Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
File:                     a646c31c-2719-3146-9260-c40f59eb735d.roa (raw, json)
Hash identifier:          G6xFk2YtD7EwGM0g97c0Aictqlif/vgkQZMuo54NEk8=
Subject key identifier:   CF:72:9E:F3:E4:93:B3:83:6A:E6:59:C5:0A:C7:14:68:F5:44:5F:24
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285847F2BA3384F8DC92B256235480
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     13692
IP address blocks:        216.110.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:33:84:f8:dc:92:b2:56:23:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=86d8a231-e1b1-4d99-9d3f-80da0ccffede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:70:0b:85:e8:f2:ee:69:7a:c9:ec:fb:e5:
                    09:8e:e8:9a:e6:4d:bb:f0:1e:76:bb:41:8e:7c:78:
                    81:51:d6:9d:7b:ab:dd:f1:72:18:1e:69:89:85:9c:
                    8e:a5:68:ec:43:3b:5d:97:34:20:4d:e5:5c:48:cb:
                    aa:70:04:2b:d7:95:87:f6:ce:6b:b5:98:44:ca:68:
                    28:af:c6:c3:07:c4:8b:e5:02:5a:50:9c:6f:93:87:
                    2e:8f:95:01:3a:db:9f:9c:2f:53:d0:f5:94:2e:d1:
                    b9:9a:ee:24:d7:ee:ef:63:03:70:3b:3a:f3:89:ee:
                    85:66:18:46:5b:d7:3a:25:52:00:f3:ae:2e:ca:a6:
                    5f:eb:45:c8:8c:03:57:7c:b8:1f:73:62:19:5e:d9:
                    99:5b:49:c7:15:83:0b:96:55:c0:c0:06:73:db:78:
                    1a:6f:f7:98:3f:26:1b:53:34:cf:90:86:4c:f0:48:
                    df:72:e2:62:3a:5f:48:ee:47:e5:80:4d:5d:60:97:
                    8a:a3:26:c9:fc:ea:59:82:bb:3a:c0:75:5c:4f:8b:
                    f8:6f:dc:9c:b9:15:ee:f9:80:d0:c3:b6:99:0a:bd:
                    f9:1d:9e:65:0a:3b:b5:cc:6a:fe:b4:cc:aa:33:84:
                    53:95:ad:3c:ca:56:f7:85:e1:94:63:7b:10:27:5c:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:72:9E:F3:E4:93:B3:83:6A:E6:59:C5:0A:C7:14:68:F5:44:5F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:79:07:11:13:d7:62:bb:d1:9b:ad:45:b6:d1:52:4b:bc:b6:
         4a:f2:bc:c2:f5:5f:4d:e8:6c:bc:61:26:ec:07:5f:27:54:6a:
         7c:8d:40:c2:ef:c6:32:7e:94:4b:8d:92:8d:9b:77:5f:b3:e9:
         c2:8e:a7:97:c5:b7:83:93:b5:09:12:0a:85:7d:f2:ed:0b:f8:
         59:93:a2:1a:dc:7e:87:fb:ac:66:19:53:ce:c2:23:71:31:5b:
         ec:5e:d9:b8:c5:89:ad:68:48:3f:8f:cd:82:ee:d9:73:6e:0f:
         41:6b:26:4c:ce:05:4d:33:ce:04:d7:db:fd:ad:c6:d9:da:47:
         c7:3a:0a:66:db:d7:d9:4a:b5:d1:f7:e4:78:19:25:a3:f9:d1:
         d2:3e:80:66:66:e6:40:60:4e:c8:94:7d:00:79:75:04:68:69:
         02:34:9a:a0:89:2b:f9:4b:70:13:49:0e:37:75:5f:1c:7f:f7:
         58:25:4d:01:3e:78:18:a6:b0:56:ca:80:f7:b1:19:22:d9:d6:
         c0:1d:70:41:e9:59:0d:8e:e8:b3:34:e5:8d:f1:c3:f5:54:af:
         a2:da:90:6b:ff:31:96:3f:ee:7c:3c:9b:38:96:69:64:fc:c9:
         e4:28:18:e4:27:54:18:af:3e:fa:3b:59:30:37:ac:b7:7d:6f:
         91:48:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:59 2024 by rpki-client on console-ams.rpki-client.org