Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
File:                     d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa (raw, json)
Hash identifier:          3h0m9unwz8EQ23Wndj4rp7SJXOYmhSGHq0rXCevUWtQ=
Subject key identifier:   72:EE:F8:5C:54:1E:F0:C2:BF:E5:4E:1A:DE:4D:B4:1F:7C:68:71:E3
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285847362B54F38E90F96E45C3E380
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     12129
IP address blocks:        216.109.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:54:f3:8e:90:f9:6e:45:c3:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=94515345-d638-4dd8-af3c-0e1eb0532f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:aa:8d:6a:ba:b8:ae:bd:3a:af:58:b8:7c:
                    69:58:da:9c:73:38:d2:77:2f:65:d4:e5:48:83:0b:
                    47:35:e6:4b:80:3e:72:06:c7:52:fa:b9:f2:53:a1:
                    9d:a8:0e:f5:a5:55:88:77:4f:71:f5:50:e4:7b:87:
                    88:d7:e1:63:e2:2c:61:d5:2e:af:c9:3d:28:53:a8:
                    4e:60:e3:46:14:ff:d5:06:0e:00:e9:94:41:cd:11:
                    7d:63:ac:70:b6:bc:dd:d1:0c:b5:7a:49:30:57:a5:
                    f2:3a:74:fa:2f:f2:60:d6:1e:b4:a5:26:07:c7:2d:
                    2a:0e:bf:c4:bc:3c:4f:3a:43:e2:cc:90:74:86:66:
                    5a:ad:73:1c:f4:60:14:d3:a7:dd:e2:50:1f:9e:58:
                    7d:b2:e2:8e:b3:7c:e0:d3:1f:27:4c:19:d3:c9:46:
                    45:94:4f:39:5b:ab:73:ed:8c:31:38:98:49:aa:69:
                    60:71:db:99:5c:f1:e0:9f:7e:93:fc:55:89:44:85:
                    b5:57:3c:ec:f0:f4:74:83:b4:4f:77:4f:bf:1b:63:
                    23:ce:54:7f:d9:73:63:0f:c7:90:59:38:71:4f:13:
                    8a:02:2f:23:b3:9c:67:be:e3:d8:5e:db:67:81:ae:
                    17:e9:2e:bd:94:7e:75:8e:b8:b3:5c:b8:10:77:d2:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EE:F8:5C:54:1E:F0:C2:BF:E5:4E:1A:DE:4D:B4:1F:7C:68:71:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/d36afb33-7807-3c20-b9df-f7cd8fbf84f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:09:06:38:ac:fd:6e:ab:1f:f1:a1:90:89:4a:dd:59:ef:07:
         12:20:88:a7:b2:8d:cb:34:16:a4:37:21:77:c2:2d:79:19:eb:
         84:1a:7b:44:dd:14:1d:42:8c:56:c8:42:14:f7:6e:b0:dc:bc:
         71:54:66:f6:5c:6f:3e:b0:2b:f2:f3:1b:3e:44:11:fa:d1:78:
         7e:0f:e8:82:34:91:19:91:0a:ca:5a:3c:b6:b8:9b:10:e1:8b:
         43:4b:bb:d3:9d:79:f8:6d:a6:3e:51:13:88:23:62:ba:22:52:
         51:a2:6a:fc:95:bb:dd:61:5c:08:b3:70:6c:0c:2c:b2:c9:1d:
         9b:d6:f2:76:a2:66:82:4a:71:5c:9f:92:72:10:2d:eb:45:e3:
         6e:19:c4:bf:36:66:c7:9f:9d:0b:ea:3b:0a:5b:18:57:29:f9:
         06:45:7b:51:55:9f:cd:38:8d:5e:1a:04:c2:76:92:69:4a:03:
         95:5b:93:01:4e:ea:0f:d1:6b:77:5e:a0:11:13:e7:49:e0:a6:
         38:ee:db:eb:c8:ec:22:5c:83:0f:8e:60:f9:26:f5:73:88:f9:
         35:f3:8d:86:75:2c:2b:ad:24:a9:56:97:f5:61:cf:aa:c6:7d:
         16:c0:fd:62:2c:6f:24:b7:a1:4a:74:7e:64:59:2f:6f:89:3d:
         73:77:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:24 2024 by rpki-client on console-fra.rpki-client.org