Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
File:                     d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa (raw, json)
Hash identifier:          C2xN3qDV0FFCfe5eXPs0ydwx63JRrbk1/+a8oUDdwrY=
Subject key identifier:   33:BB:C8:DC:00:D5:D9:00:DD:BE:A5:CB:67:08:88:FB:B1:ED:64:E3
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F43285847CFD4D68ABFD088DDE9E1A980
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        216.185.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d6:8a:bf:d0:88:dd:e9:e1:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=0138f9dc-c304-4f1a-8fb0-6c735d8d995d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:09:47:85:76:4e:21:dc:fe:62:3b:20:c8:
                    26:72:12:f0:9f:95:18:79:84:02:a3:38:44:23:05:
                    b2:04:2f:9d:8f:a6:50:c2:dc:a5:04:5a:a5:7e:b0:
                    9b:b7:ee:e9:92:c4:22:11:10:8a:b5:8b:e3:73:23:
                    9c:14:39:71:5b:3c:76:15:a2:7b:cc:4a:82:89:c1:
                    48:04:09:c7:80:a2:44:c5:71:e1:ff:40:50:f2:f1:
                    07:e6:36:de:27:64:00:68:07:81:fd:35:b8:4b:0c:
                    1d:2b:12:95:7a:0e:54:42:67:94:85:44:5b:c4:ae:
                    68:f2:b3:ef:be:2d:b6:9f:8e:7c:f6:58:d5:c1:c6:
                    c7:15:ab:4c:03:37:98:6b:a4:d1:72:19:5c:94:47:
                    93:61:17:18:fe:e8:fb:1d:6a:b7:6c:df:f3:c2:ad:
                    71:f7:b2:f2:cb:f7:7c:92:39:c8:bd:db:3b:d2:72:
                    d6:17:be:70:11:88:33:41:b1:5e:8e:57:be:90:24:
                    bb:66:fb:07:9f:b2:63:34:63:b7:7c:f1:66:2d:f7:
                    94:e9:b9:6d:fb:55:57:72:6f:1b:a1:26:4e:73:29:
                    18:00:7f:8e:0e:5c:ea:7f:7a:23:e9:f0:82:3a:1c:
                    0c:4d:46:b0:a7:c1:11:c1:ce:39:33:e0:d0:82:4d:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BB:C8:DC:00:D5:D9:00:DD:BE:A5:CB:67:08:88:FB:B1:ED:64:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:39:76:bd:59:5e:3a:5d:39:69:97:52:b1:b7:80:47:5e:2f:
         53:4d:16:52:82:0e:d4:08:76:50:03:9d:6b:6f:8c:c8:71:cf:
         15:9c:66:ef:26:37:bd:12:3e:ad:fb:d5:e4:2d:54:bf:71:a6:
         03:05:77:eb:f5:58:4b:b1:bf:bc:98:6d:d2:f0:b2:9a:15:99:
         e4:24:a6:9d:61:51:de:f8:10:91:e3:54:05:15:eb:f2:52:fd:
         fb:34:65:5a:f6:13:36:80:2b:eb:d5:19:bc:ed:47:d8:f5:4e:
         25:5a:b7:e6:4f:d0:f0:f1:67:93:56:f1:05:79:6d:f0:dd:bf:
         be:8d:43:46:dc:7c:53:b1:80:04:2c:1e:25:cc:58:e5:f0:ce:
         62:65:7a:b0:29:ea:88:bf:c2:c9:2b:c4:8c:07:a5:66:ff:66:
         25:16:26:96:1a:84:71:dc:68:4d:cc:86:06:9e:ef:33:87:34:
         8a:1b:6f:90:b7:bd:94:7a:58:4d:47:9b:6f:7b:55:12:43:6e:
         37:7c:d0:13:e3:58:ef:0f:6a:33:70:e4:88:8e:71:f9:10:be:
         6f:6b:20:04:f0:35:c9:22:14:8a:bf:91:4b:3c:fa:1f:c3:47:
         8c:44:bf:24:df:3d:d0:09:67:c6:17:0b:7c:b0:aa:62:f9:de:
         cf:ae:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:13 2024 by rpki-client on console-ams.rpki-client.org