Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa
File:                     6a83bc96-c1d4-33ce-823e-0a9052613226.roa (raw, json)
Hash identifier:          Cc75SoZPQ2EZ0w5dikX8HbZ4xjrQF1ctWPQi5iRjCWs=
Subject key identifier:   79:02:09:BC:C5:8C:3A:E5:16:D0:4B:19:8F:B0:25:85:08:DE:13:1A
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F43285847CFD4D649261F097E21242E80
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        216.185.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d6:49:26:1f:09:7e:21:24:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=584aa87b-0d1f-47ea-a80c-51063cc34ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6c:77:d8:b3:59:7a:be:2e:bf:48:51:83:78:
                    63:c1:ee:4e:cc:56:0f:d0:1e:cc:f1:3c:5d:3d:d4:
                    cc:7b:76:01:5f:86:40:2e:7b:dd:9a:b3:96:7d:a4:
                    2d:a2:e9:16:b4:9f:e0:f5:70:d1:c3:7a:b8:8e:c6:
                    0a:ac:70:fe:56:9a:85:25:2c:99:0b:7b:29:28:13:
                    f5:c9:da:6a:ec:6c:85:dc:24:c6:8d:4b:18:3a:88:
                    e2:69:1d:06:3a:48:fe:f3:b3:5e:3a:6b:76:ec:67:
                    27:bb:56:0a:7f:85:5e:86:f1:f7:83:8b:a5:af:3d:
                    c1:9e:18:e6:7c:aa:7e:2e:0c:37:e5:a1:42:f6:1c:
                    5e:00:50:74:1e:e6:4a:92:f3:0c:35:da:a2:24:51:
                    bd:bd:08:30:7e:3b:9e:dc:c2:7e:f7:98:f2:30:ac:
                    a9:2d:61:87:31:8b:35:0c:86:92:4b:ee:b3:08:be:
                    5b:fd:09:69:dd:95:25:c4:48:63:32:ce:c5:dc:9d:
                    7f:1d:1d:65:26:26:8e:5d:4a:b1:06:38:e5:a6:b1:
                    c3:8c:e8:f4:3a:d7:02:19:a6:69:3e:fc:e6:6d:17:
                    b2:3f:72:4a:60:fc:b6:38:82:94:3e:c4:b6:aa:7a:
                    50:1f:d6:2e:87:b5:c2:98:d4:c9:c6:16:b5:72:38:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:09:BC:C5:8C:3A:E5:16:D0:4B:19:8F:B0:25:85:08:DE:13:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/6a83bc96-c1d4-33ce-823e-0a9052613226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:e7:c8:fd:71:ee:61:91:cd:97:3e:e9:7a:c3:69:7c:3d:67:
         9b:6f:79:44:18:f6:ab:52:49:83:dc:45:53:65:48:83:ad:ae:
         bb:c4:c9:54:3a:9a:5a:4b:09:ce:0b:2e:42:52:d1:35:83:4a:
         46:12:80:34:a9:f8:92:c1:a6:2f:8e:25:7b:89:97:cd:93:79:
         57:45:a9:86:5e:9b:0f:e7:f8:02:ed:28:2c:99:ff:71:5d:30:
         f6:14:0d:4d:fa:1d:60:96:e4:56:87:c2:d7:49:62:1f:62:a2:
         db:97:07:8e:c8:ac:34:cd:88:e6:d1:0d:8e:1c:21:07:54:f3:
         b4:1c:63:65:c2:b9:6c:d2:b3:a4:6b:59:59:fc:ac:9f:4a:43:
         19:84:7d:98:01:1c:0f:a4:3e:64:09:49:26:2e:59:2f:73:dc:
         c7:e4:60:5a:04:81:ac:15:75:16:61:5c:87:7e:0e:7a:e8:1e:
         c2:ce:da:a9:4b:71:44:dc:20:12:d2:93:ff:15:fe:63:14:91:
         b6:1e:97:7a:18:8d:32:46:3f:b8:3b:73:36:f6:c9:a6:76:6c:
         2a:bc:5f:8d:c0:86:65:75:0d:61:db:1c:63:c9:56:46:cf:ee:
         67:2c:3f:31:7a:b3:db:5e:28:cc:03:6c:55:04:3d:71:6e:a7:
         d5:d7:44:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:32 2024 by rpki-client on console-fra.rpki-client.org