Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
File:                     1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa (raw, json)
Hash identifier:          hPR3xdqAXDCdjUakzplRFc/AhBlUovG5eSxbNoCNsG4=
Subject key identifier:   95:AC:D3:F4:85:C8:61:FD:83:FC:E2:73:92:E9:76:04:AE:27:FF:3E
Certificate issuer:       /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial:       010D0C9F43285847643B789201AB9CF0A11F0000
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        165.109.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:78:92:01:ab:9c:f0:a1:1f:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=82498efd-a215-475c-a3da-6751fadbe449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:6d:7c:eb:d5:9a:b3:0e:95:64:60:52:f0:
                    c3:62:6a:79:80:7c:fb:17:8e:a0:6e:5b:a6:f4:05:
                    94:bd:8b:e7:19:99:f7:ee:ee:80:70:57:d2:07:bc:
                    3c:33:27:d0:e9:98:0d:ed:3c:e1:df:29:64:e4:50:
                    b5:44:3f:23:17:c5:43:19:e7:5f:c8:3a:06:77:11:
                    b8:f6:11:cc:46:be:11:05:58:cd:f2:24:e3:02:12:
                    26:ee:a6:15:00:79:d6:28:81:fd:4f:a3:25:f2:2f:
                    48:05:33:6e:3b:76:f3:30:f0:cd:06:4e:a6:de:38:
                    20:4f:1f:a1:f1:1b:87:d2:75:4b:9a:77:5d:7f:dd:
                    2a:0e:18:4d:05:76:93:48:9f:ea:ca:ca:46:c9:6f:
                    31:4b:84:85:91:0e:d7:b1:bf:a2:91:a8:f7:4d:2c:
                    f6:62:47:21:2c:a7:92:98:8d:99:7a:31:b4:91:76:
                    b3:61:bd:2f:18:91:95:39:b6:62:4f:78:e2:a3:1a:
                    dc:75:cb:00:0a:88:ec:fa:97:df:77:6e:31:34:71:
                    1f:36:3e:a9:db:45:20:0c:36:b0:57:a6:38:af:c6:
                    b3:8f:10:a8:46:d8:29:8c:10:60:4d:fa:e9:07:bc:
                    f9:a4:81:69:53:16:6c:72:d1:ee:b2:bd:c4:ed:bf:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:D3:F4:85:C8:61:FD:83:FC:E2:73:92:E9:76:04:AE:27:FF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/1c1bdd91-ebf4-3982-9e34-dbd05e27400f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.109.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:76:c1:e8:8a:20:51:d1:12:5d:f9:4e:69:2e:4d:8c:44:
         29:81:98:4a:d6:9b:7a:42:5c:42:fe:4a:e2:eb:29:c4:d4:1a:
         c0:de:fc:39:af:03:87:98:30:22:82:45:75:24:90:73:8b:e4:
         8f:a5:98:99:52:5d:bf:f3:a1:75:7a:6d:61:1f:f1:3e:7a:af:
         84:b3:27:86:86:a5:cf:91:55:73:a5:42:3c:d3:83:60:dd:dc:
         62:f2:b6:22:1c:1b:95:4e:c0:7d:29:0e:84:39:9f:50:e2:5e:
         ca:ca:43:8b:e8:01:c8:17:00:ea:33:c2:62:a4:39:58:ec:42:
         c4:be:ed:8a:12:87:22:43:1e:9c:ed:8d:c5:13:d6:0c:66:66:
         b5:86:74:b8:84:da:99:2a:ad:da:49:8d:0f:f9:09:bb:d8:42:
         4b:f6:a5:3e:23:a1:f5:eb:90:9b:21:38:40:69:36:f1:4e:8b:
         36:74:f1:af:35:ab:af:30:16:4a:9c:e3:78:67:26:b8:1a:78:
         a3:b2:d6:68:d1:61:a1:be:2f:10:10:b6:75:3e:33:bd:f2:c7:
         c6:e3:dc:08:af:e8:b8:eb:8a:32:8e:95:82:8f:bb:ef:c2:c7:
         52:8f:53:35:b6:f9:73:89:b7:27:d7:55:f7:4f:8e:a5:da:13:
         c4:29:5f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:43 2024 by rpki-client on console-fra.rpki-client.org