Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
File:                     c1bab32e-ba6f-30e4-bb04-585c662c039e.roa (raw, json)
Hash identifier:          Dt4sh2HmwJDKwkbeS6c9YXUElRWfpIjz59UaFGvkA9A=
Subject key identifier:   B4:10:22:69:F9:34:ED:C9:21:A1:69:D7:F5:2F:E8:D2:30:0B:0D:10
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584761718C679753ADAAC8ADD100
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     400238
IP address blocks:        204.8.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:8c:67:97:53:ad:aa:c8:ad:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=e21697e9-bb8e-4a8a-b015-46b8c36f4a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5d:32:50:03:97:9b:d1:46:68:42:1e:00:de:
                    62:47:80:b3:39:c1:ec:ed:21:f6:a8:60:c4:22:28:
                    15:eb:e7:72:72:b8:56:63:38:5f:01:65:8b:ff:cf:
                    c2:58:f1:de:e3:7b:7c:06:64:b7:d4:89:62:cc:c0:
                    87:f6:05:d7:52:d3:40:8c:53:3d:1d:73:e6:f3:22:
                    37:05:18:80:34:29:eb:12:62:44:f6:90:51:af:ee:
                    a8:7b:04:05:f3:46:b9:01:7f:c5:43:75:be:fd:b7:
                    c8:36:36:c3:0b:03:58:c6:de:69:19:88:1b:5e:bd:
                    5f:16:82:df:71:c4:23:23:48:56:13:73:cd:9f:9a:
                    33:7e:b3:45:3c:d0:1a:ed:9a:a5:b0:71:3c:92:23:
                    42:d4:cc:1b:e2:c6:3d:ab:06:fc:fe:5f:24:7b:3c:
                    ef:5b:7a:61:b6:26:f2:18:43:5b:0b:4a:3c:cf:4f:
                    21:c2:77:ff:62:4e:d7:f3:7d:fd:22:5e:8c:ba:c2:
                    64:01:6d:62:7c:9e:b0:32:5f:04:ea:aa:b8:40:4f:
                    f2:37:6f:2c:32:f6:ee:76:cc:b6:e6:0a:c1:9d:c6:
                    c2:df:ac:8d:6d:53:d2:93:c3:9f:f9:9d:46:a4:b2:
                    db:2b:30:27:62:10:a4:d0:49:d9:b3:6e:0c:db:e1:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:22:69:F9:34:ED:C9:21:A1:69:D7:F5:2F:E8:D2:30:0B:0D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c1bab32e-ba6f-30e4-bb04-585c662c039e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:5c:f8:98:c5:8a:94:25:1b:64:5f:84:ea:de:e6:ce:fa:
         00:13:24:6b:a8:91:84:73:71:b0:df:a5:b9:5f:2e:33:46:3e:
         df:17:87:ae:9d:30:5f:92:e3:75:f4:60:9c:a1:5f:c1:99:84:
         f5:b3:20:8f:51:ba:ff:9c:68:9e:cb:fe:a0:9a:e0:df:68:6f:
         84:12:d9:11:09:85:59:38:17:77:bb:b4:85:a5:f4:08:61:12:
         f1:02:2c:8e:4b:ce:e8:bd:8b:7b:61:2c:1a:96:bd:1f:ab:75:
         83:a2:1d:3b:2c:85:bc:42:b9:4e:4c:63:99:8e:96:d2:1a:a2:
         f7:a4:0f:9a:0e:34:86:39:c1:c7:7b:f1:c5:ac:17:20:70:cb:
         70:68:10:ca:dd:8f:60:1e:05:d5:36:7f:2b:ab:d6:c1:39:71:
         12:3e:d1:82:f5:4f:65:ca:d2:0f:18:a9:dc:46:93:db:14:f6:
         17:ff:7e:0a:b6:4a:a2:bf:92:6f:f1:27:05:62:c2:75:f8:e0:
         af:33:10:1e:b5:1f:fe:88:63:3b:3f:88:c1:22:ce:15:f8:77:
         ed:be:64:78:c0:72:3f:d5:56:b2:43:4c:95:26:8a:0e:2d:c9:
         41:65:e1:57:a7:b6:e7:7d:77:ae:3a:3f:40:28:b2:a5:50:58:
         b7:d2:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:57 2024 by rpki-client on console-fra.rpki-client.org