Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
File:                     eec7e59a-4606-3c68-bc4e-0c0848b41897.roa (raw, json)
Hash identifier:          4SzJ+lm+Bg6emSQF7h9ZikfyRjccT5AEu6r/kQ/n6wg=
Subject key identifier:   64:17:FC:00:08:B8:6C:70:08:06:72:C1:E5:E4:5D:58:AA:F4:6A:ED
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F43285847872130504293538AEAABDA20
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     210873
IP address blocks:        16.2.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:30:50:42:93:53:8a:ea:ab:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=a2973885-6e8e-4744-a71d-c3f38d7d4e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:24:11:b2:2d:82:49:71:c4:a6:5e:87:9e:2a:
                    1f:b8:75:3f:d5:4f:fe:14:64:77:8d:ab:3e:8e:1a:
                    8e:a7:7b:ac:54:c0:0c:61:66:16:ea:e7:b4:af:4f:
                    af:e9:dd:7e:98:54:b3:df:f6:b5:66:89:e5:1f:4e:
                    ef:03:cd:8c:08:3b:09:7b:71:bb:92:f6:00:7d:c1:
                    2c:cf:be:83:d5:de:5e:06:42:63:21:2a:0b:5e:37:
                    4b:c5:cf:0d:0d:7b:84:1f:f4:ce:c7:54:1a:77:60:
                    1a:af:0b:24:43:e6:88:93:10:30:a2:e5:87:ab:56:
                    bd:c4:33:a1:14:fe:34:7a:f1:77:31:5f:f1:ca:c9:
                    95:f3:1d:b6:0d:a7:62:bc:90:b1:bb:09:37:83:33:
                    3f:57:f9:d2:11:70:8f:c9:5d:a9:c8:ed:70:1c:d6:
                    db:9c:55:86:72:0b:78:a1:99:9c:7b:dc:fc:82:94:
                    8e:3e:c4:60:a8:53:19:82:8f:64:02:94:5c:86:f5:
                    da:ac:f9:e6:7b:02:63:f5:1c:76:a5:8b:8a:ee:f5:
                    1b:97:75:d5:4f:58:07:e1:ad:55:a1:56:98:40:a8:
                    76:71:d6:86:46:e1:8c:d6:94:5e:65:e9:9c:d4:20:
                    60:f5:76:0b:da:f6:d5:7a:c5:85:f4:63:b5:1e:09:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:FC:00:08:B8:6C:70:08:06:72:C1:E5:E4:5D:58:AA:F4:6A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/eec7e59a-4606-3c68-bc4e-0c0848b41897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.2.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:65:25:8c:11:1e:46:56:d5:bb:32:9c:47:0d:3d:11:62:38:
         9f:4c:8a:2a:cd:0d:34:38:f1:85:81:ec:7c:bd:47:cc:73:05:
         16:94:c8:45:a2:30:8b:5f:aa:2a:7e:ca:88:9e:59:29:88:ec:
         8c:3b:2d:97:27:6b:4e:42:31:9c:be:ef:15:4e:bb:a2:ce:b9:
         dd:7c:18:72:f5:3b:9c:63:ff:db:84:1f:eb:72:9c:ca:2f:a2:
         ab:fe:ae:d1:da:72:14:ac:d4:e3:94:24:33:7f:71:bf:d3:e6:
         b8:6c:25:87:19:96:57:f0:a0:6e:af:0e:a1:c9:da:ce:70:8c:
         74:9a:79:f6:14:4d:2f:b0:74:e9:53:58:34:cb:d3:73:a1:a0:
         e9:b2:e3:b8:65:cd:46:3d:b3:f9:e6:31:33:ab:b5:6f:ad:2f:
         39:5e:23:1f:bc:24:5c:d9:09:f3:ec:dd:4f:ae:18:27:b5:ea:
         80:3c:14:34:88:1d:7c:32:1e:5d:50:9d:69:40:64:cb:75:f7:
         2c:73:28:53:2f:ab:b4:5d:50:2e:81:23:31:b0:75:fb:96:77:
         ae:14:62:b0:4f:8e:58:1c:86:18:eb:ad:53:de:31:78:a6:aa:
         35:23:5b:f3:c1:07:c9:81:50:8d:1d:7f:3b:67:5c:fb:84:a4:
         24:ab:2b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:52 2024 by rpki-client on console-fra.rpki-client.org