Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/919dea17-ea0f-305e-a1d1-a108a196f583.roa
File:                     919dea17-ea0f-305e-a1d1-a108a196f583.roa (raw, json)
Hash identifier:          qrhAZTUSW1nPlW/jC19RzDzTLeC2fzbk+lVn7ki/Dmk=
Subject key identifier:   37:2B:98:C3:D6:82:DA:03:A3:49:7A:4F:53:D0:C0:5E:6A:12:25:D9
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285847D08FD77DB5747A0AC8EDA300
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/919dea17-ea0f-305e-a1d1-a108a196f583.roa
Signing time:             Fri 08 Nov 2024 20:17:55 +0000
ROA not before:           Fri 08 Nov 2024 20:17:55 +0000
ROA not after:            Thu 06 Feb 2025 20:17:55 +0000
asID:                     29802
IP address blocks:        216.185.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:8f:d7:7d:b5:74:7a:0a:c8:ed:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov  8 20:17:55 2024 GMT
            Not After : Feb  6 20:17:55 2025 GMT
        Subject: CN=721d24bb-60c7-4550-b4cb-df23bf35fefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:9e:0a:2d:0e:96:d2:c2:61:2e:7d:4e:ff:
                    33:0f:3c:7e:02:ba:c9:ac:a5:0e:2d:df:6b:d0:fc:
                    c3:07:3f:97:28:26:e4:6e:bf:cc:32:d4:79:08:6c:
                    eb:5b:59:91:84:5c:78:36:f0:49:c0:e3:12:7c:83:
                    d6:ba:3f:ce:be:8a:65:9e:25:0a:7e:20:76:b2:82:
                    85:c6:05:99:1c:11:96:91:76:5c:bc:21:57:f5:ef:
                    52:6e:09:84:b5:84:4d:77:44:1e:e7:93:5b:74:3e:
                    89:35:e9:c8:83:55:c3:89:de:00:da:75:c9:d0:1e:
                    d1:3e:b1:a0:cb:bc:23:92:63:9b:af:9e:4c:3c:03:
                    78:3c:0d:b2:23:28:02:91:29:b5:1d:71:f5:5b:ea:
                    d4:c7:d0:cc:ee:77:7f:7e:46:44:70:08:5d:68:46:
                    ba:9b:38:d2:cb:eb:25:60:57:d2:7f:33:1c:05:5b:
                    71:3d:52:10:26:a6:f6:88:de:27:89:40:56:7b:be:
                    05:b6:05:69:cf:a9:d7:d1:9d:c1:87:a1:0a:2d:ef:
                    ad:62:7e:44:40:03:88:c1:e5:22:de:88:4a:7b:1c:
                    68:a6:c7:6c:1b:84:44:4e:f6:26:6f:56:87:77:f7:
                    f9:41:40:99:21:4c:3e:ad:c6:e0:30:2e:e3:3c:5d:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2B:98:C3:D6:82:DA:03:A3:49:7A:4F:53:D0:C0:5E:6A:12:25:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/919dea17-ea0f-305e-a1d1-a108a196f583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:82:af:c7:10:f0:7e:33:de:7e:f7:e3:3e:02:59:bc:fb:
         7f:ea:6d:8b:93:7e:27:b3:83:6b:52:39:49:02:6a:22:1d:5d:
         f9:72:e3:a5:f7:01:98:b6:fc:f9:45:79:cd:cc:80:08:55:0e:
         02:9b:bc:9e:be:ba:b0:f1:0c:e6:1d:52:ee:5d:0e:11:83:da:
         9a:93:8d:70:bf:9f:f5:3c:8b:89:df:88:d4:68:b2:0b:07:d9:
         0c:25:ba:f4:65:ce:90:36:ff:fd:fc:9f:0e:96:2a:15:27:b9:
         e0:d4:d3:49:f4:82:10:0e:0e:c7:48:71:80:86:c6:ba:54:64:
         21:ed:fe:9e:8d:9d:b5:b3:9e:71:54:28:25:ea:32:4e:04:92:
         6d:3d:d2:7c:8b:26:21:2a:9f:cc:e9:cb:cd:fa:a3:23:62:4d:
         8b:70:1f:f1:b2:63:80:74:58:ab:28:36:36:17:e9:f6:c0:72:
         58:f7:8c:dd:3f:20:09:c3:e0:4a:f5:bf:1b:74:80:38:98:5b:
         86:96:11:8f:d7:6f:8c:c1:fc:d2:e4:8f:63:ed:b0:08:f4:81:
         25:74:35:62:3f:0f:7b:8c:e3:4c:36:fc:97:7b:0f:44:a1:49:
         a7:06:33:69:d8:28:20:c8:1c:12:3e:d0:b6:56:59:ef:6a:71:
         7b:b9:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:21 2024 by rpki-client on console-ams.rpki-client.org