Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa
File:                     3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json)
Hash identifier:          l1YpkNgh76ivQ6WYkoOFyeTMbR9vh8Y/fpIL1Nes+6Y=
Subject key identifier:   C0:92:DD:D4:F1:A9:96:FD:D0:63:98:5E:85:E4:7E:3D:DB:54:48:C7
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584774FBA3C6C983ACADCC9F4A80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     13576
IP address blocks:        216.106.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:a3:c6:c9:83:ac:ad:cc:9f:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=9c3f5b78-3d70-4144-989b-89987951648d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:f5:0e:47:64:e2:55:9f:be:72:9c:02:c3:
                    2e:11:84:88:4c:e7:11:0f:fb:95:64:99:76:26:64:
                    e7:0f:45:71:33:98:7b:f0:c4:9c:da:37:80:48:9b:
                    23:11:fb:d0:41:8f:9f:ff:54:e6:99:b8:bf:33:c3:
                    09:a5:56:cc:25:f3:ee:97:a9:35:1c:e7:32:a9:45:
                    63:6a:b0:0c:4b:10:41:03:f2:61:50:0a:94:ef:1c:
                    3c:13:42:99:8d:31:c4:92:c7:47:86:3b:60:ea:23:
                    31:2f:05:7d:30:6a:0c:88:13:f0:9f:9b:15:a2:44:
                    97:db:eb:30:6e:3c:0a:fc:24:89:2c:a9:d3:a1:bb:
                    a3:34:74:95:79:ba:86:ec:80:90:bb:47:95:dc:ca:
                    38:32:b6:28:cb:e7:7d:ef:49:58:6c:5b:2b:b5:e1:
                    bb:73:93:ea:9c:30:68:b7:3b:e9:79:01:ba:c2:c4:
                    48:f5:10:5c:0b:12:00:d9:34:04:a8:ea:bd:65:1d:
                    97:98:3e:d0:8c:e0:ad:8f:87:46:6c:49:97:c6:9a:
                    ba:7e:17:52:19:8e:b5:ff:d5:69:5b:8a:07:bb:ae:
                    5a:ba:6d:10:70:d4:13:5d:32:07:1c:5f:b8:76:61:
                    6b:09:50:f7:66:b6:68:aa:68:06:5e:a9:72:e5:c2:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:DD:D4:F1:A9:96:FD:D0:63:98:5E:85:E4:7E:3D:DB:54:48:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:7c:34:87:a0:8b:3d:fd:c9:7a:46:f8:71:cb:d3:65:3f:
         7a:2d:e4:5c:ea:e0:c7:1c:ed:1a:b2:72:96:3b:8b:aa:34:58:
         03:7b:16:51:57:dc:72:aa:89:2d:ec:e2:a8:e0:31:d4:3e:c1:
         74:6a:14:9a:ff:14:f1:2a:0b:bc:1f:b2:1b:24:86:87:6f:a5:
         b9:ae:1c:38:9d:4d:71:c1:95:ca:f8:d7:79:f1:68:ef:fc:8d:
         39:49:55:d7:03:53:4e:2b:6f:93:b0:03:82:f6:ff:66:11:57:
         19:85:bd:f0:5e:73:49:80:44:74:b0:b0:55:56:7e:77:ab:29:
         9b:ea:48:92:0a:53:c2:99:59:5a:0d:ba:b3:77:0c:ce:d9:cb:
         ca:9c:dd:04:88:0b:24:e9:1a:79:84:79:02:80:b2:8b:4f:e1:
         d7:f3:db:72:6f:9f:d6:c4:1c:18:0d:a3:2b:f0:d2:1a:38:96:
         48:e7:55:c1:12:88:41:dc:ca:b7:af:e0:da:e5:2d:8a:2d:64:
         9d:f5:e6:b7:db:f5:58:e6:ba:37:c1:07:a9:99:e8:98:d8:06:
         5b:c4:b9:ba:15:ec:97:7e:3b:a2:75:83:ad:55:e2:82:c5:28:
         09:89:e1:fa:ea:f7:24:af:87:65:39:cc:3a:57:a2:4e:ce:00:
         eb:62:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:13 2024 by rpki-client on console-fra.rpki-client.org