Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2af306bd-a49b-3a68-8e93-98d30565d9af.roa
File:                     2af306bd-a49b-3a68-8e93-98d30565d9af.roa (raw, json)
Hash identifier:          J95/QGv6uhWxbf6d1hB9QFefLnqtNlsX71I0vqtZxOY=
Subject key identifier:   E8:1A:57:A8:99:BB:AB:D3:EB:7B:29:DD:4B:E7:73:F5:63:82:B7:F8
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285847B6958913B4BECD375DCDE5C0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2af306bd-a49b-3a68-8e93-98d30565d9af.roa
Signing time:             Wed 30 Oct 2024 12:58:22 +0000
ROA not before:           Wed 30 Oct 2024 12:58:22 +0000
ROA not after:            Tue 28 Jan 2025 13:58:22 +0000
asID:                     3223
IP address blocks:        216.185.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:95:89:13:b4:be:cd:37:5d:cd:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct 30 12:58:22 2024 GMT
            Not After : Jan 28 13:58:22 2025 GMT
        Subject: CN=681d5310-8ef2-450d-87db-5abd0cacce07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:15:cd:f6:12:dd:7d:98:e2:d2:8c:b7:74:
                    38:71:e4:ac:50:a7:51:2b:26:59:cd:0d:ff:ba:69:
                    0a:f3:2a:29:e8:1b:f2:37:42:44:82:cf:8f:b3:0a:
                    13:42:37:4f:c0:c8:a8:30:1a:26:19:3b:14:ac:f3:
                    f2:66:02:33:ce:9d:0d:98:c1:4a:9a:db:62:c3:88:
                    74:fe:68:98:b1:9c:ba:bb:78:84:02:0c:31:fe:fd:
                    7b:70:d8:51:c3:d1:f4:77:16:ff:2d:51:29:89:93:
                    de:1b:14:25:5e:62:fc:8b:f4:37:7c:95:ef:92:bd:
                    68:8c:6f:e1:14:e3:c6:41:e1:e9:f3:7c:70:b8:ea:
                    a3:b9:0e:47:0f:90:c1:4f:e0:5e:5c:58:62:e5:b1:
                    e7:72:2a:a2:ba:5b:93:89:59:0f:cf:bf:cc:a4:ef:
                    23:64:bd:75:c6:cd:49:ef:66:8b:2e:f1:60:27:c2:
                    37:4a:66:88:84:a0:30:24:aa:31:2f:32:ea:47:aa:
                    5d:d8:3f:c6:3a:9b:84:46:af:26:14:df:cb:13:f5:
                    88:6f:18:90:58:a2:00:9c:ff:4e:82:83:a6:ba:e5:
                    85:a0:7f:21:dc:b9:36:6b:ad:9a:44:95:72:ff:31:
                    c7:ec:9b:a1:30:0f:e1:d8:34:05:81:5a:28:1d:31:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:1A:57:A8:99:BB:AB:D3:EB:7B:29:DD:4B:E7:73:F5:63:82:B7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2af306bd-a49b-3a68-8e93-98d30565d9af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d5:ff:ea:27:49:3f:08:2a:ca:e2:b2:bd:23:8f:9f:e8:50:
         98:5b:f9:06:53:0c:1f:9b:e9:85:54:64:45:6a:b7:b1:67:a3:
         5c:48:d0:01:83:eb:82:5d:b2:86:8b:8a:10:5f:5c:f7:70:70:
         4c:47:ff:da:88:1c:e1:96:7f:d2:6b:ea:dc:07:35:7a:67:12:
         c7:fe:1a:04:6b:6f:d4:4e:1a:00:96:d2:9d:65:c1:29:0a:c5:
         11:e4:ab:8d:66:b5:e6:75:a4:19:5e:60:73:2e:b9:66:39:64:
         d8:86:e3:86:50:d0:af:6d:81:1e:9e:88:63:d1:5f:35:1b:29:
         3f:d2:de:12:2d:d0:89:28:f3:87:7c:ea:ff:8b:33:14:46:a6:
         42:40:0e:9b:d2:7a:1f:87:5a:db:e5:07:3e:c1:37:d6:0a:ca:
         e8:34:84:f9:b5:49:e3:b1:5f:ea:ab:30:4c:f2:a7:3e:88:9c:
         7e:af:3b:ff:8b:8b:e3:d5:ac:1c:b6:4f:6d:15:23:bd:20:c6:
         f2:18:6f:dd:32:29:2c:96:d6:09:f2:16:1c:ce:2c:8c:bf:b3:
         76:47:17:5c:4c:87:42:89:7c:56:5b:b9:c3:1b:48:45:9f:1b:
         92:9e:a5:9e:3c:8c:19:7f:d7:d6:d1:3f:b8:74:01:02:58:cf:
         b7:6b:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:20 2024 by rpki-client on console-ams.rpki-client.org