Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
File:                     0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa (raw, json)
Hash identifier:          y7jUCnXBuvoeS5FtBBJxJalsE4/O4sScBWqfL5T/Rmo=
Subject key identifier:   F4:EB:9E:B6:D4:E9:25:9F:F1:83:9F:55:41:0D:D4:6B:1A:3A:C9:DC
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285847CFD4AE3B4A59CC4A6E53D380
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     32554
IP address blocks:        216.162.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:ae:3b:4a:59:cc:4a:6e:53:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=2d8bc4ef-9aaa-4066-b329-3c6bfd76f5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:b9:75:9e:44:89:4b:71:ba:df:fa:b3:f3:
                    16:9a:a7:c3:3a:44:cd:35:a0:97:fa:5f:db:73:17:
                    68:10:ae:ee:6f:5f:80:a4:80:16:37:d0:4b:fc:2e:
                    0c:7c:3e:82:d4:d3:cc:31:70:a3:86:2e:c8:e6:83:
                    63:df:93:bc:fd:0b:85:cc:fa:42:9c:31:85:45:6b:
                    f8:a2:db:14:a1:3d:26:fa:d0:8a:07:e6:b1:e1:07:
                    01:34:4a:01:fa:6b:f7:0b:46:0a:89:db:9d:09:7c:
                    ad:0c:49:4f:65:c4:7b:86:fc:cd:b1:d5:7a:4b:24:
                    d8:71:34:9e:ea:a0:ab:30:24:fd:8b:c6:90:6e:ec:
                    9c:a0:41:62:75:89:9f:38:35:e4:bd:a8:91:8c:56:
                    71:07:2c:44:e6:ee:88:70:b5:dc:69:fe:c3:ac:8d:
                    ee:c2:c9:f0:ea:28:e4:4e:20:c9:ec:77:31:e2:35:
                    b3:df:a3:90:fa:d0:24:4d:34:a8:cb:9d:63:79:5f:
                    25:44:43:06:dd:49:60:c3:d1:bc:f5:81:af:e9:77:
                    bb:e2:12:3c:bb:86:ab:2a:95:2a:6c:ec:61:4b:da:
                    1b:3b:19:6f:dc:c1:85:20:cc:4b:45:58:c9:87:01:
                    75:14:13:f6:ad:c4:92:26:6b:c1:5d:e8:1d:08:f8:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:9E:B6:D4:E9:25:9F:F1:83:9F:55:41:0D:D4:6B:1A:3A:C9:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/0a0a7cf3-e3b3-3035-9148-3d40125001d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.162.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:f7:36:fb:02:3d:6f:0b:d2:08:e2:84:fc:ce:fc:cf:ff:
         a6:b1:ad:56:d7:16:95:b4:1d:1b:f3:ed:f9:1d:ce:fd:b9:19:
         e6:b5:7d:92:e6:31:f2:a0:3a:58:fe:90:7e:2d:27:d7:00:0e:
         88:24:8c:35:8f:2f:5f:9c:c5:4a:a6:91:9e:83:62:ea:b6:ad:
         ac:08:9d:f8:dd:7f:a0:3a:d4:bd:b0:e6:47:4f:36:e6:25:91:
         21:fd:ed:75:f1:35:8a:b1:d7:d8:d2:e4:13:94:b5:5d:52:e4:
         02:06:90:5c:ab:c7:6b:26:ce:6d:18:02:8d:bb:75:f0:47:fb:
         c8:84:21:0c:66:56:52:1b:a4:8c:f7:04:14:ef:23:87:62:dd:
         fb:70:2f:09:e3:74:fb:f5:d0:a5:b4:9c:c7:03:15:70:2b:f0:
         b7:a8:1c:8b:58:75:e8:dd:30:a9:5d:44:78:7a:25:f1:a1:67:
         ca:5c:c1:a6:8c:bd:da:d3:95:08:b7:ce:0d:3b:6a:54:dd:cc:
         73:a3:54:5b:29:49:03:80:bc:ca:f8:61:71:96:47:62:aa:dd:
         28:37:09:b9:43:ce:84:fb:3a:f4:78:f2:10:5a:20:df:a9:54:
         d0:82:57:86:23:e4:08:0b:7b:62:0c:25:6f:d2:35:68:be:0e:
         d7:d8:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:37 2024 by rpki-client on console-fra.rpki-client.org