Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
File:                     2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (raw, json)
Hash identifier:          oJMJouVNroDv7TGxaSbhTBV01M0jRP+TvnI9QCf8gYI=
Subject key identifier:   3B:6B:D4:28:90:E2:67:FB:CF:E9:80:04:7A:4B:7A:07:57:BF:34:78
Certificate issuer:       /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial:       010D0C9F4328584795168C3FF36C32AC1E3C71C0
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        216.152.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:8c:3f:f3:6c:32:ac:1e:3c:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=fc324587-93a9-4712-9770-9686b1596de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:9d:a4:8f:5e:8e:c7:41:c9:d2:d6:20:25:
                    4f:00:fe:be:7b:55:ec:52:6a:be:66:19:63:a7:8e:
                    27:1a:a1:70:c8:e8:d5:ad:57:f5:a1:7c:6f:19:e0:
                    72:b0:cc:e3:85:32:40:0b:b5:96:00:7e:68:bc:b4:
                    7a:57:95:f9:01:9c:1d:d0:49:29:84:f9:d5:1c:7e:
                    13:4b:e5:e2:31:80:f3:66:8b:a2:c9:2c:21:33:dc:
                    2f:5c:ff:66:a4:25:df:12:5b:fb:05:d3:f5:f5:f3:
                    61:5a:4d:dd:a9:1d:6a:30:1a:82:42:68:28:02:37:
                    e1:c2:5f:aa:c2:bc:71:b2:4a:5f:c3:71:bb:71:81:
                    a8:4c:ba:9e:4a:dc:54:51:84:70:f2:0b:78:38:e1:
                    a9:df:de:48:f9:c7:e3:08:a2:30:c4:11:29:db:5b:
                    cd:15:b0:a8:53:74:d7:dd:ac:2d:f0:76:ed:1e:15:
                    b4:64:07:c2:5e:54:a7:ca:a3:12:1f:a3:72:78:e5:
                    55:c3:98:ea:16:6c:1f:2c:24:de:7c:b1:43:27:7a:
                    98:9a:49:45:2a:ce:12:3a:fe:de:3b:c9:53:25:2f:
                    e8:da:d4:a8:3a:b7:4d:2d:a1:72:c3:76:b4:51:ac:
                    81:f4:1a:b5:ae:82:5f:25:5f:b4:13:5e:91:fd:d0:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6B:D4:28:90:E2:67:FB:CF:E9:80:04:7A:4B:7A:07:57:BF:34:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl

            X509v3 Authority Key Identifier:
                keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:1b:03:65:ba:ef:2d:bb:bc:b5:ac:07:81:a6:22:f2:53:
         5c:90:e4:74:7e:9b:7a:7c:b8:8c:9f:30:8f:9a:a4:5a:ab:ad:
         20:3e:35:bf:b0:13:c3:e5:77:cb:72:9b:0e:92:40:db:9f:20:
         10:a4:42:30:bc:55:5f:9a:4e:5e:0c:8f:ab:87:74:a0:c1:05:
         10:d7:ca:be:dc:d3:56:a4:2e:ae:18:ef:14:30:6b:dd:75:d7:
         87:6b:f9:1b:3f:9b:15:b6:97:2a:6d:6b:80:78:7f:d7:02:49:
         26:36:d3:08:c0:c7:d8:c9:15:d6:d1:c4:b2:d5:2b:c1:a1:be:
         a2:51:07:ac:42:32:a7:1f:b5:cf:c9:2e:dc:67:d0:8d:aa:12:
         f3:f2:e5:09:e7:a5:7e:5a:6e:2a:36:4c:55:93:7d:e2:1d:39:
         64:e0:c5:0f:f1:19:89:4d:c0:c8:f4:7c:da:7c:0a:6a:9f:1b:
         db:ab:ba:43:b3:d5:69:4d:df:6e:13:7d:74:7b:3b:c8:fd:98:
         18:73:fc:ea:16:d6:a1:35:f6:99:dd:72:24:07:c6:7f:1c:09:
         f7:65:66:c9:57:65:3a:1e:58:f1:7c:f1:07:d2:05:84:26:6a:
         38:51:5d:5b:98:31:d7:d9:f2:09:02:20:d0:29:fd:7e:2b:52:
         3d:e6:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:42 2024 by rpki-client on console-ams.rpki-client.org