Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/712b5533-eae3-32a7-bc1e-f99a4cc7774f.roa
File:                     712b5533-eae3-32a7-bc1e-f99a4cc7774f.roa (raw, json)
Hash identifier:          kksJjd6CD5GngmwdkEG0AJFnbiyHDtYPUf3dAMVukWk=
Subject key identifier:   22:C5:6A:96:59:6B:F8:1D:16:A6:55:CC:BE:FD:10:29:3A:18:1C:5B
Certificate issuer:       /CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b
Certificate serial:       010D0C9F43285847B696BFEC5B828E7C926E6780
Authority key identifier: 82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/712b5533-eae3-32a7-bc1e-f99a4cc7774f.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        198.72.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bf:ec:5b:82:8e:7c:92:6e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7393ae-ce6f-4290-b73b-77b4ab015a2b
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=a1c83f76-416f-4169-b118-684b6c0e1977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8b:f0:ff:68:7d:78:36:e5:a1:c8:ca:42:e1:
                    f0:7c:42:2d:1a:9d:bf:8a:5d:e4:c7:d5:b2:52:87:
                    98:75:22:7f:05:91:79:fe:d6:d1:37:ef:18:15:5e:
                    a6:e3:c5:a3:d0:0f:b9:b5:5d:70:22:e1:dc:0a:f7:
                    bd:5d:98:2c:54:c4:4f:66:7f:b7:89:71:2c:7d:d2:
                    29:0b:aa:c4:92:73:ba:d8:64:7d:f1:f1:0b:00:9c:
                    a4:8e:54:80:38:42:dd:e3:30:77:57:84:75:87:36:
                    a9:6e:68:65:4a:ab:97:24:10:57:c8:9c:fa:e5:5c:
                    8c:34:2d:b0:64:90:6c:ff:de:6a:51:19:e3:b9:82:
                    b4:3a:ee:a2:cf:59:7f:a1:c0:dc:96:02:5c:e1:60:
                    ae:61:f3:f5:94:ac:c0:78:bf:5b:da:e0:69:77:66:
                    f0:57:c7:02:c2:33:86:4c:8a:68:39:a4:e2:28:d4:
                    4a:30:b3:2f:0d:57:61:a1:f4:26:5d:96:82:9c:85:
                    9f:42:8d:58:e5:cb:ce:ff:16:5b:24:56:2c:7f:e8:
                    30:59:f5:31:2b:06:2c:29:87:c6:13:15:30:bd:1a:
                    e5:bb:70:54:15:aa:dc:7b:ce:06:d6:f6:88:a5:31:
                    12:bb:2d:f2:e6:65:ac:80:ef:42:89:5e:13:79:75:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:6A:96:59:6B:F8:1D:16:A6:55:CC:BE:FD:10:29:3A:18:1C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/712b5533-eae3-32a7-bc1e-f99a4cc7774f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.crl

            X509v3 Authority Key Identifier:
                keyid:82:3F:E9:B1:41:70:94:1B:C7:84:1A:20:02:21:2B:A2:68:9F:66:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cb7393ae-ce6f-4290-b73b-77b4ab015a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.72.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:3e:d5:7f:6c:78:e3:82:07:53:47:05:f8:98:43:ca:86:
         70:38:7a:13:61:90:7a:e9:c5:60:89:25:8f:64:38:58:d8:f7:
         fa:62:a6:0e:e2:3f:87:38:46:a5:28:23:a9:8b:d1:48:09:e3:
         05:84:ed:0c:ff:ab:d4:9c:7c:61:50:e1:70:75:b8:7c:90:25:
         0e:06:1f:3c:c0:e8:e9:df:c7:66:42:45:58:ae:03:13:8c:cb:
         76:7c:a2:f5:26:7f:7e:21:9f:76:3f:7c:18:18:a3:63:b3:ed:
         f1:7e:56:d0:ac:91:47:f4:bf:1d:7b:66:ac:e4:ad:66:bc:f9:
         ce:3b:1b:7b:6b:06:77:49:d5:86:c7:1d:47:6a:30:05:3c:01:
         bd:a6:00:57:60:5a:cd:5a:35:57:25:7c:a1:c1:94:50:8a:10:
         93:4d:b8:0a:b5:8e:aa:56:91:99:6d:e8:cd:18:db:6f:34:c4:
         29:2f:56:c6:b5:7c:5b:a4:fc:30:04:e8:ba:98:ef:be:1d:09:
         d0:ea:62:92:41:1c:a6:a5:58:6e:bf:62:87:96:a5:38:81:50:
         ad:55:53:bc:2f:c5:61:f5:86:f3:f7:7d:89:aa:b9:d0:d4:d6:
         5c:2d:d6:02:12:74:8e:53:6b:ad:64:3c:95:a9:5c:ff:2d:1a:
         79:18:29:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org