Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
File:                     e1a9ff98-118b-3699-8349-1030069f9822.roa (raw, json)
Hash identifier:          MhQYMFD6mTdtQaH8e30Cz4kkw2Ii3EhGSm8jTwMCyqA=
Subject key identifier:   E3:C1:38:B8:76:65:52:B9:1E:CD:B5:B2:31:B0:BA:4A:88:28:D4:5C
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F43285847E8F4C7A8328A9951EFCF8B40
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     398290
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:c7:a8:32:8a:99:51:ef:cf:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=04597557-717e-4251-b228-96c281f42b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:b3:e4:db:98:9b:be:82:1a:5a:b6:cc:56:
                    23:a1:36:f0:14:ba:cf:cd:78:f2:b5:1c:c9:d4:34:
                    ff:15:01:e5:f2:bc:a4:68:a6:f4:13:14:68:44:19:
                    03:b8:da:3a:c8:1b:a0:1d:19:20:4d:b3:08:fd:5e:
                    28:e4:6a:2b:bf:13:ba:c0:85:3f:da:ab:e6:3b:f8:
                    86:fd:a7:e6:4f:5d:11:5f:a3:17:a0:73:8e:7f:b2:
                    c3:66:7a:83:9f:97:69:5e:4d:36:4a:63:8d:41:a9:
                    c6:4d:ea:97:48:73:aa:61:ef:e4:f9:55:97:33:7c:
                    49:20:6a:d5:10:0c:94:57:9b:d0:2d:36:1e:ba:26:
                    cc:ae:d3:05:7c:ac:23:6a:32:80:ad:a7:e1:85:6c:
                    8d:7d:9c:46:39:78:4f:eb:20:ca:92:88:92:e4:a6:
                    7d:df:bc:0b:e9:4c:57:89:47:58:ad:2f:fc:58:72:
                    b3:03:ea:db:83:f6:de:7c:62:a1:ca:4e:99:ba:b9:
                    76:78:ae:e7:f8:02:35:43:e4:c0:c0:56:7a:d5:e8:
                    00:aa:95:67:7d:1e:c3:b1:69:78:6b:42:c3:91:a3:
                    3f:32:41:e9:15:8e:17:04:4e:41:74:6d:b8:2b:c4:
                    d7:d5:1e:d0:e5:38:e1:3b:1e:e1:ff:23:f3:a5:94:
                    c3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C1:38:B8:76:65:52:B9:1E:CD:B5:B2:31:B0:BA:4A:88:28:D4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:74:ac:c1:57:f4:d7:5d:6f:b0:51:36:4d:81:10:4b:ee:54:
         67:2f:fa:b9:8b:f7:18:c9:5c:19:93:8c:6f:bb:fb:08:23:9b:
         00:42:cb:b3:e0:c5:fd:9f:44:82:4f:bc:37:15:eb:bd:3d:d9:
         fc:21:b9:80:d1:07:3d:87:dc:8b:56:e7:17:b9:f1:62:3f:57:
         61:df:01:a3:40:d6:74:c7:96:bf:65:c3:9f:18:aa:10:21:8c:
         57:4b:10:5e:b9:43:12:09:f2:4e:b5:f0:ce:86:cb:65:49:05:
         91:80:52:fa:52:f8:57:e2:c6:00:9f:1e:6b:e1:67:0a:78:a8:
         b8:12:a6:ef:1d:11:4e:05:4d:fa:f3:8d:30:c5:25:15:cf:90:
         99:de:72:71:af:bc:4c:87:be:e5:ef:ef:89:0e:71:b6:0f:af:
         24:b2:c7:bd:92:a3:ea:34:4e:70:4e:9a:88:af:88:50:9e:10:
         c9:4d:12:6a:98:3d:ec:b8:4c:7a:a2:6b:9f:49:7d:0a:d2:f6:
         d3:f8:03:02:d3:d0:10:8f:ff:a0:96:68:89:85:f0:2f:44:69:
         ad:4b:ee:5c:bc:3a:10:1d:6e:b1:82:1d:bb:4d:94:b4:6b:df:
         c4:a4:99:dd:a2:5f:c9:1c:bb:e4:2d:3c:df:bb:4e:10:ce:84:
         4d:31:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org