Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
File:                     0cf7be41-62e0-3469-a068-cbd4f7928764.roa (raw, json)
Hash identifier:          8x7GHGpV4Yiq2lFAacCywz9VUMRqpySBqTN5UtKE76E=
Subject key identifier:   AF:8F:D2:8F:63:58:EB:22:B7:84:42:BB:EF:ED:DA:8C:B5:4B:E7:43
Certificate issuer:       /CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
Certificate serial:       010D0C9F43285847DF2F50BFDE76459EB831F500
Authority key identifier: 56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     11666
IP address blocks:        216.168.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:50:bf:de:76:45:9e:b8:31:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eac16a1-7e9c-4f8e-9e2c-913f3a675d18
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=38067999-d2d8-4b58-9485-cb2e37350817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:88:c0:f9:d7:6f:3c:b0:2b:a8:a7:53:7e:
                    a0:1e:76:4c:2e:64:9f:1f:18:43:3d:de:91:11:7a:
                    b5:45:ac:3d:e8:13:fb:9e:25:9d:07:ac:83:bd:9b:
                    94:c5:4c:5d:9e:16:e5:ed:56:77:53:aa:98:60:0f:
                    89:54:78:6e:84:4f:c5:f0:b7:12:37:e3:9e:8f:fb:
                    d3:42:ca:6c:3c:1a:25:e2:d6:8b:79:2d:24:77:27:
                    58:03:cb:56:55:16:1b:1a:cb:99:08:6f:1e:d7:35:
                    8b:31:d2:2b:11:42:c8:ad:49:df:85:9d:4d:31:9f:
                    6f:fb:5a:3d:78:89:0e:4a:df:3d:37:71:6a:90:b8:
                    67:4f:38:c3:21:a4:34:10:15:04:32:39:53:38:fd:
                    77:b6:ba:a5:03:d9:05:5e:7e:56:2e:a7:8e:22:cb:
                    7a:38:d3:d4:20:4e:00:88:b2:ae:d9:bf:62:17:5e:
                    dd:80:d5:2b:c1:ac:eb:d1:68:e2:30:14:90:79:26:
                    29:1c:76:04:07:47:a2:4c:54:26:cd:bf:9c:07:92:
                    31:2b:64:02:c4:d6:07:c2:7f:e9:89:6d:8a:ba:9d:
                    2c:63:29:e1:fa:30:fb:43:fc:9e:22:84:aa:ed:b7:
                    f3:ec:25:72:ed:8b:ae:87:5c:74:42:55:eb:0e:af:
                    05:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:D2:8F:63:58:EB:22:B7:84:42:BB:EF:ED:DA:8C:B5:4B:E7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/0cf7be41-62e0-3469-a068-cbd4f7928764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.crl

            X509v3 Authority Key Identifier:
                keyid:56:83:24:37:A6:0D:F4:93:34:1D:6F:6D:30:C2:9D:0B:08:CE:72:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4eac16a1-7e9c-4f8e-9e2c-913f3a675d18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c8:d0:9c:38:7d:c3:93:28:cf:da:74:4c:be:f0:72:95:0f:
         01:e6:3a:21:e1:a2:9d:c8:3b:63:23:d8:8a:cb:80:45:31:74:
         1b:0f:29:73:9b:2c:bb:30:00:bf:42:fe:70:7d:c1:20:e2:ae:
         e8:48:1f:83:2f:39:0d:46:53:81:95:3c:73:1d:55:55:02:2f:
         bd:ef:ec:0a:8e:94:fe:8f:0f:8c:b8:c0:cd:c2:fa:ae:b0:28:
         9d:63:df:5d:00:36:fb:15:76:60:d0:5d:a4:f4:25:f6:d0:6d:
         36:ba:b4:2b:f1:38:1e:70:c9:9b:7c:14:b8:3c:5e:3d:66:13:
         b6:8b:56:f1:9d:6a:86:94:8b:6e:d0:b4:c7:80:4e:ca:11:18:
         ee:3b:6d:49:39:bd:33:b0:eb:f3:56:b2:1f:18:08:42:d5:f5:
         c6:f5:5e:24:1c:2c:a4:e3:fc:67:87:a9:57:55:59:91:a5:01:
         a0:c6:22:50:d3:14:f5:2b:25:47:05:21:4f:47:88:38:bd:5d:
         9c:05:d7:05:6b:42:e9:90:be:63:1b:d7:f8:f0:5f:50:e6:43:
         a8:c7:94:b5:36:e7:a5:29:f0:b8:89:19:18:1a:3b:cc:57:2e:
         9b:f1:bb:8b:3a:71:03:52:40:26:02:07:77:8f:52:10:b4:88:
         61:b3:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:13 2024 by rpki-client on console-ams.rpki-client.org