Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
File:                     b91cefc2-5e14-330e-b561-e34c119b1bef.roa (raw, json)
Hash identifier:          csphNexrCNG2Zq/0sQ+cK0MqGLyZcvUQxV91SRUzZmg=
Subject key identifier:   BC:B6:69:4B:C6:1F:CC:07:7A:E8:41:28:01:90:E6:43:9D:63:0D:9C
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F43285847EBBF7B88B6903917219F2600
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     16433
IP address blocks:        162.217.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7b:88:b6:90:39:17:21:9f:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=717d6968-9486-40be-8564-25701c1803d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:0f:fb:ac:c5:db:74:92:18:97:48:87:51:
                    7a:89:29:e0:ff:9e:54:33:e3:6c:82:5b:31:af:9b:
                    38:e2:fe:c2:dd:d2:f4:40:31:43:cb:1c:39:6f:b5:
                    23:6a:e4:86:66:42:ea:40:74:7c:26:1e:b5:a0:32:
                    d1:e8:50:8d:7a:fb:16:4d:6f:d8:ec:e2:1d:c1:8c:
                    9b:93:05:ad:b4:d7:c8:dd:23:16:f9:99:81:c2:75:
                    40:28:2b:66:42:60:f0:5f:8a:4f:85:d8:78:a9:bc:
                    90:01:7d:7d:d3:18:8e:6d:f4:eb:43:dd:3b:f5:49:
                    30:af:39:3a:2b:5f:26:e9:40:d9:8a:f3:4d:f7:78:
                    a6:82:87:94:9a:e9:f4:89:58:54:1d:5c:ad:3a:75:
                    87:0d:21:fa:15:8e:2f:7a:b0:57:9c:2b:78:65:c2:
                    43:0f:c8:93:d5:07:aa:55:5a:6e:54:92:4f:d6:f8:
                    22:f5:47:ce:72:2f:29:29:92:d7:cc:45:54:8a:c5:
                    16:dd:af:67:14:2b:72:ea:bc:70:f1:1e:d8:d9:97:
                    bc:1d:95:2a:9a:bc:49:d4:18:99:98:22:1a:85:c8:
                    ae:b4:e4:61:1f:02:33:06:0d:7f:52:c6:80:ca:66:
                    33:53:4d:4d:cd:3c:f8:fe:07:13:be:6b:03:20:84:
                    5d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B6:69:4B:C6:1F:CC:07:7A:E8:41:28:01:90:E6:43:9D:63:0D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:56:e2:a9:01:74:a1:3b:24:9d:3f:1b:f3:47:52:20:19:
         cb:d1:eb:74:d2:bd:5e:f8:2f:29:94:cc:97:32:48:02:bc:b7:
         99:da:75:d3:67:47:31:d7:66:ea:1d:c2:44:27:a3:87:6f:46:
         6a:d3:d8:f9:a2:b7:f7:5e:ff:43:e4:dc:a8:9d:39:19:6f:2c:
         21:3d:24:8f:07:3e:5a:34:8b:e6:dc:ef:1c:e9:87:c2:6b:5f:
         82:27:97:26:38:f2:cd:ea:20:06:0b:ef:8d:aa:38:1e:42:c8:
         ee:34:73:9c:3f:23:5f:83:ed:a2:4c:6f:d7:47:ac:17:5f:69:
         f1:58:1d:a7:20:dd:29:fd:b4:1c:64:57:09:0e:ac:ae:a7:19:
         bb:80:7b:d0:d5:81:40:c8:06:db:4d:19:ab:f8:db:9a:59:ad:
         fc:66:93:c8:ec:48:f6:12:97:37:55:10:a3:08:7d:d6:71:ae:
         c2:60:c9:ae:6c:ac:f8:e6:3e:f9:54:56:0b:9e:de:69:50:b9:
         11:76:84:fc:5e:33:3a:2e:e0:27:ff:46:9b:0f:98:f7:bf:f3:
         43:44:5f:eb:13:c7:6a:b0:aa:7b:3f:5e:63:e4:b3:71:28:5b:
         c0:de:d8:f6:c2:fb:40:58:eb:23:80:c3:0f:19:40:bd:d4:19:
         58:57:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:54:06 2024 by rpki-client on console-fra.rpki-client.org