Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa
File:                     6f3eee94-4b98-3b97-a072-fe291ceb8692.roa (raw, json)
Hash identifier:          dOa1HqNr0GPW0nLl+PWlZgDXYOkXNM/cA1kPPqBXirM=
Subject key identifier:   15:40:B2:87:1F:1F:A8:21:1A:1F:EE:91:73:7B:E5:06:BA:0A:B3:17
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858477C48DBB346AFE0890BDF65C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa
Signing time:             Wed 09 Oct 2024 15:46:59 +0000
ROA not before:           Wed 09 Oct 2024 15:46:59 +0000
ROA not after:            Tue 07 Jan 2025 16:46:59 +0000
asID:                     5065
IP address blocks:        216.24.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:48:db:b3:46:af:e0:89:0b:df:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  9 15:46:59 2024 GMT
            Not After : Jan  7 16:46:59 2025 GMT
        Subject: CN=90bdd701-979f-4530-96cc-a9d412552506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:87:0d:48:e3:9d:e0:d6:41:73:21:02:63:f2:
                    b3:20:87:1a:84:eb:3d:98:fb:1d:f6:df:00:a2:57:
                    2e:bf:18:b9:98:30:7e:5e:04:07:91:fb:d3:31:ad:
                    c9:0a:10:44:ac:9d:f4:d6:5a:eb:8f:e9:59:c0:38:
                    b3:fe:9e:a1:4a:8b:df:f4:b0:d8:13:1f:63:de:7c:
                    d9:d0:c6:0f:be:d1:51:be:ae:3f:6a:49:96:7a:b9:
                    1a:a9:f0:f4:cf:b9:59:a7:1b:bf:d3:38:ff:5a:67:
                    1b:8d:39:b5:39:01:3f:90:2f:ee:ee:3c:be:89:0b:
                    5a:14:ac:dd:19:5c:62:c2:a0:ab:9c:78:d0:1e:34:
                    3b:e6:81:c8:83:00:12:ec:26:7e:05:0b:87:bb:50:
                    ab:b5:6a:bf:d9:2d:a7:de:15:c8:9b:09:2e:e9:a0:
                    04:35:2c:ab:95:48:77:01:55:16:d8:02:6c:6e:b6:
                    b1:34:b5:e7:0f:db:1c:7e:93:f7:54:7f:26:83:80:
                    ca:ad:d0:1e:b6:cf:55:14:d8:0f:ec:bd:f3:39:40:
                    f3:88:0d:c9:8f:cc:93:ea:f8:c4:3f:19:0b:53:66:
                    5e:20:94:d0:fb:d2:a6:0d:46:1a:6f:40:16:87:6c:
                    f8:7b:77:bc:db:ea:b9:53:e2:7c:58:ec:fb:12:d2:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:40:B2:87:1F:1F:A8:21:1A:1F:EE:91:73:7B:E5:06:BA:0A:B3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/6f3eee94-4b98-3b97-a072-fe291ceb8692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ce:45:2e:a2:93:76:90:1b:ab:f5:e0:cc:64:2f:39:61:4b:
         af:0d:9c:8e:8d:5a:c0:52:e1:9b:6c:50:57:ab:d6:43:c2:07:
         8c:58:3a:2d:9d:c7:3f:42:fe:ce:a7:c8:47:7a:76:13:06:45:
         6f:19:25:e7:ba:03:a8:b5:f1:d1:1f:72:bf:8a:30:9f:9b:93:
         eb:09:33:66:20:fe:39:ab:40:3c:8d:ca:15:90:43:e3:f1:9b:
         3d:ed:0a:46:db:7a:f8:87:fb:1c:89:ab:b9:09:b3:d2:2b:f2:
         2a:45:8f:15:2a:06:87:52:57:d2:79:11:3a:7a:e7:fe:97:3b:
         69:74:59:69:81:7c:9c:f0:45:74:14:55:31:87:f9:86:84:40:
         bf:da:1f:f3:bf:3b:36:f4:e2:79:2c:6a:5e:fd:2c:a6:dd:e9:
         f4:1e:c7:c2:2d:6c:e1:f0:b9:2c:cf:2b:b3:fa:54:2d:6f:c4:
         d9:95:a9:85:97:a0:ad:14:6a:8b:7d:d6:61:ee:a6:c8:fb:58:
         64:a7:d1:ea:ca:cf:b9:af:98:8b:03:6c:f4:01:1d:0b:23:17:
         df:b5:d8:f1:d1:8f:21:3f:09:ca:78:3c:7f:9a:a0:62:9c:dd:
         36:1b:03:5e:4a:90:b8:e0:ef:49:a2:f6:88:48:d1:0e:5c:b8:
         46:22:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:17 2024 by rpki-client on console-fra.rpki-client.org