Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
File:                     ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa (raw, json)
Hash identifier:          S4P5rT5E8zkP8bJKWwfGjgM1aKHho3pIypF/DuSZZaM=
Subject key identifier:   48:00:CE:FD:E7:B9:DF:E5:2F:1F:B3:88:12:F2:BD:F9:A1:0D:59:CE
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858473D25EC7F61EBAC3B382A3080
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     21821
IP address blocks:        216.255.100.0/24 maxlen: 24
                          216.255.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:ec:7f:61:eb:ac:3b:38:2a:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=61a6e3bd-17b3-4a08-a0ba-c99ce6fe7d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:ee:66:5c:f7:c9:d9:c0:cc:9d:61:76:30:
                    dc:ba:49:66:bd:c3:76:03:65:50:4a:c0:b5:76:4c:
                    39:25:c6:2d:ce:9a:53:2e:a3:cf:63:40:26:72:69:
                    fc:38:0d:c2:25:94:13:06:ff:0b:7d:9c:09:74:5f:
                    ce:60:72:a5:13:6a:54:16:ad:1f:45:3c:6f:04:a3:
                    78:3d:95:52:87:99:ed:4c:51:45:96:ed:8a:65:ec:
                    59:37:dd:1f:db:d0:1b:98:b7:fd:86:8f:69:db:ad:
                    af:53:8f:5a:c6:4f:6a:32:00:58:5a:50:62:0e:a3:
                    52:46:95:d9:1a:a8:63:e1:8b:a1:9e:a2:7e:f1:c4:
                    dc:23:8e:0b:10:b8:7a:05:0e:62:db:f9:f4:e1:f2:
                    02:4c:cd:d5:eb:1e:51:a3:32:d5:06:09:3b:dc:aa:
                    b2:83:17:c6:02:24:76:67:3c:3f:bb:b5:d4:75:7d:
                    24:80:91:3b:ce:61:c2:11:11:dd:7b:41:3e:1c:5f:
                    01:64:af:8c:e5:e1:55:e1:95:8b:3a:a9:bc:e9:d6:
                    94:b0:d1:f9:d2:b1:75:01:18:9d:a5:39:40:c5:20:
                    ad:fd:7a:d6:40:e8:fd:f9:d6:a2:87:a5:c1:49:65:
                    9d:f1:3b:63:cf:e4:c6:33:74:b2:7b:ae:bb:18:d4:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:00:CE:FD:E7:B9:DF:E5:2F:1F:B3:88:12:F2:BD:F9:A1:0D:59:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/ff31b7a2-5705-3d73-9ef9-3e064514bd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ff:f5:10:48:53:58:b1:2c:ca:48:59:64:dd:f9:4a:25:f0:
         66:82:8a:26:e2:81:61:83:0b:b9:7c:76:df:60:11:74:c3:47:
         d9:7a:a7:de:91:c4:9e:e0:56:e0:fd:e6:5e:3a:d1:28:6a:e1:
         84:0d:47:11:e6:ee:55:af:bb:79:6a:27:5d:10:39:fa:56:fe:
         71:9d:fd:b7:11:e1:7f:44:de:8e:30:24:6d:2d:7d:a3:42:92:
         e4:58:10:3b:7b:1e:e2:a8:57:5c:b3:0e:b5:55:f2:55:f5:a6:
         fa:d4:d5:3c:5b:32:c9:73:7b:7b:ed:8f:28:81:1b:39:8d:53:
         a4:1d:e4:8b:4d:0a:5a:bc:51:d6:44:0c:0a:e4:74:d4:f9:6c:
         08:78:ab:4a:34:58:86:0d:73:81:0e:04:41:39:b0:fb:03:29:
         6c:31:12:c0:d7:d2:8b:ef:91:fd:7f:ba:5c:c5:8a:03:52:2d:
         a6:30:e3:08:f4:6a:bf:bc:9d:47:41:1e:4e:ed:95:39:b7:47:
         b9:4d:74:74:ce:f0:a7:02:6a:24:79:07:b9:bb:ab:cf:1c:2a:
         fc:75:d5:cf:32:a3:7c:eb:40:34:08:67:35:92:7c:a7:c1:88:
         6b:cf:3c:0c:03:cb:1b:03:96:9d:3e:aa:45:b6:77:b3:88:fd:
         48:f8:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:32 2024 by rpki-client on console-fra.rpki-client.org