Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa
File:                     7c810100-67f2-339c-bdb6-a910305f8c5f.roa (raw, json)
Hash identifier:          YmjRcNmCYGmvObQTvqHczAAxC6jBoqwzEhEG/7V1kJY=
Subject key identifier:   78:93:24:65:99:66:E1:44:C4:D3:2D:BB:46:4E:AB:91:85:56:BE:FC
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F432858480068131361036FD8711B7800
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa
Signing time:             Mon 25 Nov 2024 23:36:35 +0000
ROA not before:           Mon 25 Nov 2024 23:36:35 +0000
ROA not after:            Sun 23 Feb 2025 23:36:35 +0000
asID:                     395285
IP address blocks:        216.210.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:68:13:13:61:03:6f:d8:71:1b:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Nov 25 23:36:35 2024 GMT
            Not After : Feb 23 23:36:35 2025 GMT
        Subject: CN=a22d650a-2e5a-4759-8d8d-d3c83dd125b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:49:c1:5b:5b:75:43:15:c3:30:43:41:c8:
                    93:aa:48:a0:6c:d6:b2:38:43:be:8e:d5:72:25:47:
                    8c:d8:3d:b1:ff:af:1f:fa:1a:69:e1:de:c3:0d:8d:
                    1f:1b:23:c7:8a:7d:b7:68:f6:bb:9e:cd:6e:e0:d3:
                    e4:8b:db:1f:87:05:1b:b7:75:97:95:2a:7f:19:c2:
                    9a:56:e9:66:1e:5c:b4:74:b0:53:b4:e7:ce:7b:ca:
                    45:c7:76:d4:a3:80:33:c7:11:74:8c:3e:34:77:f2:
                    5a:25:f4:d6:6d:70:79:a7:d0:14:3d:f3:fc:ba:d4:
                    a9:bb:fd:57:d1:04:7b:71:17:e3:bf:f4:79:0b:0e:
                    dc:08:c4:44:ce:f1:b3:18:91:77:56:64:5e:2f:46:
                    c7:08:a9:1f:00:74:52:a9:f0:27:cc:2b:b1:01:8c:
                    a6:a6:a1:da:d0:81:f4:4f:08:7a:49:7d:b1:a5:4c:
                    aa:0b:ce:22:c6:05:25:da:d8:7d:bb:41:0c:bb:0e:
                    b9:c0:0e:ce:8e:12:1b:a3:84:cd:0c:5a:74:1d:39:
                    24:ed:b4:53:b3:d7:90:91:37:e5:4f:76:4c:37:12:
                    18:4a:80:93:e9:07:ba:08:af:65:6c:ed:0d:e2:b1:
                    da:07:9b:79:34:f0:ee:de:02:80:6b:74:b8:01:41:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:24:65:99:66:E1:44:C4:D3:2D:BB:46:4E:AB:91:85:56:BE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.210.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:c3:84:ce:94:d5:65:b3:bb:35:17:c8:08:be:7f:73:92:
         fd:21:16:5a:b3:af:10:92:a8:8f:70:af:cb:5e:b5:9d:42:13:
         fc:71:d1:c4:97:80:0f:f7:e3:99:8c:90:c8:86:41:8e:42:92:
         33:96:d5:41:38:f9:08:94:f0:72:71:40:87:ed:33:c6:f8:24:
         3f:04:74:e6:c0:82:b6:0a:1b:5c:12:1a:da:29:99:8f:e6:12:
         18:a5:6e:00:ea:b4:d5:71:45:cc:9f:b7:cc:11:71:cd:2b:60:
         82:4f:af:b4:ed:04:b8:ee:53:68:c3:85:e6:23:ff:17:13:0b:
         f6:45:da:5c:e2:db:eb:c0:ed:7e:72:a3:eb:bc:d6:59:74:06:
         23:4d:ce:39:48:42:d0:01:eb:dc:ca:9a:5b:7f:d1:6a:4c:55:
         9f:54:7c:4c:ea:a0:54:14:78:b9:e7:90:f8:b2:57:07:c0:e7:
         f5:0a:25:a7:9c:51:3d:0d:56:b4:28:57:75:82:0f:b6:bf:13:
         7f:2b:04:86:02:47:58:27:bb:7f:d6:19:49:af:43:af:64:89:
         50:28:dd:f6:7e:fe:65:59:94:e5:4f:a6:03:26:c8:ef:14:5b:
         f1:13:9c:54:94:41:6e:c1:8b:e4:87:74:71:64:71:b1:a3:6e:
         a9:66:02:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:47:26 2024 by rpki-client on console-fra.rpki-client.org