Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
File:                     fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa (raw, json)
Hash identifier:          5Og+Cd1mLdwcme803/hemWGa6EcLWlQlMq798vEz6XM=
Subject key identifier:   E9:D4:23:C5:BB:39:45:9B:0B:CD:3E:10:1F:D3:D3:ED:48:12:AB:EB
Certificate issuer:       /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial:       010D0C9F432858468A7A10588AA40B2B379857C0
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
Signing time:             Mon 15 Jul 2024 01:00:24 +0000
ROA not before:           Mon 15 Jul 2024 01:00:24 +0000
ROA not after:            Sun 13 Oct 2024 01:00:24 +0000
asID:                     13959
IP address blocks:        216.150.43.0/24 maxlen: 24
                          216.150.44.0/24 maxlen: 24
                          216.150.45.0/24 maxlen: 24
                          216.150.46.0/24 maxlen: 24
                          216.150.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Sep 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8a:7a:10:58:8a:a4:0b:2b:37:98:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
        Validity
            Not Before: Jul 15 01:00:24 2024 GMT
            Not After : Oct 13 01:00:24 2024 GMT
        Subject: CN=e96c5fa1-df60-4651-8e0f-2dc6056800a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0b:eb:89:75:13:3d:15:70:b1:11:00:b5:ed:
                    33:cc:f2:93:2d:50:ac:70:a2:2f:d8:38:c5:2b:46:
                    e8:6b:da:df:08:5e:64:7b:3f:64:10:f9:15:e6:59:
                    9a:66:2f:45:42:81:b1:01:bc:7d:cd:3d:51:a2:8d:
                    2d:f4:03:72:08:e9:84:71:6f:b3:d7:57:0a:85:31:
                    53:6b:79:69:c9:2c:f5:5f:e7:76:24:68:01:bd:c2:
                    a3:c7:ee:5b:d4:23:4b:b0:51:51:64:5a:5f:72:c7:
                    12:dd:cb:db:59:b6:18:7e:21:ad:80:be:4c:29:ac:
                    6c:e2:3a:c6:af:2f:02:fb:14:82:41:0e:87:b5:15:
                    f8:01:4b:a4:f4:8e:ab:93:5b:a9:fd:7f:1e:31:10:
                    31:a7:d8:53:c7:32:70:dd:53:b5:da:07:59:9a:84:
                    90:7a:95:cb:e1:b4:b0:6d:d1:bd:8f:52:04:d5:bb:
                    b0:b1:55:81:9b:d3:68:99:c8:97:ca:bc:23:61:a2:
                    37:c3:30:f0:c1:e7:78:b3:88:c4:bd:10:a2:f8:b9:
                    f5:a5:27:e3:58:ae:23:b9:63:2a:e7:62:3b:36:e8:
                    44:53:22:b6:f9:b1:5b:02:42:aa:84:3d:97:3f:b9:
                    ad:fd:6f:07:63:aa:21:ed:12:4a:6a:db:8c:8f:58:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:23:C5:BB:39:45:9B:0B:CD:3E:10:1F:D3:D3:ED:48:12:AB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl

            X509v3 Authority Key Identifier:
                keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.43.0-216.150.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:db:e9:99:f0:f1:8d:c3:db:bd:06:05:e2:fd:f4:6b:3d:16:
         e8:bb:4e:24:23:a8:48:4c:50:a3:98:04:3a:85:a8:e6:4f:3d:
         ba:a6:11:62:ba:54:2c:be:d5:1f:11:60:dc:44:f1:c7:97:48:
         98:49:8f:5a:c1:6d:6e:9e:d0:c7:2c:bc:90:bf:16:be:98:67:
         30:43:2c:d5:29:3b:6f:3a:1b:de:99:ee:80:4c:f4:12:e5:f6:
         28:95:26:4d:53:28:6a:37:b9:07:ac:a6:de:ec:99:d4:3c:ed:
         10:7e:5d:ac:09:81:26:ac:8b:56:06:d7:5b:d0:8d:b5:cb:3f:
         47:83:29:6b:e8:c0:28:60:ed:fc:85:cf:42:cd:f6:9d:86:9d:
         97:c4:4a:22:c8:f5:e6:db:76:7b:a4:0b:f6:16:06:e1:67:21:
         08:22:57:66:93:fa:65:4b:02:df:2a:5f:62:85:86:91:3d:3f:
         40:db:06:b1:e0:05:72:d1:c6:1d:e4:b7:eb:f2:f3:2e:90:9a:
         8b:52:58:71:ca:6d:09:bc:4d:41:85:70:36:39:b8:73:3c:0a:
         64:be:2f:3c:26:81:73:1d:02:09:ed:39:07:4e:63:22:d1:fc:
         c3:be:f2:30:40:71:32:a3:c6:e0:d6:3b:88:aa:09:eb:06:2c:
         de:d4:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 18:12:42 2024 by rpki-client on console-ams.rpki-client.org