Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa
File:                     15302cbf-57f0-373f-96de-03dd65f8b849.roa (raw, json)
Hash identifier:          Tf/8etEfRwekra+Of+N3abQKrtolRn8sS2cRStBIpSU=
Subject key identifier:   2F:62:B0:49:62:9B:2A:F0:9B:85:AC:FA:75:80:C1:0C:D9:D6:84:BD
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584774FBAC8A89611B21CAECA400
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     13576
IP address blocks:        216.106.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:ac:8a:89:61:1b:21:ca:ec:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=d7d713b7-8b3a-4302-83d6-e20e87545fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:8f:51:fb:57:32:72:2a:7b:08:a0:a9:1d:
                    0e:ef:41:62:7e:86:8a:23:19:2b:76:de:71:43:3a:
                    bf:16:e7:05:d6:45:4d:35:0b:f5:6d:e5:5b:cb:9e:
                    a0:a1:a7:50:31:0e:ed:02:d7:66:0c:ab:cd:7a:b7:
                    10:32:d3:bf:a5:5b:82:c2:af:21:ba:c6:61:f2:2d:
                    95:72:c7:7d:ee:a2:73:a3:e0:a7:01:72:08:95:84:
                    2a:8c:9a:33:ed:1b:35:93:24:d0:f4:dc:83:47:45:
                    75:89:eb:e3:d6:f4:7a:07:a1:21:9a:06:da:c0:0e:
                    9d:23:fb:ca:b7:60:15:79:ed:ee:be:78:fb:67:4d:
                    d0:87:9f:07:17:e3:b9:0c:20:44:bf:f8:82:77:90:
                    5f:46:88:48:03:3f:36:53:a3:3e:39:35:9b:90:3f:
                    bf:04:81:2c:94:f2:94:2e:2d:09:af:29:5f:40:e8:
                    b4:bb:38:9f:61:fe:4a:43:ad:1a:bd:fb:d7:b3:aa:
                    36:ec:f5:a5:39:da:af:e0:58:35:ad:b8:5a:49:30:
                    24:9f:8c:66:e8:cb:7a:d3:2f:e8:e5:7f:b2:4d:96:
                    11:5e:06:86:20:4b:ed:a9:dd:a1:6a:80:89:e3:82:
                    38:69:ad:5e:9f:79:71:1c:e5:a5:57:cc:ab:2f:bb:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:62:B0:49:62:9B:2A:F0:9B:85:AC:FA:75:80:C1:0C:D9:D6:84:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/15302cbf-57f0-373f-96de-03dd65f8b849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:83:da:2d:3b:04:e7:b3:16:f1:f2:7b:9a:64:78:87:89:27:
         4e:17:2d:68:9f:b1:9c:88:9e:89:a4:eb:55:43:d5:4d:cc:fd:
         1f:19:a4:54:56:3e:fe:65:fc:a3:39:7b:86:e1:7d:e5:17:13:
         d7:54:95:9d:b0:58:ec:cb:23:e0:69:d7:53:ce:41:80:67:d7:
         b9:75:7b:a9:e0:a7:81:e6:c0:2b:ab:8a:7c:4d:62:5c:d1:0b:
         4e:dc:f9:e1:ef:e8:de:bc:c5:a4:d0:10:4e:1a:fe:ab:3f:e4:
         ec:32:fb:49:91:b2:01:dc:a1:a4:f9:40:60:ca:1e:d3:8f:81:
         8c:f1:50:a4:50:c3:cd:6d:f9:46:2f:28:d4:fd:88:11:2b:f7:
         61:fc:03:26:f6:19:aa:2b:08:c9:ee:63:91:15:8f:c4:29:8a:
         2e:e6:84:0a:79:2f:0d:d2:e6:57:37:f2:37:45:47:81:1f:39:
         5e:03:57:e3:c3:62:58:78:53:34:49:ed:d9:e4:b3:ad:9c:1f:
         8f:b3:e8:14:41:c8:d4:2c:4c:b4:1e:5e:d5:13:4c:40:05:d9:
         66:67:8d:21:03:65:ff:22:4d:d4:df:b6:8d:46:08:02:35:0a:
         2b:12:1f:0c:c9:21:cd:fb:a7:4e:72:1c:f1:68:89:46:99:d9:
         ce:73:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org