Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
File:                     804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa (raw, json)
Hash identifier:          PhLSS2xXeZnWTFt8r6HiQRj3frQ5+g7CRj5oyhSYCU8=
Subject key identifier:   96:2F:56:57:08:8E:E8:72:DB:15:DB:5D:29:86:3B:95:08:5A:A4:C8
Certificate issuer:       /CN=34468021-d790-42b8-b3cd-5d1592500820
Certificate serial:       010D0C9F4328584774FBA5EE11831CA8DC18AA60
Authority key identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399912
IP address blocks:        216.73.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a5:ee:11:83:1c:a8:dc:18:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34468021-d790-42b8-b3cd-5d1592500820
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=143698f0-7911-4c42-bdc5-71a4c5689b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:4b:20:ff:1f:0f:bc:7e:c0:20:94:39:66:
                    6d:df:ef:6d:5c:ec:87:76:45:04:9f:5a:b4:5f:7a:
                    94:e9:ca:55:96:3d:89:d2:6e:3c:60:fb:b6:c5:88:
                    c1:4f:a8:12:59:7a:05:23:33:02:8e:0f:2f:73:0e:
                    77:6f:4e:2e:bf:74:29:e1:b0:de:ba:f4:4d:37:62:
                    41:e0:71:e9:ed:6d:b5:eb:8c:c7:f2:96:c8:f9:6c:
                    36:21:9a:1f:26:00:13:4d:bb:91:d4:ec:0e:f9:91:
                    25:b6:da:93:6c:80:fd:3f:92:22:2d:a7:13:a7:d7:
                    c2:59:80:a4:56:b8:1c:0e:31:0e:85:63:36:c3:4d:
                    cd:16:02:40:2e:0b:bf:37:c1:b0:90:e2:54:73:4f:
                    9a:c2:5b:39:49:7d:09:f1:02:2f:10:cd:b4:4c:bc:
                    68:6f:9a:ba:43:98:e3:7a:c2:0b:4e:e5:6f:19:b5:
                    9f:95:1e:2e:34:a6:4f:56:82:2d:1a:fd:b3:52:5b:
                    c7:1e:90:b9:07:49:01:ef:bd:dc:f5:7f:72:fd:1b:
                    58:22:38:d7:a9:81:d0:ed:e5:d0:b6:95:1e:1d:07:
                    93:e1:67:cb:e6:ae:9f:57:0b:59:c6:74:1a:ba:87:
                    ed:9e:b5:e6:dd:06:43:3a:68:de:c4:36:24:9a:3e:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2F:56:57:08:8E:E8:72:DB:15:DB:5D:29:86:3B:95:08:5A:A4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl

            X509v3 Authority Key Identifier:
                keyid:19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:40:8f:6e:68:32:09:ee:f3:d5:90:12:05:39:57:88:78:01:
         bc:85:a9:12:75:24:55:8f:76:51:bf:65:ad:dc:3a:04:f2:6e:
         40:b6:d2:cd:f6:3f:ae:22:51:43:1d:34:a6:73:22:4f:a0:94:
         bf:e7:24:a4:ea:68:03:82:2c:8e:64:cf:e1:08:20:47:0d:bc:
         c9:d9:5d:75:ec:47:98:50:b8:5e:a7:9a:ca:58:bd:33:2c:a4:
         2f:6b:71:db:55:2d:2e:06:3e:a4:42:f0:4d:ed:2e:45:36:0e:
         09:61:b3:39:1c:51:25:74:0f:d0:97:c2:0b:8e:2f:55:1c:3a:
         18:1c:ee:fa:a1:9b:87:5e:5f:8d:5b:8c:d0:13:f8:80:3d:a3:
         b0:0e:b1:38:8e:38:91:fb:70:4a:b9:81:8a:ae:15:f3:03:e9:
         2d:d4:23:3e:c5:02:3b:bd:a6:58:ed:af:3c:44:04:cb:62:b4:
         70:66:29:ce:77:7c:f6:49:6a:2b:79:bd:65:1e:bc:86:20:30:
         85:a2:35:21:6a:a0:0b:0b:19:7d:c9:8c:dc:d4:d0:85:fa:59:
         fb:61:af:8f:10:8e:88:44:4e:4d:e5:96:82:04:bf:8d:10:28:
         06:8b:57:c9:bf:44:89:28:8a:de:6a:10:b0:dc:27:ea:54:c0:
         3e:77:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:59:02 2024 by rpki-client on console-fra.rpki-client.org