Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/41382351-e573-3502-9c88-3dd0985b5c1c.roa
File:                     41382351-e573-3502-9c88-3dd0985b5c1c.roa (raw, json)
Hash identifier:          Ic5IlUnZf//F2mcxop3VBjxkVxdZFoW1Xdb5QC/PBXI=
Subject key identifier:   14:73:A5:5B:67:BD:73:E2:D6:A9:31:C7:53:2B:33:03:03:E8:D6:60
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F43285847F143574BE0CD772C06174700
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/41382351-e573-3502-9c88-3dd0985b5c1c.roa
Signing time:             Wed 20 Nov 2024 13:25:27 +0000
ROA not before:           Wed 20 Nov 2024 13:25:27 +0000
ROA not after:            Tue 18 Feb 2025 13:25:27 +0000
asID:                     293
IP address blocks:        192.74.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:43:57:4b:e0:cd:77:2c:06:17:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Nov 20 13:25:27 2024 GMT
            Not After : Feb 18 13:25:27 2025 GMT
        Subject: CN=8c4aadde-62a4-4664-8336-7ae720d65c9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:12:33:49:6e:93:29:6b:2d:d1:51:2a:65:
                    35:65:c6:72:99:ed:54:35:47:ca:74:4b:c3:c3:59:
                    ba:ed:ac:19:3b:7b:a1:fd:5b:24:a6:c4:20:99:6a:
                    dc:b2:3a:f7:47:9d:42:9e:16:3c:2e:4a:ed:ce:50:
                    fe:07:49:c1:45:26:d9:5c:e3:f5:5f:03:2a:49:be:
                    6d:aa:c9:32:4f:27:b6:18:41:f1:b9:8f:5a:3c:04:
                    f4:ac:6a:9a:cf:bf:2d:84:4a:64:0a:99:d8:dd:03:
                    a6:ae:d4:2f:3b:45:fa:11:b3:83:9c:5c:ec:ba:5f:
                    65:5a:7a:1e:c8:23:4e:90:11:32:96:3e:b9:64:15:
                    6c:b3:70:2f:39:2f:6e:44:f2:49:5a:08:1b:f5:20:
                    49:43:a6:80:38:f1:59:1c:4a:3c:38:86:1f:ff:9d:
                    63:44:57:c2:f3:94:f5:76:e5:f9:34:df:3f:04:8b:
                    08:ae:37:d0:a4:5e:42:2d:01:56:44:ac:dc:f9:b7:
                    07:79:7f:d0:3b:80:77:86:c0:55:62:02:f1:a3:93:
                    77:f9:c0:7d:fa:63:09:32:6c:aa:ff:2a:bb:0c:77:
                    2a:c5:a5:59:14:68:b0:75:a9:0a:47:d0:c6:e4:ed:
                    fc:3d:0d:99:03:33:68:02:fe:d5:5c:c8:5f:34:87:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:A5:5B:67:BD:73:E2:D6:A9:31:C7:53:2B:33:03:03:E8:D6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/41382351-e573-3502-9c88-3dd0985b5c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:78:f2:f6:d5:0f:ed:58:b1:9b:f2:81:e3:b4:3f:d4:d9:86:
         fe:31:f2:0d:33:84:00:04:50:6d:74:b4:88:94:6a:cc:72:87:
         cb:0a:5f:71:5b:29:45:3c:08:16:70:a0:e0:18:df:35:72:e7:
         4a:45:55:4d:43:7f:cb:1e:0f:8c:a7:0e:54:a6:b4:44:a9:7e:
         72:ae:18:0f:21:64:aa:e6:fb:53:9c:d0:84:81:94:5c:1d:03:
         06:c5:ca:53:a8:89:aa:55:12:78:df:16:2d:0b:07:eb:8a:ca:
         07:86:a3:98:75:ae:ff:24:5a:4d:42:1a:d0:ec:a1:ad:07:8e:
         99:9e:73:1e:07:64:a5:fe:cc:bd:7f:f0:1f:78:f9:8b:46:6b:
         68:6f:19:a8:2b:be:1c:25:3c:65:1a:e2:2f:75:62:04:ce:78:
         8e:bd:2f:c8:2d:a3:20:36:97:bc:e1:7c:7d:23:11:81:ca:28:
         b5:98:52:a6:cf:de:5e:46:49:e9:10:d3:d3:50:e2:0d:59:fd:
         4d:65:ae:f6:ec:c5:80:bf:1e:75:1e:52:1e:a5:1c:22:90:9f:
         f5:6a:96:e6:cd:96:ee:27:4e:2f:47:68:e4:96:71:96:d1:76:
         70:b3:68:e6:1b:92:78:19:be:23:70:3b:4e:7e:92:01:2b:50:
         86:fa:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org