Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File:                     1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier:          y8vSCznqSztT0h93tIo5OSzs5pWgUkTyKxm58wRx0a0=
Subject key identifier:   48:E9:73:98:13:4B:02:2E:15:A7:22:C5:80:72:EB:31:9E:CE:8E:06
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285847299B2C181143B1D0CCCC6880
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time:             Tue 10 Sep 2024 01:00:30 +0000
ROA not before:           Tue 10 Sep 2024 01:00:30 +0000
ROA not after:            Mon 09 Dec 2024 02:00:30 +0000
asID:                     62533
IP address blocks:        216.68.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:29:9b:2c:18:11:43:b1:d0:cc:cc:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 10 01:00:30 2024 GMT
            Not After : Dec  9 02:00:30 2024 GMT
        Subject: CN=5170c7df-9abe-42a2-b7aa-0817aa279200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:c4:1d:d9:ea:17:dd:36:29:56:a8:70:f0:
                    bb:d4:29:4c:92:94:a9:10:80:a6:35:56:00:b8:dc:
                    38:a5:7d:2d:57:25:b3:0c:4d:20:84:65:25:62:0a:
                    64:1e:8e:75:04:ac:62:a8:f6:f8:1d:3a:5d:0b:77:
                    9e:69:9f:67:71:4e:3b:09:97:4d:24:98:6e:04:c7:
                    25:b2:e7:81:fd:17:b4:7a:76:63:da:12:8b:91:0d:
                    07:7f:9a:2d:a0:d2:77:01:12:a7:3a:3b:61:33:ec:
                    08:8f:8d:8b:4a:3f:24:fa:e3:a2:b4:c8:38:92:dc:
                    77:d7:e9:8a:00:f8:6a:03:3b:4f:87:79:b6:fb:6b:
                    1e:6b:a8:3c:61:2c:de:e3:94:f9:41:98:a5:59:0c:
                    5f:6a:4e:e0:67:5b:93:32:fa:1f:be:66:3c:50:ce:
                    4a:17:c5:ec:97:d3:c2:88:96:b7:70:40:99:28:29:
                    49:ad:ba:58:4e:cf:56:85:9e:e0:2a:98:82:0a:ea:
                    cd:e0:c7:8a:c9:3f:3e:98:69:73:06:24:d7:15:21:
                    00:16:ee:16:e9:52:c4:f8:1b:e2:a5:b2:37:d1:68:
                    25:e9:b1:90:d9:84:6b:32:a1:5e:29:e6:0f:e4:71:
                    31:21:40:53:e7:ce:8a:53:f1:9d:ec:3b:2e:56:25:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:73:98:13:4B:02:2E:15:A7:22:C5:80:72:EB:31:9E:CE:8E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:94:84:42:1e:eb:8e:7a:64:4c:32:e0:30:d4:d5:f5:a2:
         47:11:16:76:ad:8d:ab:ed:6b:24:fb:f5:38:27:c5:e7:56:33:
         93:f2:97:19:90:ed:59:bb:bc:7c:d7:a1:98:27:11:3d:55:0b:
         b2:6b:65:50:04:41:43:72:14:1a:84:71:5f:fe:84:ce:80:c6:
         08:b4:5b:01:ae:95:29:e6:3d:a8:90:aa:57:7a:a2:7b:9d:10:
         10:d6:27:44:96:27:92:1e:de:a5:22:36:49:48:66:2f:29:ec:
         97:7b:7c:d5:9f:8d:b9:83:f2:4b:e5:4a:3e:37:0b:61:b2:1d:
         64:82:f3:da:3a:10:e2:3b:39:ee:32:d5:62:96:90:c3:60:b4:
         fd:0c:6b:99:44:57:4c:a9:06:ce:85:e9:4f:77:7f:52:e1:75:
         3e:6e:76:0d:31:a2:b0:e0:92:1d:6f:5b:ca:12:b8:a8:59:f0:
         25:27:14:07:2a:75:3a:90:37:93:d6:9d:c0:14:a2:3c:0e:5a:
         78:6e:ad:01:fe:ef:ee:84:9f:01:75:32:a9:59:b4:04:73:c2:
         85:b5:f8:29:b2:3b:c0:45:48:72:7f:f9:2b:a2:fb:58:2f:63:
         2a:ec:39:42:60:a5:21:1e:3b:12:ee:ac:f8:bb:2d:2e:c8:7e:
         f7:5a:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org