Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
File:                     cc311ad4-3fc1-354b-9373-7f16e8546350.roa (raw, json)
Hash identifier:          cGX7hXKxyK3E/h/CePjjN+i0lS+fmAp2JE6pSGIS6Sc=
Subject key identifier:   5B:AB:E1:DA:30:56:31:EE:46:95:C5:46:0F:6F:D6:34:7B:45:47:4A
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F432858472405BE62ACDC577014591700
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     393960
IP address blocks:        172.93.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:be:62:ac:dc:57:70:14:59:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=eca07eae-c3d6-41a8-92cc-75b1734be134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:87:be:07:3e:ad:98:18:fe:d8:6b:fc:ce:
                    66:10:a4:46:6d:90:e9:50:8c:09:5a:0e:0f:bb:78:
                    f7:24:ac:37:74:bb:d0:00:06:ce:8a:09:e1:6d:b7:
                    04:27:0e:84:64:6c:60:85:88:5f:1b:85:cb:89:b6:
                    ff:46:fd:0b:13:10:95:94:fc:da:73:dc:46:2e:bc:
                    06:97:4b:e5:c5:be:72:5f:fe:25:06:e6:0f:00:1f:
                    8c:6d:1f:ba:42:bd:31:10:47:30:5b:ef:33:05:ea:
                    7d:d7:4e:90:5e:6b:69:2c:dd:9b:6a:98:da:65:63:
                    c8:f1:c8:9b:0a:12:44:30:be:98:53:34:f7:be:f5:
                    10:a1:e1:ff:b4:fe:0f:15:eb:05:72:7c:4b:3c:33:
                    1b:8c:bd:9d:9e:af:f7:23:0f:ee:7c:2f:cd:a8:8e:
                    4f:7a:42:07:6a:a2:57:8a:55:df:5c:26:ff:70:e1:
                    c7:03:11:8a:27:54:35:dc:c0:aa:d3:75:3c:5b:ac:
                    a5:1f:c2:1c:23:6b:18:2f:bb:a4:03:44:be:5e:2c:
                    84:ac:da:77:62:5c:62:99:7e:da:5a:6e:23:70:16:
                    25:74:1e:19:6f:ca:76:d0:c4:a7:78:d4:c9:00:b3:
                    59:01:e8:f8:fc:da:3d:b2:6e:5e:34:7e:ce:ef:14:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AB:E1:DA:30:56:31:EE:46:95:C5:46:0F:6F:D6:34:7B:45:47:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:1a:6d:4a:bf:2f:60:6f:2e:a0:72:91:29:a7:88:b2:a4:
         ec:4f:17:c8:44:6b:eb:8b:a2:66:36:39:55:06:6e:f8:68:5f:
         d2:fd:2c:6f:eb:b0:78:f2:5b:b2:b3:0c:4b:6e:ee:f4:77:94:
         53:94:98:f3:e6:2f:97:be:58:fc:78:7f:8b:35:bb:51:2f:1e:
         a1:8e:6c:c3:f5:bf:9d:8c:83:6e:25:ee:52:f6:42:75:d4:82:
         d0:4c:fa:c6:2c:f9:22:d5:75:d2:09:e4:b2:af:e8:9b:3f:45:
         09:87:04:fa:ea:a0:b7:76:3d:d9:4c:d1:88:29:53:5c:3c:a7:
         c4:ae:02:90:30:5c:3b:f0:85:63:a0:f9:10:2d:c7:23:14:05:
         1b:ea:d4:88:2b:54:5f:b4:fa:34:23:a8:2f:4b:bd:08:ed:a1:
         0a:b9:5a:90:b1:7f:14:3f:c1:3d:58:13:3d:18:98:8f:6f:e1:
         fa:34:22:0d:d7:8e:8a:a3:ac:d9:93:5c:83:69:ca:29:25:2a:
         4b:eb:2c:83:5e:00:b4:62:95:32:ae:eb:28:42:77:17:61:2c:
         0d:34:30:69:6d:f1:3b:b8:26:83:e4:b0:8e:00:56:92:b0:71:
         d7:38:e3:c4:7b:7b:b6:36:11:68:75:3d:db:a1:fd:76:fc:1b:
         58:a4:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:25:32 2024 by rpki-client on console-ams.rpki-client.org