Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa
File:                     73f27842-743c-394f-b986-e63da94af163.roa (raw, json)
Hash identifier:          oi1Gt8e8chHn3KjGwKgG3TzVatkTBEV2v6KqSCdgB6U=
Subject key identifier:   1D:C2:17:20:76:B7:FF:32:7B:05:9B:FE:69:0D:C7:CF:C6:22:ED:87
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B47B18ABCE2E6615BE000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     6565
IP address blocks:        216.218.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:47:b1:8a:bc:e2:e6:61:5b:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=1d484dc1-ce7e-4ddd-974d-a03430c3bcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:3c:e3:a9:ba:75:a5:9b:14:a1:42:60:b3:
                    d4:31:0f:ef:96:1b:33:24:1d:be:af:a6:e4:99:05:
                    58:55:f7:3e:fa:9c:9e:fd:5d:c1:73:29:16:24:24:
                    10:69:37:2d:fa:f5:9f:ee:88:c6:a0:19:36:72:c1:
                    5c:2f:90:7d:19:9d:eb:17:ee:14:47:f9:3e:67:4b:
                    0c:fe:9e:c2:6d:15:3e:21:96:79:82:c1:f8:1e:9d:
                    18:5e:f8:84:13:cc:3b:71:6a:ed:17:82:b7:17:f4:
                    35:a9:4f:75:af:a6:02:4e:d4:80:53:5a:21:e5:c9:
                    ed:47:5d:17:bf:2f:f7:62:9e:eb:0b:de:4d:6f:a8:
                    52:dd:af:4e:93:2e:98:99:c1:73:a0:52:0a:bc:30:
                    72:0c:35:8f:1a:46:d5:57:8c:f0:c4:2f:b0:f4:e1:
                    6e:23:27:fa:87:ae:79:1b:fa:33:a2:db:62:51:40:
                    17:fb:0f:ad:85:4d:f2:b0:76:5e:5e:42:f6:34:59:
                    2e:43:fe:1f:b9:cf:9f:12:57:18:5b:0b:76:30:88:
                    e9:99:88:04:12:84:b8:28:98:e1:bb:29:0e:cd:50:
                    f7:a4:c4:4a:bd:00:68:b8:b8:c2:c6:ee:17:20:84:
                    47:27:b5:34:17:e0:c6:bc:0a:ca:5e:39:2a:21:e4:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C2:17:20:76:B7:FF:32:7B:05:9B:FE:69:0D:C7:CF:C6:22:ED:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73f27842-743c-394f-b986-e63da94af163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:32:a2:b2:bb:2e:5a:b9:6b:a1:77:af:eb:8e:c3:f3:cf:48:
         83:1f:c3:d4:35:66:0c:1c:3c:ca:de:88:46:f3:80:c4:97:5c:
         3c:fe:32:45:36:ae:43:cc:6a:a8:ca:e9:6b:4c:8f:53:c3:fe:
         c2:91:53:94:50:c0:9a:71:4f:a4:f6:d9:a4:65:be:74:ac:41:
         80:cd:e5:00:29:7e:91:0c:f4:f2:f9:2d:b5:97:ef:e2:87:b7:
         5c:4b:63:1c:4a:9e:d9:92:9f:7f:99:2c:32:63:c6:02:8d:18:
         2c:90:25:ea:32:43:f2:59:ce:81:cc:83:15:49:d7:d1:aa:d0:
         e7:e0:b3:93:c2:21:3f:44:db:8d:62:92:dd:7a:07:dc:ce:27:
         06:40:a5:4a:dd:50:ce:b6:27:81:d2:b5:e5:e8:66:de:30:b7:
         d8:82:49:a8:aa:55:d3:01:50:39:fa:7d:75:33:22:26:b7:c4:
         f5:c6:bc:55:a9:09:e6:d5:26:43:a4:ce:0f:64:9f:8d:cc:3f:
         d7:b3:f2:51:29:a4:56:be:74:69:5a:24:bd:97:9d:11:46:f6:
         29:e9:6d:57:17:09:50:a1:e2:eb:7f:d8:e7:05:6d:dc:a7:6e:
         dd:cc:f2:f0:a0:4b:19:1e:31:f2:21:86:03:4f:ca:5b:69:28:
         10:de:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org