Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
File:                     275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa (raw, json)
Hash identifier:          6qYBiyGjagT09/TtIdFBPS+QJFYTE1T38bYmUWiw/UM=
Subject key identifier:   E8:EF:A2:88:41:78:DB:31:B0:72:51:2D:39:50:A1:8A:A6:5D:9B:84
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F43285847A1A67FA1CC34EDC665F03480
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
Signing time:             Wed 23 Oct 2024 01:00:32 +0000
ROA not before:           Wed 23 Oct 2024 01:00:32 +0000
ROA not after:            Tue 21 Jan 2025 02:00:32 +0000
asID:                     19229
IP address blocks:        216.157.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:a6:7f:a1:cc:34:ed:c6:65:f0:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Oct 23 01:00:32 2024 GMT
            Not After : Jan 21 02:00:32 2025 GMT
        Subject: CN=111c79fe-a5b2-4fee-8033-80da777d17fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:f6:df:fe:d0:d1:c8:c6:3b:6f:39:2d:99:
                    03:65:d1:01:55:ca:0b:91:63:50:0d:42:17:fd:50:
                    ad:82:e9:af:0d:10:43:58:18:12:fd:b5:0f:0b:72:
                    e4:22:d9:55:94:ba:c6:77:eb:a5:ca:71:8c:a9:29:
                    66:62:f4:49:e9:55:0b:f8:99:18:ff:11:b9:59:cc:
                    47:fb:50:d6:be:da:5a:12:a9:76:23:68:1a:28:5d:
                    10:f4:82:87:6d:0c:92:12:c8:6b:74:ea:11:ea:7d:
                    7d:e2:dc:f6:32:b8:a5:93:07:9b:af:c0:0a:08:43:
                    3f:fd:f3:3f:80:eb:db:51:14:b1:60:9a:fe:21:10:
                    ae:2b:31:cc:ae:df:11:af:62:da:bb:40:15:5d:6d:
                    76:34:9a:58:80:12:91:31:69:a6:4c:2f:61:56:dd:
                    ae:7b:2b:10:f8:3e:f5:c7:29:81:f3:17:63:8c:e1:
                    0a:88:8f:bf:cd:ba:47:8d:6e:66:68:f2:9a:ae:fc:
                    62:a7:75:db:ec:39:93:40:e0:e4:1c:a2:ae:15:00:
                    b6:fa:fd:5d:60:9d:71:8c:e7:dd:14:e3:f2:94:93:
                    fd:06:0f:ee:b9:f6:10:a3:52:6d:84:f9:c8:fa:e6:
                    72:8c:6a:65:50:71:6c:99:cd:de:3d:0f:6c:09:dc:
                    7d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:A2:88:41:78:DB:31:B0:72:51:2D:39:50:A1:8A:A6:5D:9B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ee:dd:45:e5:fa:55:19:29:87:28:60:76:cc:72:cc:3e:f5:
         d0:5f:8e:e9:17:02:66:f7:d0:89:6b:ac:c2:94:ae:6f:d8:c8:
         0c:84:2e:ca:89:0d:1d:c7:1f:0d:fe:cc:e5:63:6d:5d:1a:2c:
         2a:02:f5:f5:08:82:62:23:21:d5:26:17:57:53:da:37:69:f5:
         43:02:bc:ec:f9:61:98:86:ff:32:94:a6:d9:41:b0:0a:4f:85:
         ca:be:a0:6c:ee:dd:43:2a:0f:57:a3:42:f0:e6:10:03:b7:35:
         cd:1e:73:95:f1:f6:3d:a7:ba:89:89:eb:7f:67:d1:8b:e8:36:
         8c:c5:39:18:75:8e:4f:a6:5a:b5:e6:fd:24:db:a9:29:4d:2c:
         be:1a:36:cd:26:22:3d:ed:2b:45:a7:b5:e2:0a:02:92:c2:57:
         b3:db:de:6e:36:7a:55:df:e3:7c:fa:be:1c:c3:7a:29:4a:c2:
         2c:ae:24:23:d1:f8:a2:cf:8f:0f:42:22:cb:22:b2:2d:85:1c:
         16:2b:12:ab:bb:27:be:96:13:5c:8b:91:13:32:5b:b7:9d:9b:
         78:b1:23:e1:0e:00:f1:97:10:08:f9:d2:ec:de:23:75:3a:e3:
         8b:fb:db:8b:09:a5:a0:20:f4:87:62:cd:7b:94:60:ef:df:92:
         9d:ef:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:53 2024 by rpki-client on console-ams.rpki-client.org