17:94:70:05:27:d2:cf:4d:ec:65:02:c0:f8:0d:a2:
         f2:c5:12:a1:62:a7:22:30:15:f6:3e:b3:cc:18:59:59:b0:fa:
         dc:b9:c1:2e:9f:5a:6a:34:a0:62:0e:c1:be:ed:27:1a:76:85:
         eb:33:bf:d9:54:43:ed:6e:97:bc:19:98:ca:3c:17:3f:5a:34:
         2d:01:f9:8e:7a:ad:df:c7:13:f8:ec:e4:72:51:02:a5:52:db:
         4b:fe:88:8a:53:11:5d:a9:e1:ac:04:a2:40:5b:c8:21:f5:ee:
         72:7f:32:5d:b7:f0:5c:b9:1e:f0:ce:6e:4a:c7:c3:06:75:83:
         ec:b7:c4:ad:50:9d:9c:4b:69:68:11:74:7b:3a:30:fc:24:74:
         96:27:91:9a:98:f3:50:e7:be:a5:98:e5:a2:2d:56:fc:50:45:
         cd:c3:5e:b8:a1:ce:8a:3c:ce:79:e1:4b:f4:06:e4:8b:6a:14:
         cf:8b:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:52 2024 by rpki-client on console-fra.rpki-client.org