Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
File:                     ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa (raw, json)
Hash identifier:          QVcCX32Jus2Ody25p/kcp48a/7DQTHQH2mGqVE3xVMI=
Subject key identifier:   EA:AC:94:9C:F8:91:6D:2D:39:75:C9:04:21:EF:85:BB:6A:E0:DA:5F
Certificate issuer:       /CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
Certificate serial:       010D0C9F432858478886599B5B2E9AA36BA1C620
Authority key identifier: 63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     27370
IP address blocks:        216.163.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:59:9b:5b:2e:9a:a3:6b:a1:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00b089f9-bcf9-4483-badb-c4cf8ca6f9e1
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=4c410a3a-3821-4777-9d6f-f8beef372e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:14:42:71:8b:75:16:e6:df:39:7c:c2:23:
                    92:9e:51:cd:b5:32:20:06:94:74:64:d9:ee:a4:ec:
                    0d:3a:33:9e:2d:cb:00:bf:b7:13:5b:6a:43:ec:27:
                    13:78:d5:8c:7c:d3:56:59:89:b4:ec:17:4a:89:12:
                    36:c9:6e:77:4f:99:b5:b9:09:c5:9e:20:dc:65:dd:
                    43:17:cb:ef:2b:41:98:08:79:bf:1f:18:7d:73:8a:
                    30:a3:e0:0b:3e:11:5b:26:91:b3:2e:7c:de:1a:5c:
                    0b:04:8c:3d:08:3d:7f:77:7a:57:f8:13:33:63:fa:
                    46:0b:36:34:61:81:44:b6:ed:cb:b1:6d:ba:ff:8e:
                    29:7e:10:90:48:51:7e:43:43:e8:aa:f9:97:29:23:
                    f3:03:da:58:6e:c2:03:40:ce:3c:a1:a4:61:43:3b:
                    37:0a:3b:9b:ba:55:ec:ec:9e:68:db:1a:b0:85:02:
                    0c:14:c7:d1:46:3a:b0:09:d3:08:67:5b:03:97:1c:
                    54:30:d5:aa:a1:d4:dd:82:3a:7d:a0:1d:00:c1:1f:
                    13:a6:d3:33:25:2a:23:4b:e6:f6:6a:56:ab:01:c9:
                    f2:6b:ef:f7:08:0d:da:76:96:e5:ae:26:cb:61:d9:
                    30:78:72:35:7f:a1:5f:bf:80:76:38:e7:16:21:75:
                    30:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:94:9C:F8:91:6D:2D:39:75:C9:04:21:EF:85:BB:6A:E0:DA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/ea0db632-7724-3c71-b5d0-a6d993ccb2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.crl

            X509v3 Authority Key Identifier:
                keyid:63:78:09:E9:4C:B7:72:04:58:F4:A5:9E:8F:7B:B4:91:9A:DF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00b089f9-bcf9-4483-badb-c4cf8ca6f9e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cb:23:40:c9:5e:79:4f:ed:9a:a0:cc:d8:dc:ff:ce:bd:d3:
         73:b5:86:22:94:66:35:31:7c:1b:24:cf:3f:46:3c:da:1a:ea:
         97:73:77:82:39:ad:25:36:7b:2a:ee:a4:a0:09:4a:fa:d1:c1:
         8b:99:9c:3c:98:43:8f:a3:8f:7c:4a:d4:36:1a:e1:79:06:85:
         be:d8:91:7c:f9:ea:5a:c7:11:46:e2:5b:fc:28:21:fa:cc:2e:
         1c:e1:53:7a:15:a8:e4:7e:02:87:68:a8:36:fc:af:50:18:9f:
         fe:c6:16:cf:ea:13:fe:59:80:9a:3c:82:78:bf:09:a6:9f:09:
         b2:29:ae:92:c3:18:62:1c:b1:38:da:65:f8:d6:e7:28:8b:d3:
         47:d1:ad:bd:88:a7:63:1d:bd:0c:b8:90:cc:25:1a:f4:00:8b:
         02:a5:61:f0:28:24:75:33:7c:5f:3d:e1:39:0b:f5:f1:23:be:
         37:3e:08:df:45:7b:17:dc:da:58:06:f1:4b:04:c4:95:7a:69:
         b9:be:eb:9e:f5:00:b1:4f:6b:05:4a:bc:6e:57:5b:1a:e0:e3:
         44:31:d0:7d:8a:62:b9:1a:a9:c6:00:e3:2d:52:5f:4c:40:4b:
         1d:31:94:f1:83:87:b3:ab:cf:bf:05:67:09:77:dc:7d:ac:bb:
         c4:65:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:37 2024 by rpki-client on console-fra.rpki-client.org