Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa
File:                     733814ea-3460-36b3-964e-555b6261ca95.roa (raw, json)
Hash identifier:          JvqLAQBPL02l2DPijJqSrp1lVGIfDOSPoduIEuF5ev8=
Subject key identifier:   6C:4B:3C:27:9A:08:64:15:B7:7B:B3:F5:63:CF:B5:AE:4F:3F:00:7E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285847E62AB0E08F017CE0FE57CA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     15169
IP address blocks:        216.58.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:b0:e0:8f:01:7c:e0:fe:57:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=d4bdaf4a-c527-4d34-842a-0722200ae036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:3f:f8:93:1d:e2:2c:13:bc:87:ad:c5:bf:
                    fc:07:08:c0:d1:9b:e4:3b:a4:e1:d1:60:1f:77:51:
                    84:69:0f:15:80:18:f3:06:1f:26:82:3a:62:4a:af:
                    5e:60:f8:4d:63:e6:10:ab:c0:b0:e3:5f:33:6d:f4:
                    1a:09:af:ec:34:3b:9f:eb:b4:86:72:dd:5b:e6:4f:
                    20:37:d2:45:19:3e:64:74:17:fd:d7:a4:2c:b0:83:
                    ad:e7:3e:a1:6f:bf:a0:5d:9b:20:8e:69:2a:c6:2e:
                    3a:6b:e9:fa:e0:c4:97:cb:dd:55:8a:f6:43:68:5a:
                    ac:cd:e3:ab:20:c9:90:12:99:1e:3e:9e:71:8a:90:
                    8a:c7:2a:64:ee:88:15:da:b2:a6:cf:78:83:d9:84:
                    59:a4:87:64:72:d1:eb:fb:29:aa:a9:9a:9f:f0:a7:
                    b4:11:61:b0:c9:e7:a0:3e:b9:34:5f:c3:27:08:e0:
                    d3:47:91:27:6e:d4:28:59:e5:88:26:59:54:b3:82:
                    51:cf:cc:b3:89:23:c6:30:2d:4c:b5:dd:7c:7d:01:
                    5c:d9:47:48:75:41:85:6e:4b:05:8e:49:a6:a6:7d:
                    d8:7f:28:e2:e2:db:cf:dc:64:cd:ae:76:cc:68:2b:
                    46:67:cf:1d:bb:7f:a4:8c:a2:80:4f:a6:97:f6:e4:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4B:3C:27:9A:08:64:15:B7:7B:B3:F5:63:CF:B5:AE:4F:3F:00:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/733814ea-3460-36b3-964e-555b6261ca95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:dc:bf:c0:40:be:b5:cc:10:75:d7:99:14:99:20:cb:7f:
         ac:46:e5:4a:1f:34:36:bf:61:03:45:cb:06:80:ed:9e:3d:a9:
         ff:49:6f:cb:e0:e8:d7:57:64:28:83:7f:93:39:7c:25:69:43:
         8d:a1:d0:2e:e0:8b:38:8e:57:42:09:1f:0b:1e:e2:ff:df:f2:
         c0:53:bc:5e:81:e9:28:63:42:53:85:8f:9b:92:09:1c:ae:a2:
         43:1f:65:76:a6:3e:ec:7d:aa:ea:06:8d:32:67:43:22:ab:29:
         b3:b9:a4:f0:3d:20:59:40:ee:6e:e3:ea:9d:45:49:ef:ec:25:
         b8:ba:b6:07:2a:40:f8:93:05:ed:5e:53:53:5f:ac:84:02:1b:
         b1:db:ce:7b:25:d3:85:d8:bf:ae:6f:08:4a:43:9e:1d:db:ee:
         ea:dd:95:b6:e2:93:9b:93:9e:d2:0a:f3:76:d0:29:17:e3:53:
         50:f0:01:5d:b4:31:f2:4d:af:06:a0:1a:3e:f9:29:33:4d:09:
         f6:bb:56:4f:15:d8:82:0a:95:4b:d9:3a:a8:8f:51:70:ce:fe:
         9f:cc:67:30:63:c8:b8:0c:2f:17:70:c5:bb:7b:f1:85:94:8d:
         3e:ff:c3:64:68:d8:da:8e:28:15:a8:73:fd:49:0e:dd:d0:bd:
         f0:c3:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:17 2024 by rpki-client on console-fra.rpki-client.org