Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
File:                     2a3e600a-538a-31d1-bf46-d544767ed9c9.roa (raw, json)
Hash identifier:          eOzglkX5HrBEc1ZXWSXnvRVjo4fmRywT1lUtKPOXte0=
Subject key identifier:   AA:DF:7A:07:21:53:E0:CD:D6:0E:B4:13:C8:72:C9:08:A5:41:18:97
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584795169323F23EB7762F3F9B40
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     48254
IP address blocks:        67.213.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:93:23:f2:3e:b7:76:2f:3f:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=1248c97b-c14a-480d-b1c2-6c3a5fc77bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:be:29:5e:f8:73:16:19:ef:3a:1a:0b:78:
                    ef:d4:3e:30:15:62:10:d2:78:b8:1a:09:6f:18:67:
                    d3:b9:dd:82:2e:ef:d5:eb:00:74:95:72:1a:f4:4d:
                    81:ef:7c:89:ac:17:47:a7:63:53:51:8f:f1:03:42:
                    b5:97:ba:17:df:b2:4a:ca:17:e3:6a:05:cf:75:67:
                    37:0e:53:fe:2f:86:7c:ca:78:6a:e7:62:89:b6:76:
                    da:01:04:0d:0a:64:3b:54:b4:bc:f4:0c:9e:eb:bf:
                    22:f4:10:6a:62:d5:61:08:31:44:a2:36:c2:67:ed:
                    75:1c:71:27:3c:b4:00:14:a4:c4:ce:21:19:64:d8:
                    0b:18:75:2c:4a:21:cc:5d:53:22:b9:41:9f:76:07:
                    cf:37:d2:78:ca:ff:84:0d:cb:af:52:ee:0a:7b:b4:
                    67:6c:db:dc:48:f0:fa:fe:40:5e:2f:ed:e6:45:9f:
                    c7:93:45:73:ab:f8:d8:34:07:3a:4c:84:20:44:a5:
                    8f:42:bc:13:fb:1e:da:07:55:0e:e3:49:09:a5:bf:
                    4c:22:4a:81:3c:9b:fb:f4:04:93:ea:70:c6:b9:37:
                    8d:a6:29:55:dc:66:85:73:1a:99:26:eb:52:05:61:
                    76:cd:1b:44:dd:22:19:e6:1a:15:75:3d:e3:e1:1d:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DF:7A:07:21:53:E0:CD:D6:0E:B4:13:C8:72:C9:08:A5:41:18:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/2a3e600a-538a-31d1-bf46-d544767ed9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:99:ba:6b:88:5e:b6:81:65:47:a7:42:c8:78:5f:be:27:c4:
         cc:84:b6:b1:15:85:7b:ff:c7:a1:68:d5:b9:66:c9:08:6e:7f:
         4c:37:29:b8:ca:a4:fb:d7:32:3b:95:aa:d9:a5:e8:eb:1a:89:
         a8:3c:e5:c7:57:78:df:db:15:74:03:91:d2:f1:18:89:98:5d:
         e1:c4:2e:89:88:37:ef:d5:ff:e8:2b:d5:84:c3:94:29:14:ec:
         08:b1:d4:04:8c:60:c5:ed:48:78:42:be:17:3d:4a:01:7c:71:
         30:de:2c:67:c5:53:3f:96:71:a6:06:10:10:ec:f6:a4:80:e6:
         43:9f:2a:b0:2a:4e:3b:49:93:66:3f:b8:57:fa:e9:ca:86:ac:
         73:b8:9b:43:bc:1c:e6:64:84:2e:bf:77:66:11:d9:6e:c3:0d:
         ba:9c:e2:cf:8e:54:d1:f3:98:65:24:6e:97:09:38:40:ec:da:
         4b:61:a9:cd:5e:d1:d0:12:e1:87:fd:68:8a:ad:c6:a5:4a:c4:
         b0:ad:b4:80:71:50:af:17:26:fb:90:d4:0e:03:fe:ca:f2:90:
         e3:4c:d6:09:7d:3b:bc:c5:b9:07:44:93:27:ec:1b:44:5a:a5:
         07:a6:5d:79:d2:33:67:6d:cc:95:6b:8c:55:09:d2:93:4e:f0:
         79:c1:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:14 2024 by rpki-client on console-ams.rpki-client.org