Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/623b4ba7-079e-38bc-99f4-06b54361716a.roa
File:                     623b4ba7-079e-38bc-99f4-06b54361716a.roa (raw, json)
Hash identifier:          Bq7ZZuuJPNZ+45sym5QZ6ju9TSy7JpxcTaoisfh2JRM=
Subject key identifier:   B3:87:17:50:45:DE:F4:F2:6F:BD:41:5E:05:0F:30:73:6F:50:37:AD
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584797E1437EF2EC84D0973D8480
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/623b4ba7-079e-38bc-99f4-06b54361716a.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     21713
IP address blocks:        216.14.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:43:7e:f2:ec:84:d0:97:3d:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=36877297-fd0f-4ea7-9ae8-6119f6881d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:99:f4:02:a8:6b:b4:25:4f:e4:15:fa:d2:a8:
                    22:ae:32:86:80:32:9c:79:b2:05:db:7c:99:a9:c9:
                    64:e5:bf:ae:b7:3b:03:3c:28:33:03:ad:b3:77:df:
                    1a:be:df:90:62:3c:c7:53:14:ff:32:a8:4a:32:5d:
                    ea:7e:35:29:22:c0:1e:d3:fd:17:bc:22:5d:cc:f6:
                    71:e5:c7:d5:4b:bf:5f:89:3a:49:2e:04:71:f6:6a:
                    07:1c:ae:d5:72:8d:9d:52:cc:fd:d0:ed:c4:51:d3:
                    f8:de:08:54:92:2d:aa:3a:50:23:0a:36:3d:c4:f4:
                    45:d9:03:c0:b0:f9:d8:f0:e3:22:d3:68:e9:50:38:
                    6a:02:9e:d4:50:ac:3f:db:64:59:1d:85:50:01:3d:
                    9e:ee:20:f4:bf:eb:e5:d8:cf:31:28:3e:4a:7b:19:
                    76:76:0d:16:f1:8f:b8:04:2c:ce:a1:e6:ff:3d:01:
                    68:98:d8:6f:18:2c:a8:ea:a7:6b:16:0f:97:93:9a:
                    c0:0c:06:d6:d2:1b:33:76:60:c5:5f:0b:3d:80:48:
                    f0:e6:79:d9:26:51:62:3f:5d:ae:31:f9:35:58:3c:
                    6d:c9:96:31:e3:66:82:5f:0b:b2:53:16:ef:e2:cf:
                    6f:d5:a1:98:3b:c2:f5:c6:66:e0:4c:9e:f9:d3:96:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:87:17:50:45:DE:F4:F2:6F:BD:41:5E:05:0F:30:73:6F:50:37:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/623b4ba7-079e-38bc-99f4-06b54361716a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:db:bc:2d:79:7c:39:b9:9e:12:8f:de:7c:43:4b:e2:c0:db:
         d5:ed:d8:eb:88:53:5c:51:dd:52:5c:60:50:be:b1:de:5b:95:
         24:5c:18:36:6b:dd:49:44:f6:8d:df:5e:20:c8:d9:0a:99:09:
         18:2f:bd:7a:cf:67:5c:11:d5:66:d0:e0:19:3a:56:ca:2d:c5:
         1e:07:d1:80:30:ea:fd:87:4c:12:7c:07:66:2e:4c:72:a5:6a:
         02:4f:e9:90:bf:41:a1:63:88:27:71:31:a8:d8:4a:94:fb:ef:
         c6:87:40:bb:19:f3:a5:ad:a0:27:c0:fd:8a:58:24:76:13:01:
         3d:73:3f:8d:17:3c:fe:cb:e8:a1:05:cb:9e:2c:61:4f:da:60:
         23:2b:f7:57:c1:46:1a:3a:50:76:91:70:55:c1:b5:30:45:cf:
         bf:54:cf:93:83:d5:5d:5a:ac:fb:a8:2d:e1:49:2f:f6:c7:ea:
         fd:6f:35:76:81:6d:81:6f:b5:ed:0e:02:25:70:cd:b7:ea:d4:
         73:38:f1:f8:ef:db:05:78:a9:e0:b1:7d:9f:80:01:aa:11:8d:
         55:df:fb:06:f2:26:1f:24:6e:aa:88:70:ea:73:dc:54:59:1a:
         0b:64:59:a3:d9:c7:a0:77:65:f3:68:72:23:e4:65:b5:16:1d:
         c8:a6:76:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:19 2024 by rpki-client on console-fra.rpki-client.org