Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa
File:                     5844de8a-d678-323d-916e-7e54edbffbd9.roa (raw, json)
Hash identifier:          58ZAIWCwTWPErGeOrYgwGNkV4jzloKSQNXnABfZsTuI=
Subject key identifier:   F5:E0:8E:DB:77:49:1F:B7:A3:DB:8D:1D:9F:27:E5:D1:70:3E:B7:FF
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858474850C4F9ABE1ACA8D43F6500
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     7265
IP address blocks:        216.47.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c4:f9:ab:e1:ac:a8:d4:3f:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=8d53a538-f7cc-4b19-b3c3-a1865d383006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:b1:f3:97:fd:7b:a0:bf:87:e7:d9:1a:53:
                    fd:08:5c:0c:fc:c0:7d:66:b5:be:ad:84:b9:a5:48:
                    80:87:e4:31:58:6d:56:5b:03:01:86:cd:7c:ac:c2:
                    57:17:c9:1c:4f:53:b7:c6:14:e0:18:67:8a:f9:4f:
                    cd:a4:29:62:48:6e:3a:55:0d:b6:48:ee:dc:58:9e:
                    8c:a1:22:c3:9b:38:31:83:83:6c:b4:d3:11:8e:99:
                    e1:dd:18:96:86:d2:b7:18:18:7e:45:07:b4:73:d9:
                    ba:49:79:72:56:3b:db:7a:4c:2b:f2:3e:3f:1b:cc:
                    41:d7:4d:6a:41:1c:8a:3d:a8:47:30:61:cb:7b:a8:
                    25:3c:12:d0:15:b3:ec:a9:32:8e:f0:42:0e:7c:9e:
                    93:8e:e9:09:a0:81:9a:18:f9:b5:ba:97:02:94:16:
                    ac:08:dc:41:e9:a3:e5:fc:76:9b:1b:b0:b7:25:6b:
                    6d:12:d5:de:50:8c:56:28:a4:17:12:ba:a7:8c:2b:
                    24:77:10:32:05:33:82:60:8a:60:e8:df:bb:97:64:
                    3a:24:e2:34:55:d8:1e:4f:68:c7:34:ba:09:fc:19:
                    cd:f9:ae:19:58:75:29:31:7f:f4:f6:e5:27:02:0c:
                    71:cf:74:9b:ca:d8:d6:b1:ce:0d:36:2c:99:16:83:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:8E:DB:77:49:1F:B7:A3:DB:8D:1D:9F:27:E5:D1:70:3E:B7:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:76:e0:f1:c3:b2:ee:17:ba:92:4a:d0:23:7b:5b:94:01:5f:
         ed:72:c7:1b:67:15:b2:40:f9:03:e5:fe:2a:50:7d:f9:b6:49:
         e8:13:af:2b:af:eb:aa:3d:98:d7:b8:76:3e:e0:22:f6:bd:eb:
         26:ab:d8:37:c4:d3:95:7a:b0:8a:d6:fc:fe:e7:a3:21:a9:6e:
         20:65:17:92:bf:a1:ae:03:1a:7a:33:f8:fb:b2:43:32:42:7d:
         f8:11:59:99:b4:34:c0:35:bf:6d:f8:0f:84:e4:ed:e4:09:ea:
         a4:21:07:41:8a:96:d5:d5:dd:99:8d:54:a9:e8:15:3c:61:69:
         d2:96:6d:b4:af:69:72:3e:7e:0d:93:e7:35:d5:76:50:74:d5:
         d2:a5:85:af:c1:d3:10:f2:e6:f5:0a:2a:77:33:99:44:6e:96:
         54:54:68:3f:67:56:8a:67:22:59:1d:95:90:8e:f4:44:8e:1a:
         da:56:20:ea:4e:19:02:45:c0:b3:25:01:fb:ac:53:46:2b:71:
         bd:30:e2:e3:53:af:98:2c:e3:2a:eb:94:ea:64:71:b8:3b:bd:
         f9:93:f7:c8:f8:b2:19:3d:73:00:28:d8:f0:87:e0:cf:81:84:
         0b:c0:b3:a5:93:a5:59:8b:47:21:77:e0:d6:70:09:36:fc:fa:
         e7:b9:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:56 2024 by rpki-client on console-ams.rpki-client.org