Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
File:                     5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (raw, json)
Hash identifier:          8cpF9LYkmy+5fR0YEf/rMnVyYWUs3wLSxB+d7VYtFf4=
Subject key identifier:   21:E0:80:8C:1F:9E:D2:44:80:3B:44:CB:65:D7:D2:DA:80:E3:0B:7B
Certificate issuer:       /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
Certificate serial:       010D0C9F43285847B3CC0BA9B733F5D34C83C8D0
Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     400362
IP address blocks:        216.181.108.0/24 maxlen: 24
                          2606:a5c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:0b:a9:b7:33:f5:d3:4c:83:c8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=0e61c730-52b7-4a5f-b338-98c202f124b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:bf:01:7e:fb:bd:6c:1d:20:6a:d2:12:b0:
                    d5:47:f5:2f:11:f6:69:72:1b:cd:0e:1f:54:be:ac:
                    40:aa:88:e9:28:ab:b6:f2:de:0e:b2:63:a7:ff:54:
                    0c:18:d3:c1:05:a4:46:48:7d:5a:7a:b2:75:51:54:
                    f3:c8:aa:41:9e:11:80:fc:8a:c1:c0:78:7b:e3:4a:
                    0b:51:0f:2f:7b:c1:1b:e8:4b:e6:5f:eb:57:b7:3d:
                    29:d7:e3:12:d1:8f:44:2c:5c:95:a6:2e:31:da:f7:
                    f1:f4:a2:c1:9c:bc:06:5d:6b:f8:69:34:69:9d:d1:
                    cd:81:36:fc:b3:a5:60:fd:39:16:1d:47:65:8a:19:
                    6d:69:5d:7a:b8:da:a2:a9:33:9c:47:fe:d6:3b:99:
                    5f:bc:4a:d3:25:da:2f:a0:86:4c:ed:47:4a:de:76:
                    a7:d4:51:88:57:18:a2:b2:91:ce:80:a4:66:5b:46:
                    f6:67:00:90:89:53:7d:e8:e0:f9:a1:9b:36:17:d0:
                    13:90:72:f5:e4:56:8b:2b:00:e5:08:35:f4:5c:f4:
                    1c:13:4c:91:45:4f:30:b8:92:22:45:42:d2:91:61:
                    25:7e:e3:bf:f4:40:2d:97:dc:49:43:39:f6:fd:5e:
                    3c:bf:bb:cd:57:f1:1b:3b:51:19:95:ee:3f:fe:d5:
                    c9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:80:8C:1F:9E:D2:44:80:3B:44:CB:65:D7:D2:DA:80:E3:0B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl

            X509v3 Authority Key Identifier:
                keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.108.0/24
                IPv6:
                  2606:a5c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:42:f8:e7:9f:b4:12:47:99:2b:c0:6b:c4:18:0e:a8:14:
         c4:c6:c4:e7:b7:ba:27:66:00:cf:fa:7e:fd:c9:a5:13:02:f6:
         b9:ab:2c:52:c7:17:71:e9:38:d4:85:c1:28:64:e2:e9:24:1a:
         ba:1e:24:d8:e1:92:ac:89:05:11:37:7d:8c:51:69:af:97:fc:
         0d:75:77:72:d6:a9:6e:84:39:6f:8c:77:a6:09:03:67:ed:1b:
         7f:9b:b1:a3:ce:67:99:75:00:03:a9:83:e0:95:0b:69:95:31:
         1f:c2:54:6e:fd:9d:4c:39:6e:84:8a:14:89:9b:a9:a6:51:31:
         75:53:31:cd:54:30:9c:6c:79:22:96:00:65:73:6e:7a:96:1d:
         96:46:20:46:66:5a:5f:7f:9d:6c:d1:23:96:66:b7:ec:7c:04:
         ea:83:ee:22:de:95:60:7c:f7:7d:f4:70:86:86:a3:8f:ef:df:
         2f:27:75:10:29:5f:7d:ee:2d:c6:b9:4f:92:57:73:f1:5a:ac:
         62:6e:c5:1e:5f:8b:07:17:14:cf:c2:81:fc:0b:90:26:c2:c4:
         3c:6c:4b:74:6d:41:48:8f:bf:5c:2e:77:17:a9:f6:7b:50:a3:
         07:48:cd:a0:d6:9c:2e:2a:85:de:04:29:8b:6d:1f:d7:26:e5:
         19:a5:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:54:53 2024 by rpki-client on console-fra.rpki-client.org