Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa
File:                     2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (raw, json)
Hash identifier:          +qpp6mn9gyj64vqPWnEihyMv/vayJeIB607WpOPJ5Ps=
Subject key identifier:   FC:AE:09:FF:E2:0A:A5:01:09:10:33:5C:37:DD:C3:9A:3B:24:19:D6
Certificate issuer:       /CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Certificate serial:       010D0C9F43285847AE36C65639629FDA6B417A00
Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        216.120.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c6:56:39:62:9f:da:6b:41:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=f8e19638-3d9b-420d-9958-5011f66a2812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cb:60:1c:3c:01:76:b3:7e:c7:3c:f6:c6:d9:
                    d9:b1:23:b8:e5:87:9a:97:56:9a:89:b3:14:39:cf:
                    e3:cf:b0:31:a9:b6:e4:4a:84:75:40:8d:b8:9d:e6:
                    42:19:32:ed:8b:9a:e5:02:02:ad:ea:a9:8d:9d:7e:
                    2c:09:f5:a5:b4:76:e9:c5:61:33:f8:15:fa:58:f9:
                    c4:10:b5:86:72:b4:1b:a7:3b:3c:34:f8:f9:da:6a:
                    5a:32:ef:ce:42:8f:ad:57:b0:09:21:6c:cf:1a:e7:
                    54:89:0c:da:f7:4a:40:ec:44:03:ab:d6:70:b3:e2:
                    09:3f:c9:ce:b1:8c:fb:b6:ba:f4:99:ac:c8:61:98:
                    05:ef:ff:99:a3:1c:7e:5d:c0:e8:3b:9f:1a:fb:c0:
                    60:c8:fd:e2:5d:e3:30:19:71:51:12:29:b2:82:c4:
                    8a:c2:60:52:6b:a3:d8:37:7f:b5:1d:bb:be:65:0c:
                    bd:f9:40:5a:6c:ab:f2:49:82:0a:3b:12:7c:4d:4f:
                    f2:28:7b:02:c4:03:ad:2e:f0:63:3a:ee:88:e5:31:
                    ff:36:82:45:53:0b:a0:05:2e:56:aa:ba:f5:13:85:
                    39:f5:df:d1:78:97:71:c2:1c:ab:9d:54:c4:4c:79:
                    b4:02:09:44:09:c8:bd:5d:cd:49:b5:5a:d6:2f:60:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:09:FF:E2:0A:A5:01:09:10:33:5C:37:DD:C3:9A:3B:24:19:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl

            X509v3 Authority Key Identifier:
                keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:79:e5:cb:92:e5:fc:2f:34:df:9a:ba:d6:e3:52:ca:72:e3:
         24:91:3f:1c:c5:8f:fc:fe:19:e1:5f:32:4e:24:23:9b:57:47:
         8c:5a:f9:68:c2:c9:d0:22:e2:3d:b4:95:f2:1c:08:26:a2:09:
         a3:a5:67:9c:d4:09:22:ec:6b:86:71:34:30:b7:d1:d5:19:25:
         a8:9c:48:be:05:03:2b:fe:70:de:53:87:a2:53:6c:d4:b8:53:
         e9:35:43:aa:fe:1b:25:c2:96:35:32:33:5e:0b:17:b4:70:fa:
         3b:48:48:57:82:79:a1:18:82:98:8a:2a:f1:5f:57:93:8f:d7:
         03:e3:b3:6f:7c:85:4a:d9:47:25:81:c9:65:32:05:6e:1f:66:
         a5:5b:97:80:08:b5:4a:9e:e9:51:a3:8a:7f:5a:91:0a:c3:13:
         27:32:40:74:e5:af:fb:4b:de:94:39:dd:14:31:e3:3c:a0:7d:
         9d:60:ad:bd:ff:31:bb:23:34:e8:59:b7:d8:7f:91:f8:66:a3:
         33:43:47:f7:f7:74:d2:a9:1e:7c:de:f7:4b:61:7e:2a:4d:2f:
         2d:47:d5:56:15:3d:c4:c5:f2:43:b1:eb:b7:a6:8a:2a:32:bf:
         3c:8b:e4:f9:a9:83:d9:43:cb:0e:37:7d:35:5c:6b:3b:d8:c0:
         9b:0e:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:09:16 2024 by rpki-client on console-ams.rpki-client.org