Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
File:                     8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa (raw, json)
Hash identifier:          SOgdw5mbtENJ6Kfy9Lvi9+YGROEu3HM7oZEBazNtFmg=
Subject key identifier:   89:61:24:69:AB:8D:B4:76:C5:1D:CE:2C:95:82:E8:17:38:CE:0F:2D
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F43285847C4AA1B5D79A33066D1EF5080
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     30039
IP address blocks:        216.222.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:1b:5d:79:a3:30:66:d1:ef:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=56f33e3b-9cdb-405e-ab4f-ab691bc637b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:c9:8d:01:71:11:4b:a7:2a:53:0d:d4:b4:
                    80:7e:14:e1:61:6b:2b:8e:18:56:5e:69:7c:17:d4:
                    7d:bd:58:e6:d0:20:ce:32:ef:0d:30:c0:fd:a2:3f:
                    cd:af:52:71:9e:54:0f:99:54:53:ea:a8:2f:37:a3:
                    26:59:de:14:27:92:6b:db:29:e4:e6:26:80:05:90:
                    18:59:e6:2e:42:ef:35:58:bc:ab:3c:6b:db:41:94:
                    fe:ba:9e:3e:6c:e2:06:ee:ad:69:e2:41:09:51:48:
                    ad:ab:8d:90:ba:26:99:fd:a3:bd:ae:ab:af:e0:82:
                    2e:65:26:33:32:ab:ef:93:eb:87:e1:fd:3e:71:28:
                    40:07:0d:cb:35:4d:7b:2c:ed:27:f4:cc:36:56:a9:
                    1a:c2:31:17:10:b2:5a:1a:29:ba:12:e3:e1:3d:73:
                    d1:ff:06:c9:b3:a1:92:a5:97:45:da:e1:3d:68:55:
                    e1:6b:d0:2f:ea:54:91:b8:0c:18:1e:0a:69:10:57:
                    43:b5:9b:b3:f7:87:47:4f:44:07:23:53:b3:ec:1d:
                    83:22:df:1e:3e:f3:a3:6c:0d:3c:53:b9:d2:74:b4:
                    ac:f9:f5:29:00:a6:d1:17:35:28:5c:7d:86:1c:67:
                    53:f7:6f:09:f2:63:9e:06:1b:8a:ee:2e:e0:1c:7a:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:24:69:AB:8D:B4:76:C5:1D:CE:2C:95:82:E8:17:38:CE:0F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/8b2a22bf-7b66-34e6-9198-24d8c09b19b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:0b:57:cb:ee:15:40:9f:a4:8a:46:b6:5d:64:92:56:66:
         89:4f:a2:dc:08:2e:cd:54:c9:bf:d0:ad:f9:bf:71:31:7c:bc:
         59:bb:11:92:b4:ca:67:9f:ff:01:f0:48:73:48:da:b2:be:15:
         d8:3c:0d:84:ba:93:10:11:88:24:61:d1:14:93:d2:e5:81:2a:
         5d:13:a1:9b:f8:18:26:63:8f:e9:bd:a2:3c:03:64:c2:66:ce:
         10:9e:01:e4:83:f2:25:23:ef:4f:c5:71:86:76:e5:fc:ed:a1:
         3d:d4:57:bf:dc:7d:7f:e2:5b:a0:cf:72:4a:ad:52:ec:6f:eb:
         46:74:4e:8f:4c:a6:6a:19:a4:fa:7f:db:05:73:67:65:99:2d:
         2e:d6:07:27:9c:6a:63:17:2c:4a:62:ee:ca:18:fe:fc:bc:c6:
         21:c3:e0:09:5e:f2:47:50:ba:d8:87:0d:19:73:a9:ac:1b:d6:
         18:b7:f1:a8:ff:cb:19:0b:00:a6:97:4e:b7:9c:a4:05:c2:64:
         37:35:95:02:d4:56:ba:3b:9e:e2:4c:40:a9:f2:77:dc:a3:a2:
         c9:af:29:fb:49:88:26:ef:fc:ec:5f:72:7a:85:66:28:16:c4:
         03:52:0f:24:92:dd:f0:ff:4d:03:ce:03:e5:97:0a:d8:0f:ad:
         07:98:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:14:14 2024 by rpki-client on console-fra.rpki-client.org