Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
File:                     3cc8c09c-1655-353c-9029-9838f4886d8f.roa (raw, json)
Hash identifier:          BnyUdLLqAVmegm8M9V+YXgGK2x7Nu7Ihcymq+jhdbCI=
Subject key identifier:   2D:5C:41:B6:9E:B8:33:9E:90:BB:06:A1:44:0D:6D:19:57:7C:7F:AD
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285847AB6C0FFEBB108C374614BB00
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     3756
IP address blocks:        199.110.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:0f:fe:bb:10:8c:37:46:14:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=ef0706de-4062-4dc3-a5e5-36ea3211b14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f3:c3:ef:d0:e7:fa:5b:a0:7b:7b:00:53:1c:
                    d0:63:67:75:d5:90:9f:31:15:3b:99:73:81:0a:d0:
                    88:9b:2e:18:4c:ae:b2:36:31:ad:f2:1e:1a:e2:67:
                    90:93:37:04:a6:1d:78:4a:7d:fb:ca:46:9a:36:e8:
                    1c:84:ea:cd:a4:b7:74:11:22:04:61:b4:07:e9:36:
                    0a:60:d5:34:73:0b:2c:d8:ce:0e:85:b2:88:a9:60:
                    51:f5:14:3b:29:4c:0c:87:14:58:5f:41:06:19:c6:
                    04:43:9d:8d:f3:0a:14:39:18:34:7c:1d:57:ea:e6:
                    21:e9:55:b4:61:e6:2e:af:87:88:d8:8e:b2:70:b3:
                    21:c8:16:e9:4d:ec:dd:96:a6:b4:15:cd:ef:dd:1a:
                    d9:c4:e3:9b:a1:b1:c6:bf:25:25:cf:a5:05:45:14:
                    28:5b:66:c0:22:4c:e3:90:ea:85:7e:8c:eb:7a:08:
                    04:52:c7:23:40:3f:ea:c3:02:37:75:b2:07:f9:11:
                    1f:3e:ab:06:e3:de:5c:12:cc:bf:c5:54:7c:52:40:
                    eb:0a:97:da:ee:7b:52:64:12:dc:fd:9b:9b:7a:67:
                    d6:e9:2f:c4:e0:16:52:89:c6:e1:42:58:32:09:9b:
                    5d:52:84:b0:4c:35:3d:a4:3d:4f:25:a1:06:12:63:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5C:41:B6:9E:B8:33:9E:90:BB:06:A1:44:0D:6D:19:57:7C:7F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3cc8c09c-1655-353c-9029-9838f4886d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.110.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4d:dd:42:06:e0:b6:cb:1e:a2:bb:bc:df:ab:3f:5e:a1:cc:
         d3:1c:ca:f5:e1:0c:04:53:49:ef:fc:78:2d:be:6c:d0:1c:d1:
         22:d0:f3:bd:73:92:74:6e:f9:15:68:8a:8a:25:b7:8b:8d:80:
         05:75:e1:ce:d1:5f:dd:d4:f2:7f:03:0b:c9:1d:d9:a8:b6:2a:
         eb:c9:d5:48:fe:11:52:b5:ed:16:7a:2b:97:e5:6a:3d:83:2a:
         48:e7:bc:13:8e:76:0c:bb:c0:cc:35:a6:44:f5:83:51:d6:85:
         43:30:58:df:62:e5:50:b0:bf:20:75:17:3b:76:0a:8f:66:ea:
         65:9e:d1:f1:33:87:0e:26:d4:dd:a8:ae:5a:cd:15:4e:21:12:
         57:06:c4:81:3f:14:53:50:8d:71:53:6f:15:a9:e9:2f:42:6c:
         f1:1b:e5:f1:c8:c7:20:ba:14:39:24:04:91:82:a9:cb:40:be:
         eb:16:c4:1b:46:ed:43:ad:e0:c7:fd:ff:55:fc:3a:a4:b4:0d:
         27:e5:e9:49:de:f8:51:fd:43:91:3c:6c:a2:c9:f7:4f:58:6d:
         c1:6f:68:18:3e:67:89:39:7d:5f:8c:cc:b9:56:78:40:7d:2a:
         e8:8c:f3:9a:26:e0:ec:af:af:b9:2c:25:11:ff:9e:fd:79:d5:
         41:22:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:40 2024 by rpki-client on console-ams.rpki-client.org