Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
File:                     daab233c-3584-3069-b9e0-933500bc4f22.roa (raw, json)
Hash identifier:          4zVIS3tAi+RKWzQCUSEXr0aJZBR8+ZZ0hurfMKRpitY=
Subject key identifier:   B6:7F:96:43:CB:93:12:0C:79:76:D2:0A:36:5F:F9:39:40:FE:6F:3E
Certificate issuer:       /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial:       010D0C9F43285847B2669987FEB99F61F6E64600
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     20371
IP address blocks:        199.202.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:99:87:fe:b9:9f:61:f6:e6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=86166696-23c9-443b-8c8b-838ed6f51540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:57:22:b8:e0:71:6b:38:50:60:66:b3:25:
                    54:e6:94:4b:9a:65:53:4c:f8:fc:3b:5c:bf:4d:8a:
                    87:68:2d:f0:6e:6f:1c:70:ef:82:d1:8a:99:22:8d:
                    84:bd:49:15:45:bf:7d:e3:2b:e9:8d:5b:59:c7:74:
                    90:69:bc:55:58:53:fb:88:e7:5e:1b:63:33:f8:d2:
                    d1:dc:db:2a:23:5e:86:f9:41:b6:d8:8a:c2:d5:9c:
                    58:11:56:22:ae:8b:4b:47:d0:97:7f:da:67:54:74:
                    7c:6f:77:23:3a:74:37:57:58:de:7a:48:dd:64:aa:
                    c2:06:a8:c2:d1:d1:91:06:74:0c:b4:89:ec:fc:53:
                    08:a3:87:a0:74:ec:0d:b3:10:76:af:3b:e3:9a:ab:
                    29:f5:20:69:74:0d:4e:16:36:23:0a:0b:2e:d3:4a:
                    32:6a:72:53:f8:33:7e:e9:f0:d9:82:e6:df:29:07:
                    b6:af:c7:69:b2:f5:c2:a0:b3:78:0d:e4:39:7f:e1:
                    c9:36:f3:c6:1b:68:01:ee:85:84:de:45:4c:10:33:
                    2a:65:f5:27:55:a9:31:e3:77:a1:88:c9:ce:70:0a:
                    a7:f3:dc:40:6b:18:98:f3:a2:7e:d2:aa:7d:6e:d4:
                    f5:4d:cc:02:93:8c:a9:7a:90:59:07:a7:18:45:a7:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:96:43:CB:93:12:0C:79:76:D2:0A:36:5F:F9:39:40:FE:6F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl

            X509v3 Authority Key Identifier:
                keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.202.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:92:26:95:c9:49:2d:94:3e:15:bc:1b:de:73:4f:da:c0:
         7c:05:01:cc:72:a7:f0:59:e6:53:ea:b3:e1:05:5e:96:f7:c9:
         ce:1b:a2:1e:bd:e3:b2:41:b8:32:80:70:b9:99:12:0c:3e:36:
         37:29:49:23:93:76:0f:fb:9f:b1:11:fc:30:70:42:dc:8f:9f:
         00:ea:98:f8:35:e1:dd:67:11:50:ff:24:9b:b1:b4:5a:22:b2:
         71:84:2e:1d:18:d8:32:e9:83:f0:97:71:17:05:09:30:2d:89:
         ed:3e:6f:f2:6c:8e:fc:2f:41:fa:7e:af:9b:87:8f:6f:c6:63:
         41:63:37:5f:7d:e7:7b:1f:5a:5e:f2:90:ef:ff:b9:44:c6:17:
         e7:e2:28:cd:8a:f6:52:1e:50:51:ab:30:43:0d:c2:5a:7e:83:
         54:bd:a8:f5:8b:08:8f:97:17:a3:03:0c:44:50:f5:55:2c:36:
         b9:a9:16:c6:f0:8b:91:41:10:5e:a4:38:57:41:88:4a:5e:fe:
         11:55:d6:4d:2e:bf:e3:01:bd:20:d1:71:c6:a4:47:9b:fa:be:
         16:b4:64:26:5d:94:bb:b9:01:72:f1:12:bc:73:04:ca:7e:ab:
         5e:0b:cd:1b:30:97:75:49:1d:d7:00:df:b5:52:01:e4:e8:4f:
         70:f6:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:35 2024 by rpki-client on console-fra.rpki-client.org