Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/380cd4ac-b47a-3613-b14f-5e1d45aaee7c.roa
File:                     380cd4ac-b47a-3613-b14f-5e1d45aaee7c.roa (raw, json)
Hash identifier:          WA/23GMgESkWu9FUqOpgzITRy3C3/cShrVb5Fje8cvo=
Subject key identifier:   2D:DF:38:D4:42:91:02:DB:E2:E3:B6:E8:57:4C:CB:B5:59:0B:4C:D3
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F43285847EBBF7D25C3DE42043765DE00
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/380cd4ac-b47a-3613-b14f-5e1d45aaee7c.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     10996
IP address blocks:        216.239.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7d:25:c3:de:42:04:37:65:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=39ac12f5-fb5f-4c26-8b55-d1491ba3e0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:6b:ff:9b:f6:96:d0:50:bb:65:fb:d2:36:
                    fd:2b:c5:ad:8a:de:f3:c0:12:37:8b:fb:49:0f:34:
                    66:14:74:2e:be:f9:dc:62:78:f8:c0:71:d1:04:16:
                    cd:4a:70:35:ce:f5:06:60:4c:24:8d:36:ab:d5:26:
                    7d:40:d2:4a:eb:39:94:c8:da:46:9c:00:e3:18:20:
                    76:26:5e:bf:06:a4:12:35:5e:c2:be:1f:6a:a0:fe:
                    2b:03:3d:fe:12:e3:03:0f:fa:24:81:25:5c:03:cc:
                    3f:45:81:32:12:58:e1:dd:53:f5:3a:74:27:8c:fc:
                    32:e4:fa:60:80:8b:b1:2c:43:ec:a3:6c:ca:04:6a:
                    25:46:6d:2c:27:c9:16:d1:82:16:77:b9:e3:c6:9c:
                    6f:03:68:56:45:e5:39:e8:e9:27:fd:07:83:1c:80:
                    fa:73:5b:7f:6f:e8:77:3f:12:2c:19:0e:a5:e4:bc:
                    51:0b:48:a3:66:24:f3:de:05:00:8c:5f:c5:b8:03:
                    d3:85:73:7b:a7:4c:c8:f5:44:c5:16:33:03:4c:ef:
                    67:2c:ef:86:cb:f9:5d:6d:91:d0:6d:77:26:0f:5c:
                    9b:7e:ff:c0:3a:6b:a9:ab:c4:ad:9a:c1:26:44:47:
                    9f:b4:bc:69:29:01:85:fb:f2:a0:51:fd:96:a6:75:
                    49:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DF:38:D4:42:91:02:DB:E2:E3:B6:E8:57:4C:CB:B5:59:0B:4C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/380cd4ac-b47a-3613-b14f-5e1d45aaee7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:05:47:b3:de:2c:f2:d2:fb:d9:ae:2c:01:3f:59:93:64:70:
         a3:d7:c9:db:27:7e:db:9f:de:b0:60:d2:ba:3b:44:4c:1d:74:
         1b:72:55:3d:b6:6b:f1:91:a8:69:ed:64:15:dc:38:a0:80:d9:
         cd:e7:39:92:26:d5:8d:58:e0:06:a3:2d:6b:9c:bc:7e:c1:34:
         c4:04:f7:0a:19:cc:7a:46:2f:ba:ca:39:44:ff:73:d0:15:7f:
         07:70:11:83:48:03:97:68:64:15:5f:33:1a:fe:9a:69:43:28:
         68:62:15:60:26:3b:95:37:f0:d3:22:ec:db:a6:8f:6b:94:d4:
         59:36:c0:3e:af:28:e6:aa:22:77:ee:29:7a:c9:e5:7d:b8:1c:
         80:fb:e2:fc:43:cd:69:0c:f4:40:bd:a6:96:c5:e6:02:7b:66:
         87:ac:4a:cb:99:8b:3c:96:2d:ef:b0:89:c3:1d:c5:7a:b1:3f:
         34:20:08:22:61:07:2b:8b:be:e7:e3:3d:2e:cd:21:b4:68:47:
         5c:f0:13:3c:ee:54:81:5e:48:26:06:5e:37:58:26:ee:20:7f:
         93:18:ec:78:91:0b:cf:74:3b:64:80:25:ee:f3:41:2a:da:04:
         e0:1f:02:c3:1a:38:18:77:56:2f:10:56:0a:b5:58:f3:af:4f:
         30:95:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:57 2024 by rpki-client on console-ams.rpki-client.org