Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa
File:                     512c05e3-397c-38ba-bc00-1d872cb257c7.roa (raw, json)
Hash identifier:          O/ezqFFuUvF0Z9npu8QfsoG+cEvfyfetH43sVpJD+HE=
Subject key identifier:   6C:86:8F:0B:6D:72:02:AD:98:17:A9:20:B8:01:BF:8A:08:2D:6A:C1
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F432858457FE8D1AD69156DC91175B580
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa
Signing time:             Wed 10 Apr 2024 13:22:50 +0000
ROA not before:           Wed 10 Apr 2024 13:22:50 +0000
ROA not after:            Tue 09 Jul 2024 13:22:50 +0000
asID:                     5719
IP address blocks:        192.12.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:e8:d1:ad:69:15:6d:c9:11:75:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Apr 10 13:22:50 2024 GMT
            Not After : Jul  9 13:22:50 2024 GMT
        Subject: CN=595b4939-550b-4f00-b35b-9444dfeae5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:02:16:6c:49:4c:b4:6d:3e:53:d9:18:4f:
                    c4:73:6c:12:d5:d7:e3:f6:ab:81:ca:10:4b:10:64:
                    6a:94:d5:7f:37:05:65:b1:71:82:66:4f:04:51:34:
                    a7:01:ce:a1:71:cd:6e:79:86:fb:43:48:1b:2b:62:
                    ac:db:9c:38:38:4d:b6:8b:79:11:02:44:b1:b8:11:
                    29:fb:1b:d7:4b:40:33:e9:b9:6c:72:4a:17:13:b5:
                    1e:e7:ec:86:5b:1e:89:69:be:94:dc:54:32:f3:65:
                    18:07:be:57:1e:fe:c4:28:d8:bb:29:e1:54:1c:06:
                    a8:f4:e1:b3:d4:e3:84:9d:41:69:5e:51:6d:a7:67:
                    44:6e:e7:85:99:ed:eb:76:29:cc:ae:1e:a0:f3:c1:
                    5e:db:4a:28:86:e9:e9:e7:d3:da:08:fc:1e:ed:4f:
                    91:de:75:93:fe:75:75:ae:54:fd:f1:92:17:37:0a:
                    40:37:78:d5:fe:47:06:58:86:6e:b0:6a:4c:1d:b4:
                    db:b4:67:9b:c4:41:fc:04:37:9a:bf:35:e7:c0:05:
                    0e:24:ad:6f:a3:4c:b2:bb:51:74:58:86:d7:83:82:
                    14:7d:a2:05:bd:b5:2a:f7:a9:81:9f:56:d1:e6:b4:
                    b1:21:0d:9a:cd:fd:a0:1e:35:2e:99:f7:a0:d7:8f:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:8F:0B:6D:72:02:AD:98:17:A9:20:B8:01:BF:8A:08:2D:6A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/512c05e3-397c-38ba-bc00-1d872cb257c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:80:65:7f:73:b8:ad:e6:b5:b1:21:d3:2b:b0:71:b3:38:
         39:3b:28:6c:a4:70:6b:3a:02:fb:3a:c1:1e:cf:07:44:ad:e3:
         7f:03:38:2f:f0:7c:da:77:60:3b:d7:73:c6:9f:58:e6:c9:9d:
         fc:80:07:03:24:bf:81:31:c3:d2:2f:f1:22:1f:62:ea:4e:1a:
         d1:c4:26:21:1b:9f:a8:16:a6:7e:b5:d9:ae:a2:e0:d1:87:fc:
         ae:14:2d:36:55:d8:e8:14:7a:bf:a9:ee:af:be:53:17:8b:9f:
         00:e1:48:f6:41:4b:db:9c:17:3d:20:8b:60:cd:29:fc:18:5d:
         ef:4a:6b:20:f6:15:39:3f:2a:6e:07:6b:ef:6f:8d:80:6a:c2:
         97:33:2c:71:f9:ab:7d:31:76:1f:3d:b9:41:ae:e6:de:c6:91:
         0a:4a:f6:64:98:2d:b2:b0:14:09:57:f8:19:46:41:d8:79:bb:
         9b:f4:80:6e:2f:76:d4:8c:60:81:ca:28:8d:ee:51:19:68:25:
         28:e9:81:65:10:ef:5c:9f:d6:d3:78:ae:92:3f:c2:bd:12:de:
         61:cc:64:52:91:11:3e:d7:e4:b0:e5:89:eb:c8:d3:3b:d4:a7:
         5f:9a:f2:2d:cf:b1:9d:74:02:60:06:75:1f:77:fd:25:61:a2:
         b5:6b:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:28:12 2024 by rpki-client on console-ams.rpki-client.org