Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/55a222ce-c559-369f-a929-131216be2472.roa
File:                     55a222ce-c559-369f-a929-131216be2472.roa (raw, json)
Hash identifier:          cAvSH2sp0rwUnLfeRpTMl3YgaiuoZz4NcwgYxhknsKw=
Subject key identifier:   64:58:A5:47:D0:52:1D:8A:97:D4:09:26:09:79:D1:54:43:3D:E7:85
Certificate issuer:       /CN=481df423-4515-4699-90a2-2cca4ca9c3fb
Certificate serial:       010D0C9F4328584765A0F14F9C30D0D94476A940
Authority key identifier: F7:80:AE:67:3A:B7:44:C6:16:F0:B6:C7:69:04:A1:B0:E8:78:78:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/55a222ce-c559-369f-a929-131216be2472.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     16509
IP address blocks:        216.83.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/481df423-4515-4699-90a2-2cca4ca9c3fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/481df423-4515-4699-90a2-2cca4ca9c3fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f1:4f:9c:30:d0:d9:44:76:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481df423-4515-4699-90a2-2cca4ca9c3fb
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=862255ce-ba15-4744-865d-d5a6d13f144e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0d:83:34:2c:05:e5:e0:b8:48:40:b3:91:05:
                    e1:d8:a4:f7:74:c8:3f:05:b3:64:b9:ca:8d:5f:28:
                    23:46:8f:d1:bf:98:d1:b0:e9:65:1f:9f:0e:61:c9:
                    93:17:60:65:b0:bd:85:35:4e:48:5e:3d:5a:5e:ed:
                    94:3c:b8:e4:7a:d0:f9:e6:1b:76:18:5c:43:69:86:
                    ba:c2:ed:5a:cf:1e:2c:9a:fc:b8:9e:eb:ee:01:17:
                    4a:75:75:fb:b1:0f:12:80:e0:f3:f4:a4:5e:43:e6:
                    30:95:47:09:0e:56:f6:88:ca:c3:8b:bf:0b:83:0f:
                    08:a0:63:35:5a:83:63:5a:e5:83:91:54:06:e4:cb:
                    f3:9d:02:40:34:61:7c:45:24:2b:00:c7:04:a1:bf:
                    90:71:31:e2:f5:66:4f:dc:57:6f:2d:eb:f9:09:77:
                    13:06:39:57:53:0c:65:be:28:c6:87:87:80:e0:e8:
                    52:ae:d0:fb:9f:25:37:68:95:80:70:6b:24:ed:68:
                    c0:1b:e2:6b:69:37:6c:f3:e5:1b:37:f8:c6:c1:86:
                    b6:aa:28:6c:58:bd:76:24:06:8a:58:d0:c6:ae:6a:
                    70:a7:23:de:55:12:b7:42:3b:37:7e:8b:64:58:25:
                    8b:20:ea:b5:52:17:38:81:4a:dc:0b:10:41:a1:32:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:A5:47:D0:52:1D:8A:97:D4:09:26:09:79:D1:54:43:3D:E7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/55a222ce-c559-369f-a929-131216be2472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb/481df423-4515-4699-90a2-2cca4ca9c3fb.crl

            X509v3 Authority Key Identifier:
                keyid:F7:80:AE:67:3A:B7:44:C6:16:F0:B6:C7:69:04:A1:B0:E8:78:78:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/481df423-4515-4699-90a2-2cca4ca9c3fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:29:d6:25:06:3c:3f:94:7d:ec:ca:a0:a3:9d:e1:6d:58:
         a2:45:67:04:9c:a5:95:7d:63:18:37:a5:ec:fd:f6:80:b5:1f:
         ba:11:76:66:94:20:c0:95:7e:98:09:30:40:5d:d5:ab:f3:a7:
         5f:4d:f4:73:a9:6d:8d:2c:06:eb:76:24:ac:4d:16:e5:56:5c:
         67:fc:4c:fb:6b:df:fd:d8:da:2d:9e:06:2a:8c:42:9b:fb:73:
         7b:37:1c:de:f3:03:2f:51:ed:1f:4d:08:0a:f4:3f:aa:13:43:
         59:4f:85:92:15:8a:86:f9:fa:87:58:ea:13:e1:32:80:4f:78:
         b4:8a:a8:31:66:ba:b8:89:37:ce:8c:21:14:2c:ef:47:2e:64:
         15:ac:1b:0a:73:92:02:48:c3:29:f4:88:63:28:34:ff:4c:b6:
         50:56:1a:93:5f:31:ba:1d:a3:80:6d:17:4b:ac:71:dc:a3:9c:
         81:27:f5:31:1e:d5:0d:0d:c6:71:31:f5:17:fe:10:7c:55:18:
         c2:35:b4:a6:22:bd:2a:5d:2c:5e:02:4a:e0:6c:ce:b0:73:d5:
         0a:41:8e:7c:be:f9:d4:08:5b:79:01:03:4d:f1:88:2f:58:9e:
         32:27:12:01:3c:fc:81:4e:8e:b2:cd:da:d0:da:81:14:0a:93:
         70:e8:94:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org