Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/8d1c59bc-6f98-3e69-9df9-71a426e6cbc8.roa
File:                     8d1c59bc-6f98-3e69-9df9-71a426e6cbc8.roa (raw, json)
Hash identifier:          l8MZjJLzDe7FE3V2e22m3/Unt1ggbDbf+RTVT5TLufM=
Subject key identifier:   4F:F2:63:EA:EF:8E:99:4D:52:E1:4C:06:F9:E7:4E:56:CA:3F:9F:88
Certificate issuer:       /CN=06bf1e4f-42a6-423f-8cc1-b96d41424679
Certificate serial:       010D0C9F4328584726D085BD6498F83E21B23C20
Authority key identifier: D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/8d1c59bc-6f98-3e69-9df9-71a426e6cbc8.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     19515
IP address blocks:        216.137.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:85:bd:64:98:f8:3e:21:b2:3c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bf1e4f-42a6-423f-8cc1-b96d41424679
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=ef0cb851-e764-4ad9-95e9-e10496fd6762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:9c:00:69:7c:2a:b1:a0:50:57:49:34:45:
                    27:cb:54:8a:65:79:3d:7d:66:41:9c:a1:ac:5b:2d:
                    df:4d:cc:53:b0:b1:d7:53:c2:d0:25:5c:66:45:06:
                    e7:d7:ca:ea:bc:bf:69:9e:ab:4e:5c:25:db:c5:9d:
                    63:55:36:6e:98:cc:3f:72:61:1e:1d:56:10:58:28:
                    b0:ac:49:f5:fb:be:24:a1:e5:32:e3:da:fa:90:4a:
                    8b:08:b0:5c:b8:e8:e9:1c:db:e0:62:72:ec:6c:30:
                    ea:6a:57:d4:06:ae:24:62:4e:48:0e:6d:fc:b4:4d:
                    52:61:60:37:60:1c:c4:3b:c1:78:84:e0:7b:df:7b:
                    2f:95:f5:ab:82:49:c1:df:c9:b4:45:88:15:47:66:
                    90:95:a7:8d:5a:62:ed:39:16:f6:90:3d:3d:91:af:
                    96:8e:8a:e1:a3:df:fd:88:6c:df:47:e6:6f:7e:97:
                    d1:0f:c0:fd:2a:c5:81:93:3c:07:13:70:47:16:94:
                    49:82:09:34:2a:21:87:50:e7:c6:23:67:26:a2:c2:
                    0a:47:c6:f1:9a:55:07:f2:47:81:5d:ee:e6:5d:d8:
                    f4:9e:c1:5e:70:8a:1c:2c:64:7d:8a:00:a6:8f:52:
                    55:c6:9a:91:15:fb:45:5e:b9:46:4f:c7:ba:31:f7:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F2:63:EA:EF:8E:99:4D:52:E1:4C:06:F9:E7:4E:56:CA:3F:9F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/8d1c59bc-6f98-3e69-9df9-71a426e6cbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679/06bf1e4f-42a6-423f-8cc1-b96d41424679.crl

            X509v3 Authority Key Identifier:
                keyid:D6:19:A9:4B:85:78:DD:AA:32:4C:72:65:44:61:07:20:7C:21:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06bf1e4f-42a6-423f-8cc1-b96d41424679.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:df:12:d6:af:1a:e6:05:95:db:c6:bc:6f:9e:3f:eb:9f:c7:
         da:61:51:7d:03:26:75:13:0d:4b:5f:08:42:55:c9:14:83:14:
         4d:70:86:3c:dd:a4:52:79:0d:94:06:e0:63:54:d3:43:67:4e:
         45:ac:70:72:e2:45:9a:c8:bd:45:b7:12:09:0c:2f:08:c9:23:
         5a:94:63:f5:38:8b:38:d9:76:61:0d:aa:d9:ef:92:a6:98:a1:
         2b:3b:a6:9f:b2:32:ee:dd:30:4d:9f:d8:e3:f3:51:ee:5d:84:
         68:45:58:6a:aa:f8:b1:96:e3:88:1a:39:33:9a:2c:43:b1:2f:
         24:8a:e6:9f:47:bf:6a:f3:82:27:2c:21:16:8d:56:4a:8e:1b:
         56:52:8b:7d:61:f3:6b:e4:e1:88:ff:f3:a3:7b:e8:a2:6a:e6:
         97:73:ec:1e:5d:f2:c5:42:7a:a1:1d:18:4c:32:c2:26:fe:b2:
         7d:c5:c5:39:15:96:9d:ee:89:9b:2e:53:ba:37:3f:ec:bb:be:
         74:7e:6a:48:70:f0:d0:5a:46:09:66:ce:29:0e:9e:84:2e:a7:
         ed:4e:6d:2a:ed:bf:f2:48:07:2a:e9:ea:08:6a:8e:58:2d:c7:
         82:7d:0c:6e:cb:9a:6d:28:ef:6e:0e:1b:65:1b:63:f0:5a:e0:
         ad:9c:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:06 2024 by rpki-client on console-fra.rpki-client.org