Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa
File:                     97e022f6-a708-3b9e-a075-e35149216c0d.roa (raw, json)
Hash identifier:          QhHXqLgIxeS9RUpPRnW9ODLvckmiG6lI/w2QuRXnibg=
Subject key identifier:   21:4F:4D:94:C8:2D:77:C8:56:33:82:35:65:96:69:3A:C9:13:32:11
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F432858474850C5647349EADEAE749ED8
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     7265
IP address blocks:        216.47.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c5:64:73:49:ea:de:ae:74:9e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=3b5938c0-c32e-451a-ad61-30e89d0427af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:3b:e5:bb:6f:aa:93:29:06:3c:bd:eb:fd:
                    de:64:56:4b:ea:8f:ed:88:94:43:fc:fc:b7:38:2e:
                    06:18:ba:62:7c:48:4f:6d:37:9e:1e:5c:c5:32:1e:
                    a6:79:2c:52:9a:35:70:f1:5c:bb:d0:93:5e:3a:61:
                    e3:3a:af:b3:59:6c:f0:c8:ef:50:44:cb:b8:60:5f:
                    37:97:a3:fb:4e:1b:10:d4:c3:c4:b4:c0:23:5a:07:
                    9b:a6:12:f2:15:eb:5f:98:01:4a:22:cf:67:8e:24:
                    6e:6b:3f:8a:38:d5:11:66:37:29:04:5c:f9:9d:66:
                    c3:29:61:ef:16:ef:ff:52:6b:c5:d1:c6:fa:a3:49:
                    8e:21:60:16:f8:37:11:45:58:6e:c3:41:c6:cd:09:
                    c0:7e:34:43:93:d6:62:33:13:2a:1f:51:6a:21:05:
                    5a:8f:38:e7:42:18:c3:3d:12:6d:2f:b6:c4:c7:bf:
                    fd:ac:73:21:5f:ae:b9:b2:9b:ab:eb:a2:93:75:d0:
                    19:9c:1f:f1:42:72:38:48:d5:af:0b:59:38:8d:1b:
                    86:34:34:b3:18:a7:e8:43:48:a0:a4:df:41:c3:da:
                    1f:11:0f:23:23:7d:6a:db:3a:0f:7a:c1:92:13:8a:
                    20:b2:e4:42:8e:8e:b6:2d:51:7e:43:17:37:c1:0d:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4F:4D:94:C8:2D:77:C8:56:33:82:35:65:96:69:3A:C9:13:32:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/97e022f6-a708-3b9e-a075-e35149216c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:41:ff:44:4c:21:e5:ee:78:2d:9d:7e:30:53:9c:cd:b4:93:
         f4:ec:7f:d4:41:29:41:43:83:62:1a:be:4e:2e:6f:ba:93:28:
         68:81:fb:fc:39:43:59:4a:07:57:c2:eb:39:39:61:c6:c0:a7:
         d7:6d:ce:98:d7:2b:56:e1:d9:14:2e:da:ac:50:1f:e6:90:07:
         53:f3:48:a6:cd:ed:f2:3e:59:60:49:5b:7e:c0:77:36:b3:84:
         bb:d4:17:9d:b1:c1:3d:1b:48:a4:4e:3e:46:82:4d:83:59:2c:
         ae:54:be:c5:cf:01:67:75:7b:28:e8:2b:48:a4:f2:9b:68:46:
         34:c8:73:bc:01:60:df:55:08:dc:57:6b:36:f0:0b:30:b2:e3:
         a0:56:64:37:71:54:03:66:3f:df:28:7f:c8:f1:48:83:b3:b5:
         f9:14:7f:04:ea:a0:d4:90:cb:fd:9c:66:3d:b4:9d:a9:de:0c:
         be:44:2e:ba:fd:98:d0:8c:4f:2f:6d:a2:3e:f8:e6:bc:2c:20:
         18:94:da:78:40:98:87:f5:0a:65:37:d5:bf:46:96:ed:0e:c3:
         ac:8b:60:e5:ae:e7:bd:c2:db:94:b2:cc:df:4a:aa:7b:3d:ae:
         3f:3d:bd:1d:59:99:61:27:de:53:2e:d3:ca:ea:69:b2:15:0e:
         06:c1:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:58 2024 by rpki-client on console-ams.rpki-client.org