Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa
File:                     eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa (raw, json)
Hash identifier:          CbE0FBvYYgT66AVH5NKmVaGntCxhjN9dnRlQkVTHltE=
Subject key identifier:   29:AC:E7:A4:82:4E:F5:51:94:F0:09:38:44:E1:54:64:A9:EB:74:84
Certificate issuer:       /CN=f25c48f2-c7df-4c6b-b214-2e741959995d
Certificate serial:       010D0C9F432858479DE35402B701FF62AFD7814C
Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa
Signing time:             Mon 21 Oct 2024 16:39:54 +0000
ROA not before:           Mon 21 Oct 2024 16:39:54 +0000
ROA not after:            Sun 19 Jan 2025 17:39:54 +0000
asID:                     398427
IP address blocks:        216.83.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:e3:54:02:b7:01:ff:62:af:d7:81:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d
        Validity
            Not Before: Oct 21 16:39:54 2024 GMT
            Not After : Jan 19 17:39:54 2025 GMT
        Subject: CN=fb4192ab-8e1a-4738-a689-0cb28ba756d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:2a:b0:7b:f9:ef:7b:b0:74:b3:5c:3f:8f:
                    12:98:2a:ea:04:7e:f5:eb:44:a4:24:5b:3c:3c:fe:
                    70:cd:d9:4f:b3:76:26:e9:ce:27:99:06:04:dd:e2:
                    f9:84:1b:30:97:22:e5:a3:55:77:5b:08:f6:9c:35:
                    b9:46:99:15:8f:84:e0:85:3c:f3:79:88:1d:05:5f:
                    70:3e:b1:0d:44:20:94:b2:cf:47:6e:c7:7f:b1:92:
                    6f:8c:22:f7:8c:8c:cf:14:2d:4f:45:53:0f:23:2e:
                    65:51:50:56:06:8d:8b:2c:a2:cb:9c:4f:62:f5:71:
                    58:2d:54:0f:a9:7a:cf:f4:78:20:bd:13:6d:60:7f:
                    b8:ad:c1:ba:1c:82:00:a7:7a:a2:e8:10:7b:8d:5f:
                    78:a0:30:17:a6:b2:89:a9:cb:b2:da:db:28:3d:42:
                    16:14:25:3f:dd:4c:11:74:84:84:6a:0f:d2:e8:bb:
                    cb:d2:e5:c4:05:b8:95:ce:f7:ec:e1:7e:88:1f:88:
                    37:c3:0f:bd:cf:02:90:0a:19:50:e3:5b:3a:44:ec:
                    f2:61:20:9d:06:2b:7f:f0:c0:d0:4a:fc:9f:3e:38:
                    ad:c0:ab:04:5d:58:81:10:59:a3:5f:2e:05:01:a1:
                    cf:31:1f:ac:9c:79:62:17:3f:73:5c:4e:e0:2e:92:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AC:E7:A4:82:4E:F5:51:94:F0:09:38:44:E1:54:64:A9:EB:74:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/eb5dce2a-d8e2-3c20-8421-dc86d8410daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl

            X509v3 Authority Key Identifier:
                keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:d7:ec:60:02:43:75:80:5f:bf:64:62:89:42:42:1c:47:
         eb:2e:94:6d:26:a1:90:b8:b0:f0:c9:d6:97:52:6f:68:20:eb:
         10:1d:de:c3:f1:21:82:fb:60:0e:d1:d2:25:c7:1b:d1:f9:5b:
         2d:8e:2a:66:ca:85:1e:83:83:e4:d9:5b:d6:4a:f9:49:7b:f4:
         c0:c4:ab:2b:0f:e7:84:27:f2:e7:e8:44:06:23:65:02:5d:10:
         42:06:08:bd:c4:4d:ed:01:43:10:2e:80:33:08:c1:96:3b:34:
         70:7d:e8:fc:26:cd:2f:8e:c8:b5:29:5c:08:a2:a7:82:81:0d:
         1b:88:6a:33:1e:f6:a7:48:62:48:23:1c:96:d1:d4:ff:26:9f:
         26:8e:ce:cf:5a:44:66:8a:03:bd:13:a9:c3:fa:58:0c:35:93:
         a8:28:bd:ac:34:ae:71:76:b7:30:cb:ac:c0:84:1d:8c:f9:ab:
         af:63:60:a6:b6:2a:3f:54:f1:73:de:55:bc:36:a9:eb:61:da:
         07:13:12:95:8e:90:18:e4:55:63:cd:7b:0b:d7:44:40:90:d8:
         d0:f2:6b:d4:16:d8:bb:0a:08:22:a4:29:d1:7d:cd:eb:e8:89:
         2a:38:07:0b:b9:8d:b8:fd:cb:b5:e5:5d:29:a0:4b:11:a9:07:
         e2:d3:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:44:24 2024 by rpki-client on console-ams.rpki-client.org