Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
File:                     abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa (raw, json)
Hash identifier:          GaNFdO2M7NO2xGgYDK/w2z+Wapu7DUy3jLOhdqMELJw=
Subject key identifier:   8B:54:15:E5:0D:1C:3B:AB:D4:9F:81:36:51:19:EF:02:42:71:6E:FC
Certificate issuer:       /CN=332b909c-500c-4711-b8f9-90f766d6a38a
Certificate serial:       010D0C9F43285847967BC90D724EDDEFB53C2380
Authority key identifier: BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
Signing time:             Sat 19 Oct 2024 01:00:33 +0000
ROA not before:           Sat 19 Oct 2024 01:00:33 +0000
ROA not after:            Fri 17 Jan 2025 02:00:33 +0000
asID:                     63306
IP address blocks:        192.40.216.0/24 maxlen: 24
                          192.104.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:96:7b:c9:0d:72:4e:dd:ef:b5:3c:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332b909c-500c-4711-b8f9-90f766d6a38a
        Validity
            Not Before: Oct 19 01:00:33 2024 GMT
            Not After : Jan 17 02:00:33 2025 GMT
        Subject: CN=346ad708-0f32-47dc-858d-18e7a4949e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:89:9a:d5:cc:88:15:78:1a:1e:a2:e0:db:
                    49:be:c0:90:31:94:71:e3:3e:ef:5a:06:ab:48:70:
                    5d:69:32:f3:b5:1a:fd:f3:e8:6c:01:de:a2:4c:17:
                    3a:32:0a:bc:df:73:9f:26:d6:55:5f:52:ed:36:2c:
                    d9:84:45:45:29:73:9b:4e:bd:a3:a7:2c:cf:b3:45:
                    bf:70:63:4a:59:9e:fc:7a:8c:76:0f:67:c5:41:84:
                    c1:19:6d:81:0a:16:7d:e7:1c:42:46:8a:9e:bc:1c:
                    9f:c3:ca:a0:74:5a:b8:52:8a:a5:c3:07:94:16:49:
                    c5:4c:5c:91:e4:12:f9:3b:c8:15:a2:d3:df:f8:dd:
                    d4:5b:f6:57:42:73:9c:80:85:7d:3d:d1:40:45:ee:
                    1e:ba:fe:b7:0d:7c:c0:2d:2a:6a:36:4b:57:c9:f0:
                    e4:80:ce:e3:d7:0f:d6:d8:e0:f1:9f:9b:8b:3f:04:
                    25:ed:7a:6c:46:c9:48:2d:0b:82:aa:b6:33:1f:17:
                    3f:ed:1c:f5:36:8e:33:94:43:c6:8a:f9:29:c6:27:
                    d0:9a:07:22:21:8b:fe:8a:fb:d3:f3:47:40:d3:23:
                    5d:1c:18:af:f7:fb:60:59:fb:ac:3c:58:ee:fe:ab:
                    10:ae:50:06:bc:4e:94:3b:ff:af:08:bd:be:d3:a3:
                    a6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:15:E5:0D:1C:3B:AB:D4:9F:81:36:51:19:EF:02:42:71:6E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.216.0/24
                  192.104.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:d3:80:6b:67:f7:5e:90:e1:5a:86:04:42:f3:85:9a:73:
         17:08:1d:95:77:a1:e8:8e:b3:eb:5e:86:3f:71:bd:a3:61:39:
         3c:e7:8f:38:a6:bb:7e:c1:01:4e:5b:02:d0:e3:1f:05:c1:a0:
         18:a6:a1:92:13:d1:f7:c8:03:40:d0:ef:f3:79:ba:c0:3b:ee:
         a2:c5:72:27:f3:01:c7:66:ce:9b:53:c4:a3:4f:94:6c:77:c9:
         b6:9b:6e:79:04:29:b7:ba:11:39:02:8f:da:d8:44:4e:10:21:
         32:e6:6c:87:db:9d:1b:5f:24:40:02:91:35:7a:31:7e:8a:b9:
         f0:bc:41:b0:af:00:e1:ba:db:e4:0d:90:77:5e:c6:e4:0e:09:
         b9:79:80:00:b7:cd:c9:22:c0:59:bc:5d:74:9e:99:44:b7:11:
         f3:84:65:08:52:ae:5a:66:a1:52:45:a6:9d:dd:db:ce:e0:18:
         90:12:60:f0:29:87:bd:61:da:3d:c3:ba:1b:41:16:10:c4:1e:
         d3:2e:6d:fa:d2:91:8f:92:1e:93:a4:d1:47:a3:ec:ee:d0:fb:
         4f:2d:bf:6d:df:2b:53:23:a1:3a:45:08:e8:0c:a8:7d:ca:85:
         2c:63:1e:25:c3:37:89:1d:fc:4f:94:f1:bb:28:70:c6:d4:4b:
         53:6d:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:36 2024 by rpki-client on console-fra.rpki-client.org