Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0efc819d-a15f-322d-b1a4-b2f0e69f6155.roa
File:                     0efc819d-a15f-322d-b1a4-b2f0e69f6155.roa (raw, json)
Hash identifier:          +lHohGOjjtAzhTRDRh5IXwDFUdSEB4DV3hAJZGOHAq0=
Subject key identifier:   CB:F9:A7:AC:E6:04:34:1C:CC:4A:EF:FE:6E:B3:09:F7:8F:50:60:06
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858474420BF4160B7AFBCE86FA940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0efc819d-a15f-322d-b1a4-b2f0e69f6155.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     701
IP address blocks:        216.1.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bf:41:60:b7:af:bc:e8:6f:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=1392e36a-30ca-4247-9b48-6838432be0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:e5:39:42:56:fa:67:a3:6d:de:d3:af:96:
                    f4:eb:04:50:46:0d:83:9c:18:c4:9e:34:2a:ff:1a:
                    f1:7a:75:29:91:1b:ef:66:8e:7b:8c:67:a6:44:5c:
                    dd:81:ba:2a:a4:44:b6:1c:0f:d1:28:94:29:ed:fc:
                    95:3c:54:3d:c2:44:f7:3c:72:88:f4:11:7e:6e:4a:
                    e2:56:32:ce:ba:80:c7:d8:a2:70:bd:0a:1f:d2:51:
                    33:77:e6:e3:34:17:e7:18:67:83:e7:79:35:18:c9:
                    08:7f:4c:8c:2c:c2:23:55:96:dc:16:e9:a2:92:1b:
                    27:13:80:c7:94:35:34:c1:d9:8f:4d:1a:fc:b9:fe:
                    c1:a1:3d:5f:92:93:57:be:59:d7:3c:df:9b:eb:63:
                    d5:34:2d:35:9b:c1:c4:4b:54:9a:2c:1b:33:2d:c2:
                    84:75:bc:f9:73:de:e0:02:52:d6:de:9e:b7:20:8c:
                    33:10:61:97:b3:54:2b:97:7e:63:63:78:97:28:5e:
                    ff:e9:3a:b3:95:14:e7:3d:e3:f6:84:8d:41:79:d1:
                    47:dc:db:12:36:b4:7b:21:cc:ac:1e:ee:c7:2e:19:
                    fe:05:4f:e1:27:f4:63:5c:8b:de:1e:3f:44:d2:32:
                    fe:bb:19:a7:bd:7c:da:77:7f:92:4f:0f:50:92:25:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:A7:AC:E6:04:34:1C:CC:4A:EF:FE:6E:B3:09:F7:8F:50:60:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0efc819d-a15f-322d-b1a4-b2f0e69f6155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.1.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:98:84:10:e8:f8:3f:3a:40:1a:85:fb:4c:8e:60:b2:a3:b8:
         55:ae:37:07:09:50:41:df:3c:8e:1a:20:a2:ba:77:e1:ef:c9:
         2e:7d:d0:c3:c7:6d:05:33:20:77:5b:89:88:23:77:6b:b0:ce:
         9e:38:93:74:1c:a6:a7:a0:7c:77:f3:1c:8f:c8:66:63:16:00:
         1d:7d:11:e1:cc:c0:60:ea:95:3e:77:b5:6d:2c:7f:f5:42:be:
         51:c5:2b:3e:c7:58:ce:7d:ab:98:71:db:6a:d3:5b:13:c0:55:
         72:53:25:82:c4:17:af:a7:30:42:4c:7d:f3:0b:10:85:07:b0:
         2d:cc:10:19:a1:c9:44:87:19:93:b8:c0:5e:f5:a0:2b:f2:5b:
         10:6d:61:a6:4f:71:88:9c:9a:a3:a4:18:20:2f:7c:7b:64:a5:
         fa:c2:4d:dc:43:bc:c7:92:e6:51:61:d2:0d:d3:2a:c3:2a:c3:
         32:ca:e3:d3:fb:16:9a:38:3e:df:ea:10:98:c8:6e:7d:aa:32:
         b7:c5:a8:22:69:21:de:b8:cd:59:6f:ec:5e:04:78:bb:6f:94:
         bb:f6:c5:a2:1c:66:82:24:6c:25:1c:07:1d:81:57:08:09:b8:
         87:e3:eb:52:bf:50:70:66:18:e1:2f:60:73:23:34:a7:aa:2e:
         bd:a8:f2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:11 2024 by rpki-client on console-ams.rpki-client.org