Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
File:                     80b27743-32d4-3b53-bf56-8021fd482c60.roa (raw, json)
Hash identifier:          i8wpYxAs+yck2SiWe0OwfTOXjtI8oMqIIsjjVJA0ikU=
Subject key identifier:   BD:1C:19:A3:C2:79:7A:FA:0D:27:58:66:40:92:24:F5:0D:39:10:B9
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F432858477C5872553AEB416B444E8F60
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
Signing time:             Wed 09 Oct 2024 16:18:24 +0000
ROA not before:           Wed 09 Oct 2024 16:18:24 +0000
ROA not after:            Tue 07 Jan 2025 17:18:24 +0000
asID:                     26380
IP address blocks:        216.119.208.0/22 maxlen: 22
                          216.119.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:58:72:55:3a:eb:41:6b:44:4e:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Oct  9 16:18:24 2024 GMT
            Not After : Jan  7 17:18:24 2025 GMT
        Subject: CN=c9e68da6-ce04-4f26-aa62-33cba7456ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:81:d2:fe:70:97:c9:50:ae:66:ca:bc:b9:
                    ed:6e:6c:8f:b1:1e:1d:99:69:8f:b0:5d:07:a6:0d:
                    42:a3:a8:f3:dd:bd:82:92:50:a5:1b:0c:d3:c5:8a:
                    d8:7e:ac:0a:46:db:70:2f:46:1e:2d:f4:fb:1d:53:
                    b1:b8:d6:02:31:2d:85:37:a7:83:22:21:e3:84:0d:
                    62:51:bc:f1:da:02:33:7a:34:f7:e3:a6:6c:45:f8:
                    6f:c2:66:d3:f8:c5:80:96:6f:ca:f7:d4:0f:95:7f:
                    96:9e:59:34:18:28:ba:de:47:99:fa:30:3a:b1:eb:
                    bd:81:b2:c7:8b:7f:28:03:7b:47:a2:87:ac:43:bd:
                    92:7b:84:34:ce:8d:b7:09:8a:ca:e9:ae:41:47:5a:
                    b2:f3:c2:34:e6:1d:34:09:7f:d4:a4:0e:68:28:f4:
                    c2:c1:c1:0a:e3:49:95:60:b6:62:0e:1b:6d:4e:35:
                    ec:d3:63:3e:34:c7:0e:c3:35:7a:73:8b:89:9f:85:
                    01:d5:78:7a:74:a3:00:44:e1:4d:8a:fe:b0:6b:3f:
                    b1:45:94:db:9b:d1:de:01:6b:a4:1f:d0:3f:0c:65:
                    78:40:3c:e3:1c:b8:51:5e:e5:1e:de:c5:49:ab:2d:
                    83:28:a5:21:f6:79:7d:87:fd:16:fc:44:4d:0c:38:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1C:19:A3:C2:79:7A:FA:0D:27:58:66:40:92:24:F5:0D:39:10:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0/22
                  216.119.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ec:48:eb:cd:36:e1:d3:70:89:8b:c1:fc:8e:ce:15:07:8e:
         09:d7:1b:71:72:89:4f:dd:7b:54:25:1f:b9:91:1e:7b:d4:69:
         95:ee:4e:62:fe:7a:18:d1:d3:93:f7:e4:1d:f6:a4:03:51:53:
         b9:b3:7f:01:66:68:c1:6a:37:55:83:64:02:ea:25:b9:4b:e3:
         8d:4f:e0:15:2a:3b:be:5b:cd:c1:11:c8:84:cf:5a:63:91:d7:
         f2:12:c2:71:17:24:ca:b7:ce:ec:06:e2:c7:59:78:37:38:ac:
         1b:dd:63:f1:73:8e:32:30:6b:f1:4d:2b:27:53:b2:51:59:5d:
         5b:6e:c9:45:d4:32:9f:5f:0a:40:72:88:2d:ef:70:b7:53:41:
         c2:c2:47:9b:97:97:b9:dd:cf:23:b7:46:c8:7b:4d:4a:49:5c:
         29:3e:bb:64:cc:3d:39:22:a2:4e:b2:a4:92:0c:62:72:84:60:
         5e:c8:4a:02:44:ff:05:86:64:bb:48:24:60:c7:3f:f2:69:82:
         e7:d0:7b:6b:77:f5:b8:98:5c:96:da:06:96:f5:e8:c3:43:75:
         3a:b5:4e:93:18:fb:92:45:e3:6a:80:43:bc:00:63:e9:39:e9:
         bc:83:09:b6:f4:c4:d2:c2:00:09:49:de:e9:b6:6d:ed:36:ab:
         09:f3:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:17 2024 by rpki-client on console-ams.rpki-client.org