Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c16e8a08-74bc-360a-bae6-492006edaa15.roa
File:                     c16e8a08-74bc-360a-bae6-492006edaa15.roa (raw, json)
Hash identifier:          YvbpB2qLoXXwRFK0AzqtI3jtxomqhSL8sFqj12lqjr8=
Subject key identifier:   3A:8A:E7:44:F4:BD:75:C5:58:0D:09:0F:D3:EC:F6:F1:A1:81:1A:80
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584777C642D0FE93E5B88B995C80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c16e8a08-74bc-360a-bae6-492006edaa15.roa
Signing time:             Tue 08 Oct 2024 01:00:31 +0000
ROA not before:           Tue 08 Oct 2024 01:00:31 +0000
ROA not after:            Mon 06 Jan 2025 02:00:31 +0000
asID:                     36511
IP address blocks:        216.230.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:c6:42:d0:fe:93:e5:b8:8b:99:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Oct  8 01:00:31 2024 GMT
            Not After : Jan  6 02:00:31 2025 GMT
        Subject: CN=411e2956-0f6d-4086-9290-08d8f04d3b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:29:80:98:c4:f7:e3:a5:4b:19:f9:30:3d:
                    53:38:2d:d2:2c:18:af:7c:2e:f1:f9:97:c8:94:ec:
                    99:11:2c:62:46:c2:73:89:79:41:ae:8b:aa:39:4a:
                    66:51:2d:f7:69:7b:bc:45:8a:52:6e:16:c7:55:fc:
                    7a:2d:88:ea:00:81:ca:2e:aa:fb:41:fd:45:b1:9d:
                    fd:e6:b9:39:f5:d3:38:0d:f6:2a:b8:d7:32:06:b9:
                    65:45:68:df:83:0d:7d:bb:8d:9f:5e:5d:eb:98:61:
                    61:e8:f2:76:a8:6b:f5:3e:a9:b2:b1:ba:6c:ca:df:
                    0d:c0:ae:c9:b8:46:d9:4e:28:d3:da:39:7d:e3:55:
                    5e:75:fb:db:90:00:3d:e4:ec:2c:3e:4d:ff:2e:89:
                    cc:4b:5d:7f:79:cf:ed:cf:3c:77:a4:4b:8e:cd:19:
                    f7:c7:60:05:0c:5a:f8:c1:00:bb:70:ee:98:e6:4e:
                    28:64:c3:8e:c6:f8:6b:c1:84:7b:ae:9e:69:68:a3:
                    30:57:45:06:72:c5:4c:c6:df:b8:15:67:b6:93:bc:
                    b3:76:28:0a:c3:31:fb:8e:5f:aa:8b:ab:76:7f:b4:
                    4c:1b:54:e3:24:93:a3:14:c0:58:0d:da:eb:d4:97:
                    44:ec:81:03:2e:c4:de:cf:43:93:83:d6:2f:37:9d:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8A:E7:44:F4:BD:75:C5:58:0D:09:0F:D3:EC:F6:F1:A1:81:1A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c16e8a08-74bc-360a-bae6-492006edaa15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:12:ae:b5:6a:66:9c:ae:ed:19:56:59:4b:b8:70:69:91:06:
         5f:93:2e:63:13:3e:b6:59:5e:f7:e7:6e:b1:ce:17:75:a8:55:
         43:67:ab:52:38:94:aa:f8:83:c1:96:0e:03:a6:4d:44:f9:f2:
         41:d6:93:88:81:22:07:63:f4:9e:57:be:42:93:96:8b:3f:4c:
         88:4f:38:9c:9b:a9:49:cc:54:c2:50:f1:77:92:ff:6f:83:a6:
         70:94:05:ce:bf:da:3b:fc:0d:92:e1:0d:0c:b2:dc:c9:29:8d:
         75:c1:21:51:a1:d8:7a:44:fc:de:f8:7a:c3:4b:f3:41:54:54:
         2c:42:43:ea:96:a2:07:01:0e:d8:70:3e:ab:f8:7b:e4:08:70:
         bf:a2:7b:64:65:30:1d:47:6f:3d:ce:7b:3f:b5:e3:3d:70:4d:
         a0:fb:0e:14:2b:54:17:f6:8a:ae:74:9c:b2:5a:0f:e8:90:c3:
         59:1c:fe:74:53:7f:1e:4e:40:81:87:b2:40:d9:06:43:01:9f:
         5a:51:ac:b7:33:ca:6c:72:e5:7f:10:0b:1f:a7:89:9d:1a:86:
         a2:0c:c9:fd:b0:27:61:52:cd:26:d9:cf:28:03:2c:d3:57:b3:
         6d:69:e4:b5:77:94:d4:a7:48:0b:28:43:08:62:e3:f7:99:a5:
         da:4f:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:41 2024 by rpki-client on console-fra.rpki-client.org