Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa
File:                     627bbcea-3a63-36af-8f19-2ade398472c9.roa (raw, json)
Hash identifier:          8X6+PwpBzkYE4pzNkO/o/Win552n8dCD8phuCKpnn3Y=
Subject key identifier:   F6:50:4C:27:70:6F:38:6C:E2:07:4C:07:1A:44:87:E1:84:FE:A3:1F
Certificate issuer:       /CN=b3419bc1-91bd-4274-9551-2ab252b1c64c
Certificate serial:       010D0C9F43285847C05C15715D9D839B27FB57C0
Authority key identifier: D8:BB:6E:E1:4D:7C:AC:A9:FA:0E:74:0F:58:F2:1D:05:32:3E:19:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa
Signing time:             Sun 03 Nov 2024 01:00:36 +0000
ROA not before:           Sun 03 Nov 2024 01:00:36 +0000
ROA not after:            Sat 01 Feb 2025 02:00:36 +0000
asID:                     53730
IP address blocks:        184.94.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:5c:15:71:5d:9d:83:9b:27:fb:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3419bc1-91bd-4274-9551-2ab252b1c64c
        Validity
            Not Before: Nov  3 01:00:36 2024 GMT
            Not After : Feb  1 02:00:36 2025 GMT
        Subject: CN=8049d41a-6e97-4984-b4b4-7d1c7ed073f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:fc:f5:28:d2:f3:d0:fb:ea:46:56:6f:43:
                    5e:1a:37:7e:11:b1:d1:ce:bf:21:3d:dd:f7:a5:3a:
                    45:75:bf:7c:86:94:19:ca:4b:b9:7e:fa:cd:8e:1c:
                    02:d0:77:d7:1d:2e:70:33:fe:f4:12:36:f1:41:87:
                    c5:bb:ad:17:d1:33:bb:8a:c1:53:ae:87:d8:6f:a2:
                    d4:d3:a3:4f:40:8f:2b:44:c3:86:1b:8c:8c:f1:c5:
                    90:6b:ed:a2:ee:7e:41:e4:4b:14:5f:f0:51:e8:98:
                    18:fb:c0:f6:26:ed:84:e9:43:a1:7a:9d:73:f7:fc:
                    87:e4:2c:53:a7:13:07:a7:11:fe:59:19:cc:2d:25:
                    55:52:e6:56:46:b1:33:7f:10:72:7c:c6:27:c1:2b:
                    ae:21:5d:24:1b:f4:a4:32:44:3f:db:6c:aa:29:26:
                    37:5b:f7:cc:0d:55:3c:19:f3:fb:4f:c8:52:42:06:
                    1d:5c:0f:4d:00:11:98:f0:12:a2:b0:5a:13:5c:86:
                    14:65:e7:6b:6f:97:3d:e1:6d:d5:ef:01:70:69:92:
                    3d:fa:04:f6:bf:83:5e:32:a6:41:cd:b7:f2:b4:74:
                    02:1b:a8:d7:0c:dd:b3:47:80:cb:ea:aa:5d:ad:d9:
                    74:13:88:40:a2:9b:de:a9:91:00:65:f7:51:78:7f:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:50:4C:27:70:6F:38:6C:E2:07:4C:07:1A:44:87:E1:84:FE:A3:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.crl

            X509v3 Authority Key Identifier:
                keyid:D8:BB:6E:E1:4D:7C:AC:A9:FA:0E:74:0F:58:F2:1D:05:32:3E:19:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:3b:b5:35:97:77:91:f5:4d:13:f9:c0:25:96:b5:60:85:
         81:12:7b:96:35:69:e5:34:e6:f9:14:bf:5f:13:c5:2a:95:53:
         92:dc:cd:b7:a7:49:a6:fc:54:22:66:74:a3:4b:ab:ea:b0:2d:
         28:5e:ab:b8:c2:0d:1c:71:6d:ae:9b:9d:a1:50:58:b1:ec:b0:
         fe:19:e0:61:5a:f5:f3:6d:42:5e:22:ff:fa:06:ca:41:50:43:
         3b:41:de:54:0f:38:0e:7f:17:a5:1b:1d:15:5e:4f:25:00:c2:
         42:2c:d9:5f:a5:3e:3a:ea:2d:13:5a:f4:18:f2:93:4f:d7:70:
         d6:57:ae:88:dc:80:cd:79:dd:ff:c2:64:a1:a0:4d:ec:7d:93:
         84:a2:81:13:89:c0:e4:fd:5d:0f:ee:05:b9:b2:05:f1:7c:b2:
         9b:9c:c0:8f:86:c1:ae:99:10:33:e7:cd:47:5f:0a:f2:e3:24:
         cb:f0:dc:d2:22:3c:83:9e:05:c8:15:34:e1:6f:56:b5:3a:d6:
         2c:ec:47:d1:fd:02:49:1d:2f:c0:00:90:4e:6d:0d:90:c3:b5:
         64:85:f6:95:d5:e0:7f:e4:4c:cb:36:25:88:ad:59:b8:a8:53:
         da:7e:68:52:17:a2:74:0e:a4:e8:c6:8c:b9:77:a9:29:0a:eb:
         ce:db:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:18 2024 by rpki-client on console-ams.rpki-client.org