Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
File:                     84dfef13-acc8-32a2-b63e-97387a8dda92.roa (raw, json)
Hash identifier:          MNCjdtEl3w8zxMFzHpUGDAMoqD7fYWuWecLgDTb46ts=
Subject key identifier:   8E:32:DB:58:17:72:50:A1:95:8F:C6:48:42:5A:5D:B6:DE:84:31:22
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DF2F465294A42DD58C3A1800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        207.219.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:46:52:94:a4:2d:d5:8c:3a:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=389b22f9-4726-4337-b54a-dbd12e2c0cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:09:9e:02:f1:c9:97:64:ce:75:39:84:48:
                    12:69:40:a9:64:e8:4c:0e:3f:f8:64:3c:5d:67:7f:
                    a6:c3:5d:62:df:9a:36:9c:0e:94:1f:44:19:08:68:
                    77:91:84:0c:cd:f3:32:ff:dc:df:ed:5a:91:d9:0b:
                    f3:fe:42:87:c8:1e:a7:a4:11:c9:bc:8e:b3:f0:72:
                    49:23:f1:01:35:8f:e4:59:8e:f1:7a:c7:a2:f9:03:
                    b0:b9:5d:0b:5b:d7:8f:bc:81:de:c5:8e:ad:dc:2e:
                    09:60:03:3f:6d:44:71:13:76:10:d4:fa:87:cb:36:
                    c6:10:78:65:3a:2b:1d:8e:1c:bb:7d:03:3f:ad:fa:
                    45:f2:ed:db:4a:df:1a:a2:65:bc:8d:3a:d5:c4:b0:
                    3e:d1:97:1c:57:24:6f:eb:ac:f1:ff:5d:13:e7:0c:
                    cc:19:f6:56:1f:72:fc:92:41:08:b3:41:f9:8c:59:
                    bb:16:63:36:a0:df:18:0e:72:57:ba:e5:7c:7a:d4:
                    be:17:15:27:37:80:8d:f8:cb:32:02:2b:66:09:7d:
                    80:42:42:7d:e6:b7:f6:03:4e:ab:c5:80:34:96:02:
                    45:93:c5:4c:fc:61:ad:b6:10:fd:f6:c1:b0:34:33:
                    fc:1d:71:5a:aa:6d:be:99:8a:46:35:74:be:08:2c:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:DB:58:17:72:50:A1:95:8F:C6:48:42:5A:5D:B6:DE:84:31:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/84dfef13-acc8-32a2-b63e-97387a8dda92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:07:70:31:b3:2c:d8:d6:92:84:1d:d8:00:ff:42:d4:b0:a8:
         be:25:61:84:cc:38:b6:5f:78:a7:ff:1e:15:8d:58:9f:25:67:
         e2:a1:8d:c0:a0:0f:c0:5e:1f:e3:3d:7d:0f:25:7e:bb:30:15:
         00:bc:fe:25:90:fb:36:39:19:24:e3:9d:6a:d9:7f:6f:4c:f8:
         42:fa:3d:04:b5:a3:f9:71:aa:1b:63:3a:cb:f1:50:e5:b3:02:
         f5:b3:46:c0:9a:0f:48:6b:6d:ae:91:58:eb:8e:43:e6:90:2f:
         92:95:ca:bd:3b:b3:aa:54:32:ab:c2:f3:7f:62:a6:8e:40:ff:
         ee:47:d3:31:3c:d9:99:7c:86:f8:5b:f9:68:01:71:5c:82:02:
         64:a2:b6:76:55:84:cc:38:d3:83:f8:7d:89:07:36:7e:31:ab:
         91:c7:75:3a:8d:74:de:e5:91:93:b6:00:3f:6d:a5:6f:4b:43:
         f3:fb:d5:77:a1:aa:87:73:2c:ec:11:50:cf:d4:66:6f:65:2f:
         ed:95:83:27:1c:3f:29:4e:f6:00:1d:2a:26:b7:6b:83:5c:5c:
         51:a6:7f:4c:f6:38:cd:ad:12:e4:6a:f6:93:3d:24:76:99:4a:
         75:e0:50:08:6c:66:4e:7a:bc:b9:bf:4c:22:8e:1a:56:7f:2e:
         ff:7c:37:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:29:17 2024 by rpki-client on console-ams.rpki-client.org