Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ba48fa77-02cf-3cfd-b4b2-b8f5b4f09bfa.roa
File:                     ba48fa77-02cf-3cfd-b4b2-b8f5b4f09bfa.roa (raw, json)
Hash identifier:          6RKLPPu1hgV3YqI5ZX3oEMJGfiVYaXsPJG9HzJB7FLg=
Subject key identifier:   A5:05:77:46:62:30:FB:7B:94:92:83:EA:95:DC:13:B3:EB:91:E8:79
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858477BF6663EFA71EA39D6335780
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ba48fa77-02cf-3cfd-b4b2-b8f5b4f09bfa.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     174
IP address blocks:        216.24.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:66:3e:fa:71:ea:39:d6:33:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=5b4911e5-7fe6-44c4-80da-5a1e5076dab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:af:d9:03:6f:6c:23:fd:e8:a3:58:af:f1:
                    0c:5f:dc:52:be:ff:dd:d9:13:71:c1:ae:fc:c1:dd:
                    06:f1:44:71:d2:9e:a5:dc:fb:39:f3:99:bd:87:cf:
                    35:a9:43:b0:93:ff:47:d8:89:cd:d8:c7:7f:91:cf:
                    b6:b0:e5:74:0b:53:35:92:53:f2:3b:e2:fb:ee:75:
                    a5:e8:13:f8:8a:b4:db:52:ce:19:e1:64:ee:f4:ac:
                    02:34:41:46:44:a4:35:f1:42:39:c5:01:6e:02:76:
                    6b:c5:b0:12:1b:4e:67:41:ff:dd:3e:60:32:9c:b4:
                    7d:41:56:b4:33:f8:83:e2:e9:46:39:99:47:0d:9a:
                    fa:a8:e0:34:40:15:93:3f:b6:3e:f3:81:f5:31:e0:
                    32:c9:2a:2b:95:4e:a9:fe:60:cb:f5:08:40:04:45:
                    81:52:26:ad:84:e6:74:5b:42:8a:9f:2b:9c:40:8f:
                    d9:74:17:37:8a:68:08:e7:b6:6f:5d:9f:8e:d0:01:
                    3c:99:1f:52:bd:93:bf:a6:09:40:e2:7b:55:a4:67:
                    a1:f7:0a:34:73:ed:52:54:78:f3:f8:c9:11:4c:9c:
                    05:64:b3:a1:69:93:31:3d:c5:50:15:16:0b:6b:0c:
                    8c:51:50:7c:89:74:da:72:a7:35:45:11:78:93:33:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:77:46:62:30:FB:7B:94:92:83:EA:95:DC:13:B3:EB:91:E8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/ba48fa77-02cf-3cfd-b4b2-b8f5b4f09bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:06:51:05:47:6a:cc:65:cf:3b:1f:d2:62:90:6c:e5:90:
         9f:2f:97:9a:e0:07:da:52:36:2c:26:2f:b6:69:98:e9:23:32:
         11:43:52:4b:49:3a:3b:63:9d:78:10:b2:00:fa:a7:49:2b:e7:
         84:83:69:8b:fb:11:34:dc:2e:97:7e:20:a2:cd:aa:e4:37:29:
         4f:e3:b2:0d:82:dc:0c:bd:fc:6c:a4:a9:f0:8b:05:9c:a5:d9:
         aa:cd:73:f0:b8:c1:fe:99:d4:04:f4:85:05:05:dc:05:9f:5f:
         7f:38:d6:e5:52:83:3a:97:00:7d:9c:d1:5d:73:bb:9c:3f:de:
         23:71:bf:b1:2c:54:a1:c9:3d:e2:26:0c:73:4b:03:31:75:26:
         58:f4:97:fd:a1:c5:ab:05:e1:47:88:1f:44:b5:07:b6:ec:fa:
         08:76:02:27:a4:da:fd:1f:ac:81:5d:b6:5f:20:a2:f9:25:69:
         40:49:c7:66:20:9a:dc:18:c5:9f:c5:97:75:83:d4:7c:cf:0b:
         f6:95:1a:2a:d7:ef:5c:40:8d:d2:a4:aa:a6:67:92:20:19:a2:
         56:91:87:01:58:7f:57:3d:5e:f7:af:a4:fd:f1:45:d9:7c:9a:
         de:bf:97:ff:09:0e:5a:7a:6c:14:ec:23:82:37:b7:33:77:27:
         57:69:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:01 2024 by rpki-client on console-ams.rpki-client.org