Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
File:                     efe9fd20-4d24-3686-aa49-f25771fa77fb.roa (raw, json)
Hash identifier:          qtKZERWSq2H2UpQfG7646eg1d05nzRmeF+Knzn1Lsfk=
Subject key identifier:   76:73:CA:E5:BB:48:15:8A:5E:30:0D:10:28:2B:2B:B8:E7:99:D3:73
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847C1DF4B57E15A566CAD05E250
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     7262
IP address blocks:        209.9.216.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:4b:57:e1:5a:56:6c:ad:05:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=ebef41f8-8e3a-4daf-83c5-718a90eab431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:43:80:57:85:22:31:2e:14:ed:10:a0:8e:eb:
                    41:36:e5:ff:ce:e5:00:f1:9b:37:d8:15:d6:0e:e6:
                    b6:ff:32:c6:8d:06:8c:77:4a:cc:4d:81:44:bd:57:
                    2a:5c:41:41:a2:8c:1e:b2:b4:4e:3c:5f:9b:b3:6e:
                    4e:90:b3:23:4d:47:a6:31:74:48:15:1b:12:27:72:
                    73:35:bc:94:a7:59:14:54:c5:ff:d8:ac:e1:f1:7f:
                    1c:df:39:b6:fc:05:6b:a4:f3:84:ae:77:b5:40:27:
                    6a:32:7e:83:db:b6:85:33:3f:80:a2:fd:2a:af:3e:
                    33:6f:19:a0:af:69:43:c3:9b:f6:84:51:8e:0d:fe:
                    b6:41:60:1c:bf:24:de:a8:94:e2:5b:84:6e:00:30:
                    e3:9f:77:4c:d3:b6:4b:b2:bc:1a:d6:fa:6c:a2:97:
                    aa:62:8b:ef:a6:b9:10:00:9a:7a:5a:11:e7:0f:eb:
                    48:83:2f:0e:d9:82:62:17:8c:70:e1:a1:b8:e0:e1:
                    18:80:e3:6e:31:6a:01:69:c4:22:d5:0c:1a:0b:2f:
                    11:6b:67:93:e3:07:ad:d7:b6:8b:08:8b:c5:11:da:
                    e6:5f:94:12:74:e4:25:d8:fc:d5:58:7e:cd:7a:8a:
                    93:32:80:dc:96:5d:f2:0a:7d:42:04:1c:17:e5:27:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:73:CA:E5:BB:48:15:8A:5E:30:0D:10:28:2B:2B:B8:E7:99:D3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/efe9fd20-4d24-3686-aa49-f25771fa77fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7a:2e:0e:e0:ce:84:00:8c:19:fb:c2:3b:1f:e2:42:4b:1e:
         6f:fc:a9:d0:ad:ce:30:a1:46:38:3b:ea:c2:41:13:ec:94:54:
         18:89:75:1f:f2:6b:dd:8c:eb:c4:e8:df:b1:92:06:f0:bc:f0:
         63:f7:52:b6:5f:5c:dd:da:f0:9d:fe:4f:72:8a:58:e3:a4:50:
         41:3d:b4:03:2c:e8:d3:0f:4e:f2:6f:cc:09:c5:0a:2a:4e:4f:
         e4:75:3c:d8:fe:23:19:ce:03:7a:03:f6:4f:00:1a:e1:9b:3a:
         b9:0c:99:70:49:e4:86:aa:49:5c:2c:c3:ce:86:c4:db:ff:e5:
         09:6a:ee:4b:67:a0:0e:04:ad:94:e5:4c:8e:9d:20:08:5a:a0:
         3c:48:2a:99:e4:f9:ca:a1:08:02:ca:5e:a8:8c:7d:c0:19:9b:
         ad:5d:c8:40:88:a5:fe:12:82:f4:68:d0:de:12:fc:93:ed:88:
         3b:ab:bc:78:ad:d8:c8:03:9b:7a:35:a9:09:0f:15:e9:82:6f:
         27:c7:a3:7a:63:59:34:db:ec:79:08:fd:e5:87:98:f5:4b:7c:
         af:7d:68:d9:94:e3:97:19:5a:3f:61:59:0a:67:e2:42:32:99:
         4a:fb:ae:a9:18:c4:75:2b:30:77:23:ac:9f:30:fe:47:d0:84:
         d5:5e:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org