Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
File:                     446abe31-2685-30a7-992e-ef5bdffad3fc.roa (raw, json)
Hash identifier:          fZw5IHcTw2TBnkv181glxKdZbc5aH8nu+R/FXmhDarc=
Subject key identifier:   60:E3:8A:C0:D6:B4:71:B7:2B:00:0A:E8:A4:10:A7:D7:BD:0E:4F:CA
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F432858477C53F38FFFA27ACA4E1AE680
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
Signing time:             Wed 09 Oct 2024 16:09:20 +0000
ROA not before:           Wed 09 Oct 2024 16:09:20 +0000
ROA not after:            Tue 07 Jan 2025 17:09:20 +0000
asID:                     26380
IP address blocks:        216.119.208.0/24 maxlen: 24
                          216.119.209.0/24 maxlen: 24
                          216.119.210.0/24 maxlen: 24
                          216.119.214.0/24 maxlen: 24
                          216.119.215.0/24 maxlen: 24
                          216.119.216.0/24 maxlen: 24
                          216.119.217.0/24 maxlen: 24
                          216.119.218.0/24 maxlen: 24
                          216.119.219.0/24 maxlen: 24
                          216.119.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:53:f3:8f:ff:a2:7a:ca:4e:1a:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Oct  9 16:09:20 2024 GMT
            Not After : Jan  7 17:09:20 2025 GMT
        Subject: CN=94b45f2d-84a5-4360-ba7f-b674a3835d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:b2:a7:af:83:6d:1a:df:85:29:b6:15:c6:
                    17:6c:3d:cf:3c:0e:44:2f:11:a4:0d:14:c1:ea:26:
                    cc:2e:ce:7c:3f:95:42:9f:33:57:5d:e7:32:0a:9f:
                    c9:75:38:2c:39:6e:83:ba:20:7e:17:ca:9c:0e:0d:
                    ce:46:aa:d6:f3:68:d4:4b:63:61:22:81:87:30:48:
                    94:b8:e7:e7:9c:57:44:87:36:fe:e8:b1:ad:98:f8:
                    ee:b5:ab:28:fa:8f:3f:6b:bd:a0:be:08:61:a1:dc:
                    ed:59:1a:6b:5b:ed:0b:37:27:37:21:05:8f:d2:76:
                    ce:fd:dd:55:e5:43:54:a6:fe:2a:cd:58:8c:d6:65:
                    e7:bb:b5:e0:6d:0a:8b:ed:85:56:00:f3:89:4b:50:
                    c8:10:19:98:b8:33:fe:fc:18:1e:49:f8:9e:5a:2c:
                    23:ac:54:d1:b4:a5:4b:99:ce:f1:d3:c7:fc:af:56:
                    93:ca:e4:3d:d8:e4:43:ea:92:69:bd:de:99:66:aa:
                    24:18:f4:c9:2d:71:d6:c1:1e:00:d6:31:9f:d7:3d:
                    bd:8c:32:cd:49:23:1b:60:67:df:19:f8:bf:56:40:
                    fb:82:5b:71:44:07:4e:2f:5a:25:4b:74:e6:06:75:
                    c5:17:8a:2d:c1:60:f9:e7:b2:08:74:c4:f1:e1:ff:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:8A:C0:D6:B4:71:B7:2B:00:0A:E8:A4:10:A7:D7:BD:0E:4F:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0-216.119.210.255
                  216.119.214.0-216.119.219.255
                  216.119.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f6:e1:cf:07:d0:d6:2c:28:9b:f6:27:07:5f:d0:d1:f5:53:
         58:bf:a6:c5:34:8d:ae:0b:ab:3b:9f:0a:85:c1:7c:3d:c3:15:
         00:08:17:40:d4:bb:c3:a8:9f:34:ab:89:c2:3a:c8:1a:bd:53:
         87:0c:55:95:68:dd:8f:41:c8:11:31:51:0b:5a:1a:81:7d:43:
         f1:20:a3:ef:45:e9:be:fb:b5:46:f0:27:78:86:99:c5:d7:71:
         5a:48:82:9a:f5:e7:74:a9:d9:b8:a4:55:2a:35:ee:59:fa:8e:
         a1:2e:38:98:f0:1d:9a:9c:f8:76:f3:de:4b:6d:d8:23:50:ce:
         af:79:aa:01:4c:43:b4:f2:10:86:9b:1e:ca:6e:71:9a:d6:9b:
         02:be:ee:15:cc:c5:92:bb:84:c3:5b:2a:78:06:cd:f7:95:6d:
         c2:3c:d2:2d:62:e9:9d:54:d2:91:ee:eb:bc:cc:23:dd:41:0e:
         d9:33:b0:c5:1d:56:17:04:99:fb:71:70:ab:ae:26:28:a9:59:
         5a:21:6e:84:9b:cf:9a:0d:82:a7:5b:12:70:eb:6b:3b:7b:a8:
         51:5f:f2:94:07:70:69:6b:aa:2c:9d:4f:6e:45:d6:52:26:26:
         e9:c0:a9:91:48:28:a9:11:23:b0:f0:d4:e8:a3:32:8e:b2:93:
         4d:0b:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org