Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa
File:                     d78527a4-5d54-348f-95c0-56b2517d938a.roa (raw, json)
Hash identifier:          eSw4Kc33mjOMIMkNPOxBLwUpbNmRbj5Cr5UIP0lkzuU=
Subject key identifier:   68:CB:0B:7E:2B:A6:1F:D4:D9:05:A7:99:C0:79:59:7B:8B:FB:A6:F7
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F432858474850AE36150C1A17D7D426C0
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     399100
IP address blocks:        216.93.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:ae:36:15:0c:1a:17:d7:d4:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=7ae209cb-b0e6-4780-9830-d5044d2f0d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:64:43:47:4a:c8:ce:99:07:69:05:d9:8d:91:
                    ab:fb:db:5f:61:5f:58:ac:22:2c:10:39:80:c2:81:
                    ff:e8:e6:47:c6:14:fa:17:d2:bd:5f:2c:88:29:e6:
                    dc:3e:9a:a2:e6:4f:87:97:35:41:60:8c:77:f1:ac:
                    84:57:c6:76:e1:b1:c8:b3:8a:ed:18:50:79:83:a4:
                    2a:68:4c:6d:83:70:ea:b9:0a:cf:97:8b:ce:1d:e7:
                    0f:0b:59:28:c0:10:d9:fb:8c:73:0e:64:28:29:39:
                    e0:b2:87:98:3a:e8:f0:f2:02:a0:5a:da:8b:48:e5:
                    5e:1d:37:4f:f0:77:ae:6a:5e:86:73:46:f7:20:d4:
                    01:30:e5:36:ef:78:3c:26:a5:e3:48:9f:56:e3:14:
                    17:4b:aa:12:52:df:27:b4:de:b2:88:86:e9:6e:88:
                    31:03:63:de:74:6e:a5:9e:d7:9b:92:d0:60:01:09:
                    e5:07:42:64:48:29:5c:c5:53:4f:93:a7:7e:ae:96:
                    bd:c3:f6:23:5e:ca:52:e9:90:69:c7:92:4a:ee:b8:
                    68:b3:53:fe:a5:27:4d:eb:47:b8:cc:71:4c:8c:71:
                    7c:1c:ee:1f:d6:58:1e:34:b3:d8:56:08:34:db:35:
                    7b:c5:93:2f:7f:88:70:d7:56:d8:d5:42:d0:ab:3e:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:0B:7E:2B:A6:1F:D4:D9:05:A7:99:C0:79:59:7B:8B:FB:A6:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d78527a4-5d54-348f-95c0-56b2517d938a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:db:14:bb:ec:0c:3f:3a:dd:76:c9:96:f5:c5:7f:73:69:e2:
         07:13:89:01:11:cb:2e:8d:c6:05:0b:42:f1:36:b6:e3:94:cb:
         46:a8:27:1c:54:f9:b3:9a:69:e8:6c:7d:f2:8b:45:75:9c:8e:
         aa:fb:b5:23:16:cc:f3:b9:a9:af:71:e5:a5:39:38:62:29:73:
         e9:39:98:6f:00:ac:05:93:a7:b7:30:d4:9c:51:f1:83:bc:2a:
         98:eb:ee:dd:bc:38:7a:a6:e7:75:e0:ec:49:c4:d4:14:7e:3a:
         b2:bb:f1:00:c9:7c:61:fb:a9:6f:b9:bc:0b:1a:db:87:13:8d:
         02:d3:78:b5:d4:50:54:e0:17:51:67:25:3c:30:ab:21:6f:c1:
         47:4e:89:ab:0a:fd:6e:e9:07:ed:7d:50:2e:dc:4c:a0:68:6c:
         51:d1:6f:75:f8:7f:42:52:94:40:7d:1f:40:72:c4:53:4e:15:
         c2:75:fc:20:fa:4f:cc:db:da:69:6d:ee:d5:26:88:3f:b1:dc:
         31:ea:3c:8e:39:62:df:75:33:2b:11:84:ea:43:e5:01:bd:69:
         89:13:3c:ba:f5:db:ed:23:1e:e6:c3:9e:b8:29:36:f3:88:cd:
         0c:cf:25:e5:5f:8c:f0:e3:98:c3:42:92:e8:87:bc:a7:07:70:
         e6:0f:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:51 2024 by rpki-client on console-fra.rpki-client.org