Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa
File:                     f667669b-a44c-3bca-bb94-60a011a886cb.roa (raw, json)
Hash identifier:          DXzb7QhKTD2LHa/z37RAQzAKbgg4mm78C6mM9XZqcaE=
Subject key identifier:   4A:B8:5C:3B:2A:3F:AD:9D:B7:3E:D2:BB:9C:24:BB:94:D0:D9:A7:24
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847B696BAC685D61C99D6370B00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        216.71.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:ba:c6:85:d6:1c:99:d6:37:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=c5a775ac-5764-4772-b615-9c544c54fc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:18:2d:ba:4b:6f:83:2a:99:fe:95:71:04:
                    dd:70:b3:74:21:5b:a7:6b:2b:09:d7:17:9d:f1:b0:
                    87:18:18:fd:88:4e:3e:5d:64:81:a6:18:77:c4:7e:
                    f6:82:50:35:bd:9f:05:96:d1:6a:70:b2:8b:57:ce:
                    29:20:71:42:fb:fd:3b:fd:56:66:ef:b6:15:dc:88:
                    30:01:55:24:fe:c1:ad:66:e8:c5:9a:d2:3f:fa:c4:
                    6e:52:54:8f:fe:cd:27:81:f4:0a:1e:17:60:29:90:
                    8a:94:b2:2e:4b:73:63:bf:f1:8d:d9:c1:c0:90:72:
                    88:31:9e:61:2c:5c:f5:10:e5:d8:e8:a7:ce:47:9f:
                    eb:89:ca:c2:cc:ac:f0:4a:02:2f:76:70:9c:44:27:
                    f3:0e:cc:8d:a2:e1:a2:03:17:b2:44:df:16:19:24:
                    18:d2:c4:b4:59:3e:34:4a:95:54:bc:52:56:83:41:
                    11:48:ca:d0:65:f8:9d:d3:fa:44:45:f6:55:12:66:
                    2d:b0:27:fa:8d:95:77:01:25:8a:a8:8f:4c:2b:45:
                    05:84:43:54:26:71:8f:73:3d:80:e3:a1:bf:d2:df:
                    f6:9b:45:6e:5d:4e:3c:16:5e:01:73:c5:e7:25:1d:
                    ff:cd:76:8f:a7:b0:45:f1:8d:2b:4b:51:d1:90:52:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B8:5C:3B:2A:3F:AD:9D:B7:3E:D2:BB:9C:24:BB:94:D0:D9:A7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/f667669b-a44c-3bca-bb94-60a011a886cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:18:00:7f:d9:c6:93:b3:b6:1c:76:9e:e6:20:8d:11:70:e2:
         4e:88:da:dd:97:ee:45:84:ca:bc:b7:6d:b3:cf:e0:3d:06:c1:
         38:8d:94:c6:2d:c5:5d:db:df:73:7f:52:83:38:b7:82:33:3f:
         59:8b:f5:29:b4:77:59:7b:0e:5a:a6:09:11:07:4a:4d:68:0a:
         77:03:2e:de:e1:57:c1:ae:21:0e:39:43:36:85:ba:1f:13:22:
         7a:3f:71:ad:b3:e7:47:dc:30:17:0f:bd:a7:e8:8d:d3:bc:b4:
         67:66:ad:e7:37:e1:ad:36:84:ce:73:a9:05:51:ab:80:06:8f:
         8d:ae:37:b4:8b:8e:06:30:15:3e:69:b3:b2:27:f9:26:44:d1:
         d5:ef:e0:10:47:01:4a:8b:ec:4e:66:c3:06:4b:2e:cc:b0:3c:
         d9:b0:20:a7:e6:3d:18:fe:d2:08:f6:40:f2:81:5b:20:cc:00:
         61:d8:85:fb:61:e0:46:5c:a3:f1:8d:ba:e1:10:85:10:90:b8:
         43:79:04:ba:70:8c:9a:bf:8f:6d:4c:81:a4:02:9a:02:f0:3e:
         4d:bb:0f:b8:11:df:be:33:3f:7c:18:16:f1:d5:e2:8d:c8:09:
         a3:a5:57:82:ed:2d:27:ff:02:aa:6f:82:e2:f3:3b:9c:cf:fe:
         4e:40:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:35 2024 by rpki-client on console-fra.rpki-client.org