Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
File:                     598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json)
Hash identifier:          MagvHgAjXd9l0loy6JYwhCFgSCpn3SswRsmKVsE9oN0=
Subject key identifier:   4F:A9:E1:EE:F1:72:5C:D1:94:22:D7:67:4B:CB:12:3F:EC:23:75:6B
Certificate issuer:       /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Certificate serial:       010D0C9F4328584726D0851BD7834E97750FB4A0
Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        67.221.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:85:1b:d7:83:4e:97:75:0f:b4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=26752551-57d4-481a-8b8b-5c2a1f2865e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:84:14:8a:0e:5f:8b:fa:24:11:93:ce:25:
                    9d:a6:14:49:52:7e:34:09:fd:33:2e:68:db:cf:c3:
                    5b:bd:97:d0:11:5f:bf:11:d7:38:45:c7:fe:52:82:
                    f5:0c:3c:7b:58:b5:a8:4f:3f:61:35:78:9b:ce:4e:
                    56:c8:df:cd:9e:fe:d9:b0:b2:20:37:f0:bc:46:0c:
                    f9:fc:7a:52:fc:b5:d5:eb:d9:e0:34:10:94:1f:c9:
                    9c:30:cd:fa:2e:a0:10:2a:78:23:f8:76:af:e5:f0:
                    21:37:45:02:3c:29:1a:c8:04:d7:51:1f:14:93:c4:
                    4b:ae:74:99:7f:7d:79:55:77:6f:e4:3d:7f:b4:aa:
                    7a:90:59:7e:4e:2a:97:56:c9:20:9a:e0:9e:b7:3b:
                    10:00:f0:48:b1:0c:76:98:e3:75:b7:6d:a3:87:7e:
                    2d:45:27:a8:0b:c8:4b:4c:b6:98:0b:85:31:22:8e:
                    6d:78:ca:e8:f4:82:45:3c:51:3f:fe:e4:88:d5:a4:
                    1a:d7:c1:da:54:12:48:fc:4d:10:f1:d0:75:a8:87:
                    21:0e:e8:da:e4:4a:2b:a2:4d:47:c8:a6:33:3f:b2:
                    b1:0e:ae:1a:30:a3:fd:15:69:e7:24:70:ef:7b:2e:
                    58:e0:db:e1:08:52:9c:cc:ae:ff:44:c3:57:1c:d0:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A9:E1:EE:F1:72:5C:D1:94:22:D7:67:4B:CB:12:3F:EC:23:75:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl

            X509v3 Authority Key Identifier:
                keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:01:46:e0:b2:8f:68:87:ea:4e:14:82:d6:7a:1a:27:d8:
         31:bb:d7:43:a3:f0:bd:4e:d6:d1:6b:8a:ca:d5:a1:8c:1f:37:
         47:c5:7d:fe:1a:12:33:cd:35:cc:3f:67:35:71:1a:52:71:16:
         bd:fc:06:19:76:40:44:94:40:10:30:6a:02:22:b4:6a:b9:32:
         5e:36:57:2d:fe:59:ae:df:cd:52:f3:c6:18:10:00:db:65:e9:
         b2:82:ad:85:cb:34:99:ab:3d:8d:96:ed:45:0a:6f:fe:0e:32:
         12:21:a8:45:ab:42:c1:76:9c:09:f6:81:43:74:f8:7d:b3:1b:
         2d:1f:3a:07:0f:e2:3b:0e:8f:88:2d:55:e6:5a:fd:78:af:2f:
         f3:21:86:6c:ab:aa:95:f6:a5:fa:47:c9:5a:a6:7f:ef:2e:ca:
         0f:f1:f5:27:35:92:b6:f8:b1:65:f7:56:37:ae:f4:5e:8a:c9:
         29:c4:7c:f3:01:c8:c5:1e:3f:8b:f5:d6:d7:02:eb:2e:1c:2d:
         05:6d:bd:ba:73:ac:49:89:4a:e8:4e:64:69:f9:78:a8:f5:05:
         58:a7:5b:7c:ce:df:09:4c:61:cb:73:dc:1d:5f:97:ad:f5:b6:
         ed:47:c4:07:97:06:32:7e:d9:e3:e9:d0:b0:5e:05:b9:23:84:
         89:4a:ee:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org