Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa
File:                     f205ab86-219a-31dd-ab9e-6b08bb875800.roa (raw, json)
Hash identifier:          fZWNmy3QJZPrC47Ckz9ic2/zqLQqIfThYHEe7c5ydA0=
Subject key identifier:   A2:52:B3:2A:ED:A5:86:B7:60:DF:37:53:1F:DF:04:5E:C2:0F:1C:D9
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285847ED24C80DA5619CC804281380
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     11090
IP address blocks:        216.137.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:0d:a5:61:9c:c8:04:28:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=a3a185f4-b7b7-43f2-ae32-2bb0b3ae4815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c3:45:e4:cd:25:5e:18:84:13:87:cf:90:24:
                    ef:2a:6d:d7:50:ac:23:7f:5c:e6:8e:aa:4d:f6:45:
                    d8:47:f3:96:0c:ee:0b:1b:41:40:dc:42:46:e1:4c:
                    b5:88:d7:ee:56:14:06:ac:45:4c:2a:b7:8a:ed:ba:
                    d9:af:a8:eb:5a:b8:84:29:9c:f2:b6:0e:01:b6:18:
                    c3:7c:fc:6e:cf:3f:62:5d:d5:2f:ff:27:40:8e:9c:
                    38:d0:6c:13:04:60:57:e6:39:e3:11:70:fa:aa:97:
                    cd:26:71:c2:5c:78:c1:01:c0:d4:8c:41:5a:01:ad:
                    02:7d:2f:14:83:3b:19:c5:61:18:06:6d:da:d5:d4:
                    c0:68:f9:ce:e2:70:c8:eb:04:68:0e:1e:64:03:bd:
                    d8:6d:ef:36:35:60:a7:49:22:b3:4b:3a:b9:19:eb:
                    79:3b:0c:d4:80:d4:49:35:fd:03:3b:da:ed:85:30:
                    5a:4f:56:0b:2a:72:9a:6b:fa:0d:21:fe:e4:09:e2:
                    77:9a:60:8b:61:49:b2:e8:c7:9e:29:c3:04:03:5c:
                    52:18:51:4c:ab:de:d7:08:66:8a:9a:bd:80:10:e3:
                    ff:bd:ac:6d:ce:ae:9f:46:c1:98:6b:51:65:1e:98:
                    e5:85:e4:74:09:e7:95:6d:c3:79:15:58:7b:35:55:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:B3:2A:ED:A5:86:B7:60:DF:37:53:1F:DF:04:5E:C2:0F:1C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f205ab86-219a-31dd-ab9e-6b08bb875800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:70:9b:2a:53:c0:0a:9a:fc:e3:28:47:60:84:66:60:0c:2b:
         9f:a1:e6:4c:33:75:c6:ac:64:87:bd:cc:7a:a4:aa:dd:0a:09:
         63:bb:95:e7:86:c3:a9:5f:57:fd:90:ba:a0:28:b2:3e:6b:76:
         91:07:f6:f3:ca:3d:d2:01:1b:dc:52:15:c8:ca:c2:04:09:e6:
         89:da:59:74:79:65:07:b9:67:cb:1f:c3:3f:03:d7:ac:7b:d1:
         c1:22:6d:b0:95:8b:a6:83:57:87:fa:99:72:4d:9e:f4:66:2e:
         d2:93:63:c8:a0:36:57:da:5b:fc:84:51:2c:03:61:ac:bf:69:
         7a:fc:38:57:41:2e:0d:af:51:92:0c:e8:1b:06:2c:24:ae:87:
         d9:46:f5:08:57:c8:21:1e:63:35:1f:c0:c3:cb:7c:e1:c0:e6:
         76:02:09:cc:82:89:9c:65:01:00:1c:9d:1a:5a:f9:1d:55:3e:
         50:37:4b:09:c7:05:53:62:33:c1:8c:d2:b4:d1:bf:42:aa:38:
         cb:bf:90:3e:fa:a4:47:2f:ef:fe:1c:9b:52:8f:bf:50:48:0b:
         35:38:66:bf:ce:bd:38:78:3a:4c:7b:35:0d:4a:aa:6b:e9:11:
         da:92:40:44:42:79:0f:f6:36:d3:48:22:34:91:0e:d3:67:46:
         9b:78:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org