Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/99d5c57a-22f7-3631-bd94-7708a2b9698a.roa
File:                     99d5c57a-22f7-3631-bd94-7708a2b9698a.roa (raw, json)
Hash identifier:          zeeElF+qvo/5GErw9jCvhas3XVl6+6CsiHlZHS1cYBs=
Subject key identifier:   5F:6D:C9:11:06:C3:54:80:70:1D:51:31:71:3E:4D:FE:7F:A5:13:1E
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F432858478CB68F008DF744F1DEDF1200
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/99d5c57a-22f7-3631-bd94-7708a2b9698a.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     14618
IP address blocks:        216.250.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:8f:00:8d:f7:44:f1:de:df:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=780c962b-bbe7-42b1-979b-e5c256115aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:cc:49:d8:0d:da:ef:0e:6b:4d:0f:79:16:
                    f4:93:de:e3:af:34:4f:35:10:10:5f:85:21:e6:bb:
                    9e:a4:c3:9a:28:5d:32:36:d0:e3:a9:b6:5d:10:4b:
                    f7:7c:5c:59:76:a2:f4:83:a6:f8:33:47:38:24:2b:
                    19:f3:83:5f:5d:8a:8c:83:bf:f6:24:55:61:02:3e:
                    1a:64:99:d7:d8:70:6c:fa:5c:2c:09:bb:4e:e9:4a:
                    da:eb:b3:b5:1a:43:41:99:be:ab:01:b5:e2:6c:a2:
                    0e:f0:70:cc:a8:bb:cf:60:e5:54:f5:b8:90:0a:14:
                    05:c0:68:6a:7e:27:bb:67:d7:c1:7b:92:9b:94:2b:
                    71:2e:29:c9:b4:d0:8e:94:cb:e7:ca:8c:19:8b:5f:
                    a3:7e:4f:e7:9f:6c:c4:76:d1:f6:e9:39:55:0b:49:
                    9c:fd:48:35:44:9f:74:89:6c:71:59:d9:38:ce:a8:
                    96:6d:92:b2:93:17:ac:75:61:fb:2d:8a:87:a2:d1:
                    87:e0:cf:5c:b7:81:2c:c9:04:f8:c3:ea:b8:a6:93:
                    b8:e5:f5:31:bd:42:c9:6a:d3:24:03:e9:ee:5e:be:
                    7a:6c:b4:46:de:cb:87:12:23:67:94:31:bc:ca:94:
                    89:2c:20:45:12:0e:f9:4e:63:23:f4:fc:d3:1d:6a:
                    c1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:C9:11:06:C3:54:80:70:1D:51:31:71:3E:4D:FE:7F:A5:13:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/99d5c57a-22f7-3631-bd94-7708a2b9698a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1b:8f:44:af:43:d2:e5:31:cb:d4:e1:28:62:6c:b5:30:a6:
         71:67:55:81:81:bd:50:47:15:20:e5:eb:5b:a1:35:81:0f:36:
         92:90:48:e8:33:47:4d:be:64:51:b9:2f:6e:e7:ea:33:e8:5a:
         98:e5:74:43:c7:ef:1f:b2:76:47:30:1e:df:eb:58:e3:3d:99:
         04:90:19:22:d5:02:d5:9d:5f:cb:ca:8d:ee:3b:b8:8b:ae:c5:
         02:0b:42:e7:5b:eb:b7:c4:58:03:27:b7:9d:0e:c6:22:72:0c:
         c4:cc:58:69:35:27:0b:03:ac:86:5a:a6:c4:70:06:c1:63:32:
         2c:47:46:7f:02:21:8f:7e:63:c0:12:0a:97:68:a6:b9:9b:41:
         28:e7:a8:b6:24:8c:7e:36:b6:00:ce:54:07:d5:ed:8f:77:16:
         ac:89:ed:c9:df:75:ef:ed:75:29:78:77:19:29:74:a0:a2:10:
         19:ed:a5:ad:3d:b8:46:7c:5b:a0:44:2f:ed:ea:7d:5b:c0:9a:
         c9:70:03:a7:98:d6:8f:3f:06:4b:c2:0d:bc:8b:ac:6b:55:3b:
         b9:3b:27:f7:6d:24:16:e0:87:95:12:a1:0e:b1:72:45:67:35:
         e0:0c:17:47:00:d6:f8:5a:a6:d4:a5:3a:7e:49:11:78:9a:b8:
         05:7d:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org