Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa
File:                     b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa (raw, json)
Hash identifier:          kOr6LeGex1x3EUkm8tfUtXx3UC0tm/+ajnIOY26Ztmk=
Subject key identifier:   48:D7:A1:E1:70:15:79:4C:93:AC:8F:A2:3A:AE:11:BE:93:C5:C1:A6
Certificate issuer:       /CN=04c216c1-5924-4a66-9346-a1f215800ceb
Certificate serial:       010D0C9F43285847D29F55C57C92F2DFFF9871F0
Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa
Signing time:             Sat 09 Nov 2024 14:00:40 +0000
ROA not before:           Sat 09 Nov 2024 14:00:40 +0000
ROA not after:            Fri 07 Feb 2025 14:00:40 +0000
asID:                     399889
IP address blocks:        216.170.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d2:9f:55:c5:7c:92:f2:df:ff:98:71:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb
        Validity
            Not Before: Nov  9 14:00:40 2024 GMT
            Not After : Feb  7 14:00:40 2025 GMT
        Subject: CN=97545e55-4137-4b36-a182-88763ca9677a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:93:53:0f:3c:f5:db:a1:2f:fe:02:24:3b:
                    20:9e:c3:cc:73:db:8b:2e:76:1c:c8:50:fe:22:70:
                    76:f1:72:d0:84:fa:8b:bc:f5:39:bc:51:4e:a3:ef:
                    f3:f4:e0:16:51:fc:01:08:80:4c:2a:49:4f:89:af:
                    bc:41:32:7f:d4:99:d6:fd:27:13:9c:88:b2:15:70:
                    c4:8e:9f:c2:0b:db:7e:39:1a:c6:68:78:64:5e:27:
                    c9:07:51:4d:78:9a:d7:68:b2:ca:46:ba:f3:73:19:
                    43:77:74:9a:a4:48:ae:29:f6:25:43:a4:6e:fc:eb:
                    6e:08:98:66:26:77:0f:34:c3:14:25:c7:f7:2b:51:
                    c2:6a:dd:8b:25:e5:2e:75:b6:99:02:68:26:7c:f2:
                    d9:00:d5:a5:76:bd:c2:ac:33:27:c7:8c:6d:75:dc:
                    8f:21:b3:88:ae:29:7e:96:d6:66:ca:4e:1a:3b:44:
                    4a:7c:0c:83:4f:76:c5:31:7e:09:22:77:26:a3:88:
                    67:14:5b:89:6c:0b:35:88:3a:c2:d8:9e:31:59:59:
                    1f:80:92:31:6c:3e:4a:1a:e9:76:6a:fc:31:ef:43:
                    86:1a:58:5e:eb:d4:d7:f2:e0:46:18:fb:77:90:be:
                    ac:6f:95:34:00:f9:4c:f6:06:84:60:f9:1b:96:70:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:A1:E1:70:15:79:4C:93:AC:8F:A2:3A:AE:11:BE:93:C5:C1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/b4abaf51-42e2-394d-80e1-bc63f54c0e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl

            X509v3 Authority Key Identifier:
                keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:33:c6:fa:03:dc:ba:29:72:f5:a5:96:cc:0e:ad:78:9e:65:
         8f:36:ad:64:2b:1f:f4:00:f8:78:37:d5:26:f5:b2:30:f0:39:
         d7:95:31:62:ae:fa:51:1d:be:48:af:f6:a7:d9:c7:6a:7b:12:
         fa:91:50:0f:f5:fc:26:3d:30:d3:3a:6c:60:95:7f:93:e4:3d:
         b7:62:8a:02:b5:be:d1:08:ef:38:ae:3d:39:e1:cd:df:5c:36:
         ca:d5:17:1b:5e:46:45:a3:2d:2c:23:19:7d:5a:18:f1:4e:7c:
         75:ce:67:95:a8:01:8a:eb:e0:82:6d:02:e5:77:b9:90:46:54:
         0c:ae:f9:73:76:a4:37:4e:ee:37:ac:60:64:dd:20:c4:9c:97:
         25:64:5d:5c:f4:25:32:30:b8:63:ce:6a:00:18:f8:c1:ea:9e:
         3c:af:f6:6a:ae:62:01:dc:ba:f2:c8:8b:dc:79:e5:e6:71:45:
         0a:4d:96:b9:82:e7:d5:be:77:52:c0:cb:3f:07:b0:7a:e2:69:
         ab:f5:23:19:20:60:db:fb:84:e0:71:45:f6:23:f9:c3:7f:96:
         76:31:fc:4d:f6:c9:28:fa:52:d8:77:94:d2:77:6c:88:f9:f5:
         e3:a4:43:e7:1e:8f:cb:16:5a:4f:06:a4:9f:98:2c:72:71:75:
         09:9e:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:08 2024 by rpki-client on console-ams.rpki-client.org