Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa
File:                     732dce7c-2697-342a-9dbe-673ec0697c4b.roa (raw, json)
Hash identifier:          vrtEnKrLhbHSG7igekCcD2RFxoRXu68bdXUTmBGcakQ=
Subject key identifier:   22:6F:B3:1C:5D:BE:7E:7C:51:9F:2A:65:6A:43:ED:D8:DC:20:15:FA
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285847CFD4D8D99937119AEAD4B8D0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     14618
IP address blocks:        216.52.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d8:d9:99:37:11:9a:ea:d4:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=30ef5d66-98f9-4633-9bde-9bf922663c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:be:91:a6:44:82:49:14:c5:55:bc:c6:86:
                    af:6e:62:9d:68:2f:81:35:1c:fb:c7:3b:d3:0c:21:
                    17:a1:44:b3:5f:01:46:b2:1c:2b:ce:01:f8:a0:f2:
                    55:09:58:d7:77:21:d7:b9:ef:e0:47:37:67:6b:60:
                    7c:e6:fa:3c:c7:ff:f9:d0:4a:66:b4:c5:f7:d0:e4:
                    cd:42:e3:b4:a1:26:7c:6a:2b:c6:f3:10:10:a0:c7:
                    ba:a8:ed:e7:78:1b:1b:9a:33:73:ea:8b:f3:e0:81:
                    36:e3:a2:98:01:ce:31:75:25:2e:7d:c8:e2:80:f8:
                    08:bf:aa:c5:2d:ec:8a:fb:99:1d:fa:e5:88:fe:17:
                    83:12:79:a5:e3:79:a5:04:fc:3c:bf:1a:e9:2a:b7:
                    48:f4:f0:59:e6:3b:b0:ac:36:94:ff:2d:b6:ce:94:
                    de:4f:22:e3:0e:dd:51:0a:06:18:8a:28:b9:1c:1f:
                    b9:0e:3b:f2:b6:e0:9d:88:ae:1a:20:31:1e:59:e2:
                    4b:c2:5b:73:ad:d6:38:d2:a6:f9:e1:bb:7e:df:b1:
                    74:82:8b:12:6c:f2:67:d7:fb:0c:ce:82:c5:72:36:
                    4e:2b:3f:12:3d:79:92:1a:67:97:23:41:ab:72:f4:
                    61:db:b4:9c:7c:71:85:36:0c:f2:7c:30:c3:e6:cd:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6F:B3:1C:5D:BE:7E:7C:51:9F:2A:65:6A:43:ED:D8:DC:20:15:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/732dce7c-2697-342a-9dbe-673ec0697c4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.52.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:77:16:9a:34:9d:af:d6:2f:7b:45:9f:27:41:1d:67:d6:ba:
         69:2c:a9:42:92:4c:c1:09:d9:c6:90:fc:f6:27:3a:37:eb:aa:
         02:db:38:3d:76:08:ed:4e:22:7b:48:4e:55:87:8f:e2:a1:ec:
         0a:c4:ac:93:f4:f0:dc:20:a3:40:a8:1b:1c:c3:dd:3b:5f:e1:
         a5:86:38:77:dd:2c:9b:7a:2a:06:22:c1:4c:25:d0:c5:90:1d:
         de:c0:32:8a:29:f9:36:b7:85:66:78:cb:74:72:2b:9d:06:ae:
         0a:ce:46:3a:9f:84:90:a9:e8:88:fb:f8:a6:66:02:de:20:d2:
         e2:ca:16:5d:c9:b4:e3:e8:57:24:09:ac:36:bd:42:52:0b:16:
         00:fb:70:53:18:84:4e:aa:b1:28:53:64:f1:23:42:6b:9e:cf:
         97:8e:82:b8:e9:b0:5c:b0:e4:37:5c:6a:e4:ba:70:ec:be:56:
         5b:4e:1c:f0:b4:d3:8c:00:16:98:51:61:59:ac:47:b1:75:dc:
         f3:39:8b:a9:4c:69:3a:d8:d6:61:3f:a7:6f:13:e8:49:d4:49:
         43:d2:19:9d:91:cf:5b:54:4a:0f:0c:a9:a7:4f:e7:71:63:27:
         85:af:e5:cd:c3:5f:40:df:44:24:92:fc:8c:63:c6:92:9a:fe:
         b8:a0:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org