Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa
File:                     d44d9355-ca16-3f84-adcc-d72f435dc27f.roa (raw, json)
Hash identifier:          B9z+Bo8nYTYnlmOChzefIpSXNBqwqHlY6HoubxcwOzo=
Subject key identifier:   1B:0E:E2:8E:71:94:CD:08:AB:B0:2A:E0:FE:69:FB:D1:BD:0C:DF:07
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285847CFD4A70FBEAE29419E510A80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     395391
IP address blocks:        216.230.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a7:0f:be:ae:29:41:9e:51:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=b0b5e992-c052-4571-adc6-f0bfe3da873c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:b3:3b:e5:51:c3:77:19:a2:bb:62:0e:86:
                    07:04:5c:96:b3:98:fc:f0:8c:54:05:68:9e:6f:e3:
                    98:47:a1:e0:06:6c:31:92:b3:46:d4:21:4d:bf:74:
                    47:a2:b3:59:db:fb:1a:38:5d:69:6c:78:22:b4:06:
                    90:05:53:d6:a3:7b:d1:88:49:88:6d:9d:35:ad:7c:
                    41:40:82:3b:b1:69:1f:3b:42:94:4e:1f:83:7f:83:
                    f4:b1:b8:be:aa:1a:70:bb:5a:e1:8f:94:69:d4:1a:
                    d8:ab:0e:31:56:23:d8:70:e3:4e:e6:43:cf:5a:bb:
                    1f:c6:ee:00:ca:e5:e5:cc:99:db:7f:db:43:f0:51:
                    d9:5f:b0:6d:7c:5f:02:05:3a:31:75:ff:d5:90:e4:
                    53:de:1d:f5:e6:a2:73:fb:0f:d1:34:c0:74:9e:3c:
                    72:74:04:d9:c5:e6:d4:27:f3:14:c4:55:b5:9a:f4:
                    ca:7d:0e:e2:c1:c9:dc:ec:b4:bf:f7:89:c3:b8:f6:
                    74:fc:97:7e:fe:54:b0:58:7b:b5:c2:5a:5d:28:6a:
                    f8:cc:c6:41:92:d4:62:c5:de:e6:d6:ff:cc:bd:11:
                    6d:42:00:2f:d4:70:c0:66:7d:0c:87:d7:bd:7d:eb:
                    b3:66:bd:aa:c7:ab:97:2e:4a:a5:34:c2:be:53:ff:
                    01:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0E:E2:8E:71:94:CD:08:AB:B0:2A:E0:FE:69:FB:D1:BD:0C:DF:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/d44d9355-ca16-3f84-adcc-d72f435dc27f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:8d:10:96:90:64:eb:2d:4f:86:e0:39:de:f6:74:dd:3b:
         fe:56:f2:0f:31:2c:bb:42:19:50:55:fe:41:61:62:d2:ec:96:
         58:ca:62:a0:30:43:37:c0:3b:72:78:e7:cb:8a:64:7b:9f:ba:
         bb:33:b6:9b:31:23:40:67:65:56:5c:d2:73:fe:ae:05:c9:65:
         fa:3a:16:51:6f:e5:e6:40:74:bc:de:5a:22:97:12:0c:98:42:
         b7:85:69:41:3b:de:6e:56:13:be:dc:ff:8c:0c:8b:b9:ec:59:
         5c:b0:89:ca:92:8b:9a:3b:35:44:bc:10:ca:2c:ef:2a:39:69:
         a1:60:68:4b:b3:d1:81:70:42:99:46:bd:cc:ef:74:c5:c5:09:
         7a:42:60:07:61:1b:34:d6:b8:06:90:ac:b2:92:a6:77:4b:72:
         0e:34:e6:cf:b5:4c:1f:6d:e3:64:72:73:32:3a:33:6e:2b:83:
         9b:f8:48:b5:04:7d:df:98:42:93:0f:dd:27:3b:91:92:da:26:
         dc:94:9e:fa:48:7e:26:16:f6:11:d7:15:a4:34:80:10:b4:00:
         e9:eb:0a:44:79:d4:e7:b6:c4:4e:1f:33:30:1b:48:66:8d:55:
         62:05:3d:1a:a6:93:15:2c:da:54:52:cc:9b:d0:88:56:cc:bb:
         64:31:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:18 2024 by rpki-client on console-ams.rpki-client.org