Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
File:                     b22085cf-e389-3e14-9173-666e83976274.roa (raw, json)
Hash identifier:          pXJtwNGvh+fOEk21mjxd+rrtlgcbiR6Z9hif3eXGENA=
Subject key identifier:   B4:FC:BA:95:C6:30:AC:1F:00:6E:AB:DF:96:6B:21:F6:9B:45:E8:8B
Certificate issuer:       /CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
Certificate serial:       010D0C9F432858472C65CAA4785F04E2565C8F58
Authority key identifier: 34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     62700
IP address blocks:        192.210.16.0/20 maxlen: 24
                          2620:44:4000::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:ca:a4:78:5f:04:e2:56:5c:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=40cb125e-7e51-49ad-a65c-65d2bfd21d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:93:43:72:96:ad:79:6a:50:32:71:0e:ce:ef:
                    61:a3:bf:f8:93:18:02:4b:40:3e:4e:b4:e4:72:f5:
                    4f:f5:5c:6d:8d:7a:f3:b9:bd:f5:71:57:eb:af:7f:
                    ae:ff:ef:d9:7f:a3:c8:50:83:58:ff:2b:69:b7:d8:
                    d3:54:07:df:c1:8e:ce:84:10:5f:72:e9:6e:ae:c1:
                    c6:59:5b:92:2b:b0:e2:94:e1:00:0c:46:ab:8f:79:
                    2b:59:c3:d3:77:b6:cc:9c:ca:78:25:23:55:50:f2:
                    0f:43:01:67:db:01:7f:e9:9c:7b:88:5a:43:0b:b5:
                    51:36:bd:73:6f:cc:d1:7d:71:68:9f:b1:d7:e8:b6:
                    0e:3f:db:40:21:96:60:a6:c0:b9:ff:e8:e4:07:19:
                    c6:b9:c3:a4:63:d3:36:2c:85:97:42:32:ee:33:c6:
                    d5:6e:81:11:6e:d4:c1:86:37:de:65:24:44:cb:a1:
                    95:d0:1d:ae:17:9a:2f:12:4b:42:96:a7:34:c2:f1:
                    0c:8e:cc:82:ab:0e:1d:a5:d2:d2:0b:5f:f6:87:a0:
                    bb:04:0f:b9:ea:65:d4:87:9c:09:fe:20:72:db:8c:
                    d1:ce:ee:cf:8d:4c:59:9e:83:81:1d:f5:1c:99:88:
                    d3:cf:ca:b2:ae:33:04:1f:82:b1:23:81:9d:9e:15:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FC:BA:95:C6:30:AC:1F:00:6E:AB:DF:96:6B:21:F6:9B:45:E8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/b22085cf-e389-3e14-9173-666e83976274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.crl

            X509v3 Authority Key Identifier:
                keyid:34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b9:c0:1f:76:b2:5a:b7:5d:07:1d:e0:56:f6:32:b8:82:ff:
         30:4a:c7:49:9d:cb:0d:13:18:ba:b9:2d:8e:4f:fc:0b:65:6c:
         49:df:b4:09:3c:a8:e0:aa:73:f8:83:61:27:c9:49:de:e4:45:
         92:de:54:09:20:b5:81:c1:93:1d:9b:f2:e6:96:e7:81:c5:87:
         a0:d8:57:e7:c5:23:43:f0:20:47:86:33:26:56:cd:ee:9a:dc:
         4e:94:3c:37:88:31:43:f7:f9:a0:f2:d2:df:10:13:78:3d:8c:
         e4:7d:d6:06:1d:46:dd:d2:d7:47:14:6f:e6:19:7f:4d:d9:76:
         0b:19:84:27:e6:64:4f:d9:25:1e:de:05:e7:6f:d8:b4:ea:57:
         8e:8d:47:9e:04:34:61:95:58:fc:8f:22:21:6e:18:29:eb:45:
         72:9b:85:24:f3:7f:a0:b6:78:ea:80:2e:88:af:6e:39:e6:07:
         b5:57:b5:54:11:f5:60:9c:d9:d4:e5:06:66:90:dc:fd:c5:a8:
         a3:b4:25:b7:6b:33:eb:4e:1e:0e:d0:e7:e5:47:d9:62:b5:e6:
         2c:73:0c:82:c5:3c:dc:44:e6:0e:be:cf:7b:f7:ed:5c:0c:ca:
         7d:24:6b:fa:d9:5f:76:a3:29:b3:46:96:25:a4:dd:60:f7:75:
         c4:d8:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:14 2024 by rpki-client on console-fra.rpki-client.org