Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
File:                     31d9d835-72eb-3df1-b107-708439cd323f.roa (raw, json)
Hash identifier:          VSLj6xxase2UOscuLpTJczOXhxjqEczQ2tQpGVR8D/c=
Subject key identifier:   B1:45:4D:01:A7:6B:0E:FF:88:80:1E:D4:4C:1C:23:64:4A:53:2E:6C
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584785BBAC3386BD8451407D2FA0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     4922
IP address blocks:        216.30.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:ac:33:86:bd:84:51:40:7d:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=30022550-5ac6-448e-86a0-62f897886360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:4b:6a:0b:2f:7e:48:b6:b4:cc:fd:7f:0f:
                    86:bc:da:16:e7:a5:6b:e6:86:37:9b:5b:0c:62:b8:
                    56:11:cd:21:29:38:c5:2f:24:7a:2f:c9:28:72:08:
                    e7:70:56:b4:48:03:98:a0:65:56:d2:cd:61:64:8e:
                    49:ef:52:51:ca:19:13:24:e7:f5:98:99:54:d5:7a:
                    78:1c:ec:52:14:81:ad:34:d7:b4:9f:19:c3:a6:f5:
                    7a:75:ca:ab:73:6a:a0:c8:fc:c0:f2:c2:1f:72:e3:
                    40:11:cb:6e:fc:7f:f9:93:b7:d7:fa:78:72:69:ae:
                    2b:6c:5a:31:b7:5a:d8:bc:63:62:af:a7:95:9e:70:
                    e8:40:54:09:39:be:33:9d:39:b0:6d:22:19:78:87:
                    ff:48:0e:c8:2e:e1:3f:57:a4:1c:06:52:73:b4:55:
                    8e:5b:2d:8c:62:4c:57:aa:63:4e:90:a7:c6:08:b1:
                    c9:ac:16:45:d1:16:27:c0:52:70:b9:94:54:10:1d:
                    45:38:8a:64:e6:56:bd:a5:ab:70:36:41:54:fd:2a:
                    61:67:e2:16:15:7d:1c:88:f4:93:1a:90:37:e6:f2:
                    b6:ad:5d:a2:a7:5c:24:cb:c9:62:c7:09:db:d3:28:
                    56:61:43:df:54:87:ae:d3:11:0a:62:f3:11:1b:56:
                    88:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:45:4D:01:A7:6B:0E:FF:88:80:1E:D4:4C:1C:23:64:4A:53:2E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.30.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b2:07:3c:da:19:56:77:a6:38:9b:fb:a3:cb:e7:59:da:22:
         8d:24:c0:23:e2:c3:0b:e1:4a:ac:7c:cc:ee:4f:04:35:60:b5:
         73:9c:92:1b:0a:a8:b2:15:b3:5a:b7:f5:42:10:9d:de:50:cc:
         2b:d3:8d:1c:27:a2:0d:aa:76:2c:1a:1d:b7:c8:42:21:01:26:
         65:61:93:81:60:47:f8:20:71:b8:83:b3:da:d3:db:a0:51:c4:
         18:db:1c:5d:73:c7:35:18:45:63:03:e4:ba:7e:0e:9f:79:66:
         79:12:7e:9f:68:15:31:95:e3:8b:c7:13:b8:f4:b6:08:50:84:
         bc:b0:ce:6e:58:55:e1:27:fa:36:42:27:6c:f2:aa:f9:57:c9:
         63:e2:68:e8:4c:99:6d:3c:61:bb:4e:3f:f6:a3:a6:a7:38:ac:
         98:16:d5:0c:61:50:d3:95:ca:53:09:c5:90:e9:c4:b6:15:f0:
         fd:e5:74:7f:5b:60:78:82:65:3b:2d:c5:37:c8:74:ec:17:4e:
         5b:22:92:9f:37:ec:a2:04:01:c8:a5:15:36:bb:13:4d:6b:9a:
         b4:a0:94:dd:5d:a4:76:a4:f4:b3:be:d9:f9:d1:bc:b6:24:2f:
         09:d9:35:d2:66:16:27:4b:75:cb:44:4e:3b:3d:8b:51:00:0f:
         e2:1c:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:26:21 2024 by rpki-client on console-ams.rpki-client.org