Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa
File:                     328a9f9e-f8c1-360f-88b5-5283333c29d7.roa (raw, json)
Hash identifier:          ddCXqYs1g+w/fpPfI4uPHpx/aihPqpd3qnd7bUwZq2U=
Subject key identifier:   4F:91:B6:3B:49:37:A8:12:1B:64:DA:BC:B2:61:1A:4E:00:B0:EF:87
Certificate issuer:       /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Certificate serial:       010D0C9F43285847EE8A2FFED02A64B5F85C1FC0
Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     46694
IP address blocks:        216.229.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2f:fe:d0:2a:64:b5:f8:5c:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=9515f249-9ace-4344-969e-6e9eaa6c4598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:3d:9a:60:06:02:6e:00:98:e6:d1:66:8e:
                    55:a1:af:8f:4f:1d:14:cf:b3:6b:89:aa:20:cf:fb:
                    1e:60:db:2b:2e:92:86:7c:1e:40:ad:29:f1:b9:ef:
                    bb:99:c3:ee:42:e4:a0:93:55:72:5a:82:6b:68:02:
                    96:57:ad:e0:e9:ef:f0:32:34:22:ca:44:cd:8b:7d:
                    01:fd:ff:e5:78:5f:62:21:9d:3c:e5:4d:ea:c2:85:
                    0a:18:3f:4b:58:89:a9:ab:f3:2f:57:69:6a:61:d9:
                    da:18:91:12:d7:56:f4:a5:39:71:e8:9f:9e:cf:d5:
                    c0:ba:6c:da:23:a8:da:8d:1d:3a:64:9a:29:51:dd:
                    b5:70:13:60:26:d7:68:d1:f5:0e:d5:b3:67:58:d4:
                    00:e2:dc:49:10:bc:c1:b0:77:0c:7f:51:de:46:67:
                    b4:2a:18:7f:c7:36:fc:62:56:6c:52:f0:9d:0d:ae:
                    ef:46:75:c7:f3:6e:f5:00:21:0e:06:b0:89:49:b7:
                    45:ec:a5:50:6a:eb:91:3f:47:1f:c4:ff:f7:81:a6:
                    74:c9:ee:75:a1:b5:be:b1:79:13:90:51:57:18:6c:
                    e5:95:37:e9:6a:32:b5:ce:01:b1:fb:c0:14:51:b8:
                    aa:8d:62:17:2f:09:f9:b5:82:2a:e0:44:0a:70:50:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:B6:3B:49:37:A8:12:1B:64:DA:BC:B2:61:1A:4E:00:B0:EF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/328a9f9e-f8c1-360f-88b5-5283333c29d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl

            X509v3 Authority Key Identifier:
                keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.229.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:01:e1:d8:3f:cc:fc:46:8a:b8:95:27:51:1a:14:6e:32:
         5f:29:68:7f:eb:59:37:a2:7c:1b:50:13:2e:ea:b2:af:40:d1:
         87:35:c0:31:1b:8d:52:61:b5:5b:40:e7:42:60:52:41:96:18:
         00:a1:00:33:c3:8f:60:c2:9b:f0:22:43:0b:1b:5a:ca:ea:dc:
         41:e9:6b:dd:22:29:d8:cd:93:85:3a:24:d0:a1:83:1d:ac:9c:
         0a:0b:a3:f1:1f:20:e2:01:f4:55:90:f4:39:cc:e8:e6:2e:47:
         c7:d5:cc:03:8e:d3:18:95:d7:26:d6:82:66:df:6c:7f:bd:ec:
         4b:c7:c5:4f:46:bb:4e:c9:79:bb:4a:9d:14:55:40:73:ae:81:
         90:d6:50:37:82:8e:f5:51:3a:b7:af:df:ec:c4:e9:32:11:25:
         d6:81:47:82:b8:03:8d:c2:21:42:9d:39:c9:a8:5e:e9:da:32:
         9c:89:7e:2b:ea:b7:dd:32:6b:dd:6a:1f:65:18:0b:ca:58:7b:
         f2:de:81:85:be:e2:d5:42:e5:9f:19:65:cd:d9:eb:ee:99:d9:
         c6:93:90:48:50:3c:86:62:d1:98:5e:05:60:bd:37:09:63:39:
         86:15:06:1b:49:e5:8d:cb:e0:f5:00:90:fd:12:51:61:68:3e:
         80:b8:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:48 2024 by rpki-client on console-fra.rpki-client.org