Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8286bedb-f5a1-3552-9419-7b4a3f6a93e2.roa
File:                     8286bedb-f5a1-3552-9419-7b4a3f6a93e2.roa (raw, json)
Hash identifier:          YTPBDm1gZGr7wUeAIL2UH9I4t1stcbj1QpZ7mX9goBM=
Subject key identifier:   91:38:4C:86:8A:33:C8:C9:AC:34:B4:20:09:CE:4C:AE:25:1C:BF:6C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858476C9DBF9F23F3E21FB9A2DB80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8286bedb-f5a1-3552-9419-7b4a3f6a93e2.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     211192
IP address blocks:        216.122.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:bf:9f:23:f3:e2:1f:b9:a2:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=79a9eb76-6951-40ba-9527-2182b80f5a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:20:1d:f3:5b:34:73:db:39:39:78:3e:c3:
                    2d:2f:e0:45:57:2e:94:1b:3a:bd:b1:6e:46:2c:af:
                    8e:38:31:cd:c5:08:95:6b:6b:ef:b7:70:26:cf:a4:
                    81:b8:1f:5f:85:89:be:77:ba:2c:9b:2b:d3:a5:4e:
                    9f:c7:15:25:13:1d:8b:28:40:41:6d:b9:1b:84:29:
                    c6:1e:75:2f:18:d1:d2:93:bc:e5:42:08:d0:b8:ab:
                    98:fa:38:71:cb:c2:60:9f:b4:77:91:87:3b:cd:68:
                    5c:94:ac:d1:61:bc:4a:32:a2:a1:c3:c0:b4:90:0c:
                    69:b2:08:61:24:f7:05:c0:e8:4d:7e:06:91:fe:db:
                    69:53:49:3d:f2:a4:f9:b0:af:35:67:fa:e6:72:88:
                    0a:16:51:94:26:41:7a:a9:ce:ec:f0:59:5c:f3:99:
                    31:23:83:69:af:6b:67:8b:3c:3d:6b:ad:d7:8a:8a:
                    47:0c:8f:91:74:83:96:b5:bd:b3:5a:8e:9a:e2:cf:
                    c6:b5:76:71:99:14:3d:6d:e9:df:6c:17:d2:55:4d:
                    a6:18:b4:68:7c:e0:2a:ec:6d:23:ea:58:ae:0b:04:
                    90:9f:03:48:39:a2:86:85:63:76:bf:d1:74:4b:8e:
                    62:29:c5:3c:cd:2c:c1:fa:02:2c:d2:d3:88:fd:00:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:4C:86:8A:33:C8:C9:AC:34:B4:20:09:CE:4C:AE:25:1C:BF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8286bedb-f5a1-3552-9419-7b4a3f6a93e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:97:a7:29:f1:40:c8:ee:6f:43:3a:4c:64:00:57:b9:d9:2f:
         b2:45:75:f2:6b:94:81:5f:64:c6:da:f4:ec:b4:e1:21:a2:54:
         c1:82:ab:29:cf:ca:98:73:5b:ce:db:a0:f4:14:7f:cc:15:86:
         cd:4f:4e:ca:27:e0:6d:e7:3e:3f:65:b0:9b:85:80:c5:e0:54:
         34:82:d8:a0:84:90:1c:19:34:20:77:08:2c:e4:b4:ab:d3:05:
         6a:a0:ba:61:bf:48:a6:ed:be:5c:92:42:65:1f:5f:87:4d:c1:
         83:ec:a7:6d:de:1e:d8:dd:07:ab:42:91:a6:cb:ee:05:78:40:
         1a:7c:97:0e:b8:15:f6:9b:3e:06:b2:9e:1d:99:78:3c:3f:f6:
         a0:cb:03:1f:17:95:f7:98:d5:46:48:8b:22:a6:50:91:2f:fe:
         b1:b1:a3:cd:f0:ad:51:1e:cb:fa:cf:df:9b:d5:c4:24:73:c9:
         d6:0d:57:43:96:03:e4:d1:14:92:b6:60:c0:5e:4a:79:7b:26:
         a6:a7:c3:a9:37:02:9c:b7:c9:0e:69:75:3e:47:ed:34:86:79:
         03:ab:44:08:be:39:6b:fd:0a:a3:d7:32:d3:a0:48:3e:fe:33:
         73:d0:f1:ab:0d:c9:58:24:35:96:7d:8c:0e:99:96:93:a5:4b:
         49:46:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:29 2024 by rpki-client on console-fra.rpki-client.org