Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
File:                     3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa (raw, json)
Hash identifier:          1i9Rkaz2zqOh7mn708dnq0TjxKokZvOIi0fD8y77Tt0=
Subject key identifier:   28:74:D8:AB:13:EA:43:1C:A5:E1:DD:C2:81:AF:79:EB:E0:DC:81:B2
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F432858472F308395ADF6729B518EED60
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     11260
IP address blocks:        216.104.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:83:95:ad:f6:72:9b:51:8e:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=644ecbb7-70e1-4c24-83d9-fd404f43b569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:ac:fa:97:e2:88:81:7e:2b:99:d5:eb:3b:
                    86:b8:65:ee:0c:80:a9:33:fe:72:32:44:1d:ac:5b:
                    c3:03:eb:c2:57:29:ef:d6:5b:dd:b8:3a:94:ce:8f:
                    30:16:3f:e1:20:d7:f8:c5:54:5a:7f:57:5c:ff:ff:
                    25:7f:6f:ab:54:2e:ff:09:8b:bc:01:38:26:ea:28:
                    40:06:50:0c:6f:ae:fa:6e:45:6b:62:df:83:60:93:
                    c6:97:1f:f5:6b:d9:27:ce:c9:fe:c8:14:59:1c:9a:
                    cf:ab:85:a5:bc:8b:94:34:6a:a4:96:b3:40:3a:df:
                    d3:ef:5e:fe:29:9b:79:72:6f:cb:f6:83:98:cf:9d:
                    36:19:33:a1:34:27:1e:c1:93:1d:ce:fd:29:0f:ef:
                    be:d4:c7:8f:63:0b:80:49:54:e8:97:63:3f:70:89:
                    18:a1:22:92:a5:2b:70:9d:29:11:14:aa:a4:6f:e7:
                    24:2c:00:0a:83:ca:da:28:27:92:6e:44:4b:42:a7:
                    b8:35:51:ad:cb:c0:21:7c:d8:20:2f:16:66:ca:d9:
                    04:54:c6:1d:7c:6f:81:65:98:7a:96:2b:9c:af:c8:
                    f3:f4:b4:8b:50:30:cc:9a:66:c8:fd:66:58:d9:67:
                    07:b7:c0:1c:ea:e7:09:af:d7:67:75:b2:17:e2:80:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:74:D8:AB:13:EA:43:1C:A5:E1:DD:C2:81:AF:79:EB:E0:DC:81:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:31:dc:4a:c6:1d:73:53:7f:b7:00:92:86:b4:b9:b3:6f:a0:
         3a:89:50:27:7f:6d:c4:28:d0:67:7b:86:fd:24:22:99:de:00:
         8e:72:3f:24:26:5b:43:b2:3a:4a:8f:fb:ed:d9:da:9b:59:ec:
         00:19:a1:8a:f2:1c:d1:23:b4:6c:78:ee:a4:53:63:48:52:5c:
         45:6a:b1:52:97:d7:57:20:b0:61:6d:7e:cd:82:89:6d:59:8b:
         7c:f7:64:c8:7d:a5:18:51:23:9c:6f:47:22:8a:33:aa:78:26:
         ba:69:cb:9f:92:d3:bd:0f:b7:45:9c:a6:fe:4b:df:eb:eb:4c:
         0a:08:28:b3:c3:62:f7:53:50:a5:2c:36:ce:de:04:dd:82:e8:
         7e:55:8b:38:09:e7:90:d4:ec:8b:85:43:75:c4:a0:75:1c:da:
         41:ec:00:fa:a6:bd:ad:d7:92:70:a1:1f:0f:87:7b:13:63:02:
         98:bc:8f:8a:27:d7:4b:04:ba:06:1b:7a:90:69:21:07:a1:3e:
         cc:79:b9:8a:33:6a:1b:39:c5:b9:48:1e:d8:53:af:fb:02:50:
         1c:a1:fa:c1:20:7e:eb:0b:60:2d:44:b1:fd:08:42:58:4d:87:
         c8:bb:ef:97:1c:d0:0d:38:63:72:f9:03:c9:c4:6f:ab:18:4c:
         75:3b:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:41 2024 by rpki-client on console-ams.rpki-client.org