Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa
File:                     082ea4bd-a969-33de-9f44-1e351bb1929c.roa (raw, json)
Hash identifier:          dJCQbFmryex+JAVnpE11vIQcoKFzUXa84EDe2FoD4TI=
Subject key identifier:   DC:27:3D:8F:B0:D7:41:04:45:27:60:BF:39:D0:BB:BF:C8:30:40:80
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584797E13FD51D899F049E26B900
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     33362
IP address blocks:        216.144.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3f:d5:1d:89:9f:04:9e:26:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=6c0b4ad7-5d9f-43de-b61a-04ac0e343651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:68:16:25:a5:f2:13:b0:ac:29:24:c5:96:
                    32:f1:ca:ca:a7:bf:0b:42:85:57:95:59:bd:6c:25:
                    fc:d5:60:d7:3e:0d:26:6f:47:ca:0d:c0:8d:a8:9f:
                    2e:76:c7:de:c5:fa:29:47:34:86:a8:51:b0:ac:aa:
                    9b:28:e2:0d:dd:ab:46:67:b2:3f:14:d4:3f:f0:97:
                    81:20:f4:01:3d:68:50:ef:76:1d:82:b8:0e:d3:fd:
                    b7:da:c0:40:78:dd:01:40:d1:59:e5:9c:0b:2c:57:
                    af:f3:00:bb:39:7b:7d:7b:5e:bb:d1:35:78:49:db:
                    bc:d0:51:8c:7b:6b:35:5d:23:86:ff:7f:d9:71:c9:
                    62:b9:4a:40:3d:05:d2:d5:e0:1d:7d:7d:8d:56:5c:
                    b0:16:fc:82:8f:96:35:c1:d5:e6:c5:5c:cb:1c:5e:
                    25:5e:7f:2c:0b:af:94:6c:1a:53:36:3f:0f:30:ef:
                    91:19:15:78:86:73:f8:3e:d6:74:7b:3d:ae:cf:88:
                    5a:2c:96:b5:7e:74:a1:d8:39:aa:78:88:d4:d8:ee:
                    e2:3a:3d:c1:c1:fa:97:1c:99:4e:12:16:7a:32:32:
                    af:30:0c:d9:92:29:17:ac:cb:a3:18:c7:e3:29:24:
                    63:f0:11:04:78:7f:8f:b7:f7:75:e2:e5:dc:79:60:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:3D:8F:B0:D7:41:04:45:27:60:BF:39:D0:BB:BF:C8:30:40:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/082ea4bd-a969-33de-9f44-1e351bb1929c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:b1:d0:4b:48:12:57:ae:7f:4d:62:a1:de:0f:b5:2b:cd:
         7e:52:42:f5:e0:91:00:01:74:9f:1e:78:9f:96:1f:c7:12:72:
         3d:1a:46:dd:b6:fd:ce:be:d3:13:7b:82:23:07:77:de:74:e9:
         b1:d5:36:68:78:0e:f1:23:1e:a9:e6:73:f1:0d:f7:57:be:ab:
         25:b1:db:b2:97:2f:a6:73:46:00:92:16:8a:4f:80:4e:bd:a9:
         54:1d:e4:95:5a:d2:d7:8b:98:89:ab:4f:c1:79:17:b7:9f:65:
         d7:98:4c:ab:65:be:8d:66:67:a8:41:2e:bc:a5:7b:be:81:98:
         c8:66:4e:98:d5:06:74:0f:5a:1e:53:de:cb:b6:80:3b:14:11:
         34:5e:69:a6:76:c4:2d:8a:a0:b1:c4:40:d8:8a:e2:85:db:bb:
         ff:44:4a:59:47:30:ec:74:ea:86:f4:80:89:d0:2d:75:ed:ad:
         69:0f:5f:8c:78:b4:75:3b:e4:5e:38:76:80:bd:b7:bc:c5:51:
         e7:53:6c:62:30:fa:ba:3f:77:4a:24:de:6d:72:78:17:3b:5b:
         45:d7:eb:94:64:86:d8:f5:32:61:e0:32:62:74:32:98:0f:41:
         4f:ad:77:50:c3:e5:76:97:e6:8a:af:89:92:15:c0:83:29:41:
         75:33:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:35 2024 by rpki-client on console-ams.rpki-client.org