Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa
File:                     7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa (raw, json)
Hash identifier:          2NSuOwUG9dM3FRbi0bjE6c+GY1Y5hhEqFeWBpq0/D5M=
Subject key identifier:   9E:11:56:4B:A9:3D:1D:F2:11:81:27:17:5C:45:48:CA:A1:AB:89:72
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C4EBE0C6D5207152C8C0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        216.213.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c4:eb:e0:c6:d5:20:71:52:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=900360ea-721e-4252-88d6-6e1bde042da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:c3:e9:d3:1c:ee:2c:d4:06:c4:27:58:81:
                    46:42:bd:39:bf:07:09:55:e9:c2:4d:e3:5d:9c:71:
                    4c:8d:b7:ab:10:c8:06:b4:97:6a:67:9c:9d:ec:e6:
                    c6:7b:0d:f6:6d:ee:b2:63:c0:d2:3c:02:2e:89:d7:
                    63:2d:da:b3:e9:79:fa:33:34:7a:ae:fa:d9:3f:0b:
                    d9:ab:27:d8:c2:89:3f:44:03:b3:46:9f:b0:03:b2:
                    99:08:68:5f:97:3d:9d:a0:e5:3a:97:36:79:f3:2f:
                    1b:f7:b7:78:51:d6:7b:5b:5f:1d:40:40:fe:52:0f:
                    36:28:24:c2:08:ff:68:a2:9e:23:77:2e:40:5d:c8:
                    f6:0a:80:e3:1b:0f:21:22:70:4b:a3:28:db:31:1f:
                    0c:42:dd:57:0e:1c:07:33:ab:66:8b:b5:df:53:36:
                    d9:b2:1d:dd:e6:18:05:98:f7:ee:ae:47:2e:cf:49:
                    c3:e3:ec:63:de:d2:95:35:36:af:a1:85:19:95:8e:
                    61:1b:ac:e1:f2:63:a0:5a:1d:43:cf:39:c5:6a:2f:
                    ce:12:d6:60:16:cf:5c:9f:ed:a7:56:48:43:5f:ef:
                    68:d8:48:cd:bb:4d:b2:78:25:7c:71:05:6f:cb:0f:
                    3d:7b:27:ab:12:f0:53:b0:22:ca:4e:3b:6b:da:35:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:11:56:4B:A9:3D:1D:F2:11:81:27:17:5C:45:48:CA:A1:AB:89:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7d5d9018-e952-3dc5-a7f5-8fa28ce0a03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:e9:a9:3f:1a:65:b1:d9:b9:3b:08:52:5d:1d:e6:5c:17:
         cb:0f:bb:a4:d8:82:bb:6e:b3:ad:5d:a4:f7:c4:fd:30:c6:c3:
         bc:26:6d:b7:3e:8f:25:09:c8:f9:97:38:a2:32:87:92:0d:0a:
         75:c3:78:a4:94:84:2f:f8:81:66:43:b4:f4:ab:b5:28:93:04:
         7e:6d:cf:16:e4:6d:cb:68:b5:04:81:71:80:85:41:83:c9:e1:
         70:94:ae:c8:e5:e2:de:f5:ba:e6:98:c1:2e:58:17:e4:bf:06:
         4d:8d:33:47:35:4a:fc:0e:20:81:a8:68:9c:05:90:a2:ac:ba:
         f0:85:2b:bd:a9:89:2c:12:b7:fa:e7:ff:51:d8:65:01:1e:43:
         c8:8e:74:48:30:0a:64:99:52:f3:81:34:9f:83:e2:70:0d:50:
         af:96:f3:05:ff:e3:18:c2:11:8a:be:9b:72:8e:51:28:31:79:
         f2:8a:3e:98:03:d2:f9:d6:d7:e6:a3:88:5c:69:f0:b9:5d:4c:
         22:12:d2:e5:4b:0d:1c:97:7d:9b:b0:18:22:7d:f5:88:1d:11:
         67:07:39:32:8b:3b:4d:82:37:34:8b:63:19:d1:f6:48:d4:32:
         c3:cb:b1:37:d9:1c:e0:dd:8d:db:19:2c:4d:8b:f4:ea:aa:47:
         6d:7f:19:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:41 2024 by rpki-client on console-fra.rpki-client.org