Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
File:                     97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa (raw, json)
Hash identifier:          h27HrquiiQ9kNJoIshsXldVPH0Ou5TBhAJmqLlabplM=
Subject key identifier:   C9:79:7F:E9:CF:77:70:45:E4:AD:B1:1A:DD:5B:72:7B:53:B7:6E:8D
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F4328584788865955F6EE215B550408E0
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     27370
IP address blocks:        216.163.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:59:55:f6:ee:21:5b:55:04:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=fcb1ce8b-70ab-4ffb-b602-fbeb4ec51cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:31:cb:fd:6a:e2:3b:3f:68:8d:3c:3b:6a:
                    40:e3:b4:6d:4a:49:79:81:91:b9:80:c2:11:f6:a4:
                    e9:c8:96:cb:fc:08:4d:f7:1b:30:40:60:d0:50:6a:
                    26:f2:09:7e:76:a0:42:de:7d:f4:67:b6:bb:3d:8d:
                    e5:6b:61:46:75:3c:66:26:52:b7:3f:71:e6:3d:df:
                    73:02:67:6f:08:40:ce:b8:10:fb:a6:4c:30:1f:18:
                    fe:3c:71:27:9f:e5:89:44:99:a0:57:5a:52:ea:f3:
                    15:d1:fa:e0:e0:fd:c3:f4:1b:b9:81:4a:e1:7f:49:
                    e4:eb:e6:28:d9:86:d4:3f:28:45:88:a6:41:d2:d8:
                    aa:96:8f:09:c4:ee:0e:50:b6:79:83:2a:93:db:1f:
                    ee:79:d6:28:5d:85:36:eb:91:06:ab:d3:d6:06:0b:
                    b5:c6:bf:8f:a2:a8:16:86:fd:14:06:33:8c:c2:45:
                    b8:68:c6:1f:e1:b2:7d:3d:4a:6a:cb:00:de:8f:00:
                    62:2f:80:ea:a5:da:88:38:bb:70:80:0c:13:2f:2f:
                    fd:a6:11:7a:f4:db:ea:4b:bb:94:e6:fa:9f:19:e4:
                    d1:a8:da:ea:a9:86:bf:36:4e:99:1b:34:20:ed:93:
                    31:c5:75:83:f7:1b:eb:71:94:4a:40:85:d9:50:40:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:7F:E9:CF:77:70:45:E4:AD:B1:1A:DD:5B:72:7B:53:B7:6E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/97e930b1-4743-3c5c-bcbf-6fe22de3a9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:4b:48:8f:3c:70:4b:f6:76:9d:fc:08:63:05:fa:4f:46:
         31:53:cc:5e:c8:ae:08:9e:d2:8e:6c:39:d3:7f:ff:b9:8f:48:
         27:54:19:ad:ab:b9:e1:cf:d1:c6:0f:8a:82:65:99:91:f1:39:
         f0:93:e9:97:9c:29:2d:69:a2:ac:95:98:84:b9:28:45:d5:20:
         6d:ef:dd:f6:6e:36:2e:da:15:ce:66:bf:10:0a:25:48:24:e8:
         f2:01:c6:bf:60:5b:81:d9:f2:1b:86:66:c2:af:d1:22:1b:63:
         15:e6:1f:33:9d:fb:8d:57:fd:7f:fa:87:5d:ab:f0:c1:ac:79:
         95:53:36:cb:27:f6:5e:7d:a3:92:46:00:3f:ab:c9:25:2e:dc:
         ef:4d:7f:a7:63:7e:68:3c:d2:96:62:42:ea:24:69:e5:32:07:
         6e:f0:0f:0b:0a:89:f2:b9:2b:c0:85:0e:a2:40:42:b0:15:6b:
         97:1a:33:bf:25:eb:72:32:b3:d2:27:66:c6:a8:49:47:08:64:
         cf:05:57:25:1f:5b:92:61:40:71:a3:1f:cf:73:6d:83:f6:dd:
         52:4d:5b:81:60:fc:8d:cd:a7:2d:21:a2:03:e5:62:8f:bb:a5:
         26:02:c5:a6:f3:eb:d6:04:44:bd:64:41:57:88:76:9f:e1:c0:
         87:81:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org