Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
File:                     37bf2a82-973c-3206-b667-141f274e217b.roa (raw, json)
Hash identifier:          bNtlbWjGdcD6XyhuvefIci1lLJXgwFqWf7uupyyTZL4=
Subject key identifier:   0A:02:2A:41:AA:CC:83:ED:1C:9A:BD:4A:DE:88:47:63:23:36:D2:32
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F43285847362B552EA4B52B4CDA039980
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     16867
IP address blocks:        216.82.233.0/24 maxlen: 24
                          216.82.234.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:55:2e:a4:b5:2b:4c:da:03:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=d6bf7cd0-bdc5-4207-925a-2ed2b7677454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:e9:e0:56:82:8f:70:8c:0a:b7:5d:12:a5:
                    76:9d:29:c4:a4:7a:46:93:c6:4b:f3:04:f1:cb:ca:
                    0e:f6:ab:31:d9:c2:cf:17:7b:5b:39:01:21:0c:f8:
                    cb:a4:35:06:50:a8:40:46:3f:a7:83:a9:e9:59:ff:
                    14:96:db:f5:2c:28:36:92:a9:30:2e:72:61:a6:19:
                    7a:56:f9:8d:03:4a:69:dc:00:02:40:3b:1a:b2:cf:
                    53:82:13:df:95:cb:62:1c:32:f5:6b:aa:8b:01:92:
                    5f:76:65:24:16:f8:1b:36:f3:24:f3:10:16:2d:ca:
                    ef:f1:7b:0c:23:be:f3:e5:03:6b:da:c0:03:e8:51:
                    6e:d5:03:e6:b2:92:4c:f6:25:42:d7:eb:41:f7:bc:
                    72:6c:3a:62:0e:f6:b3:97:91:da:37:e2:0f:44:36:
                    0f:62:2e:fb:6d:c2:4f:b3:02:aa:88:b8:c6:91:eb:
                    c0:7c:76:15:8c:b8:d8:ec:89:3e:7e:9b:7e:1e:db:
                    9c:bf:40:c7:e3:68:47:c5:27:63:65:b9:31:5c:55:
                    54:c9:6d:fe:82:03:5c:1b:65:46:f4:05:7b:ea:34:
                    c7:92:c8:8f:8d:a8:89:5c:e4:cb:4b:42:5d:93:ed:
                    c4:48:4c:f7:8a:dc:96:16:15:7c:3b:58:f1:72:18:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:2A:41:AA:CC:83:ED:1C:9A:BD:4A:DE:88:47:63:23:36:D2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/37bf2a82-973c-3206-b667-141f274e217b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0-216.82.235.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:0e:92:ae:ee:99:38:09:07:a4:ee:24:11:f3:1a:00:16:
         df:b3:da:3b:42:0c:41:82:a2:25:c6:68:94:10:ed:68:53:c1:
         49:15:5f:88:fb:c9:1b:eb:5a:df:fc:10:16:cc:17:f3:9f:ae:
         d6:75:5e:81:03:70:46:91:ac:16:84:fa:f2:26:3a:65:c4:de:
         be:87:c3:d7:d5:3e:f6:81:38:c0:23:57:e7:7d:dd:f9:73:93:
         a3:54:05:8f:24:a0:c6:76:63:53:80:71:ba:bf:cb:cb:9a:ee:
         30:5d:63:c3:60:ab:61:e1:9d:6d:95:51:98:1a:30:87:1f:4a:
         f9:67:0f:26:82:46:98:5a:65:e6:32:1d:50:5b:f6:2b:65:3a:
         bd:32:9a:42:60:9d:e0:1a:dd:2a:2e:71:cf:03:6e:46:8b:3e:
         00:5c:72:7c:c1:24:ea:7c:f1:f2:02:7b:81:ed:0c:13:ca:e5:
         30:28:7b:90:64:ad:3c:29:3a:b5:94:7f:8f:0d:0a:84:3d:07:
         0f:e1:3a:1b:20:c4:df:90:9f:f2:52:6e:64:d7:c9:9c:1b:ea:
         dd:b5:51:dc:cc:5c:7e:d7:63:8d:92:70:c5:c5:da:65:76:5a:
         6b:7e:0f:f9:2d:06:ef:02:59:f4:79:2d:60:4e:82:35:41:da:
         b6:f5:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org