Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa
File:                     cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa (raw, json)
Hash identifier:          xDhAPy0gVxnGF2Mxzom3X7eiVr+HnL+5uFzcYMUxPCo=
Subject key identifier:   79:03:E3:A0:9F:2E:B5:14:62:FF:7B:D4:F4:F3:42:2B:BF:2C:2C:98
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F43285847A30BF838EF0D09297BDC8D20
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa
Signing time:             Wed 23 Oct 2024 13:00:41 +0000
ROA not before:           Wed 23 Oct 2024 13:00:41 +0000
ROA not after:            Tue 21 Jan 2025 14:00:41 +0000
asID:                     10397
IP address blocks:        209.209.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a3:0b:f8:38:ef:0d:09:29:7b:dc:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 23 13:00:41 2024 GMT
            Not After : Jan 21 14:00:41 2025 GMT
        Subject: CN=7c5e1bff-669c-46c9-be7d-79b9bb232417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:eb:a8:5a:fa:a0:47:7f:63:21:3f:b8:db:
                    c0:39:a4:40:5c:08:bb:3e:0c:3f:f3:a8:b1:c1:73:
                    37:49:dc:a6:8b:09:a7:c8:53:05:54:74:e3:6f:c4:
                    ee:76:e3:c5:87:61:8e:25:17:42:4d:39:22:25:f1:
                    39:45:46:a4:f9:99:cc:ba:07:20:36:4f:7f:cc:66:
                    d3:b2:08:f7:91:64:72:ff:d6:c6:dc:b0:0d:04:72:
                    73:9f:cf:f4:57:3e:26:99:af:f6:30:37:ae:91:f3:
                    b4:90:bd:b8:47:bf:4f:de:3f:0e:05:56:e4:a7:a4:
                    f0:50:b2:9b:56:75:a4:f7:c6:73:b0:12:f1:44:7d:
                    3b:29:ea:c5:99:e7:1e:d5:c2:7f:78:a7:2f:6a:fd:
                    cc:b7:a6:ff:71:99:61:21:d1:1d:f7:b7:80:73:52:
                    54:67:cb:85:84:25:e8:77:3f:bb:ff:09:ae:1a:11:
                    f9:8d:c7:2e:18:bb:9b:02:79:8e:12:ba:21:a8:5b:
                    fb:64:71:57:7b:09:7c:ee:01:56:a3:f4:be:6a:df:
                    ef:c9:e8:1f:41:1e:cf:63:ff:40:28:91:c2:4f:c7:
                    50:54:49:33:18:c2:07:00:78:d8:2d:39:df:a2:b6:
                    37:0a:d7:f4:39:36:ee:6b:78:dd:67:da:39:35:5f:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:E3:A0:9F:2E:B5:14:62:FF:7B:D4:F4:F3:42:2B:BF:2C:2C:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:82:6c:2c:b5:46:02:de:5e:79:10:81:18:26:ce:6b:be:
         1b:6e:ae:5e:80:d8:db:b6:63:7b:f4:f8:54:7a:c9:98:8b:e5:
         3c:f7:5a:cb:15:12:a0:db:e6:77:b2:3f:66:b6:c8:ea:eb:7c:
         9f:74:2a:d5:f2:46:37:57:5b:f2:95:60:37:a7:46:9a:ba:99:
         35:3b:64:31:0e:da:ce:aa:4a:d2:d2:73:2e:14:38:b5:0d:dd:
         96:96:d6:9b:d0:51:ec:f0:b1:49:f5:c7:6b:7e:c9:92:ef:0a:
         1b:bc:47:e1:e4:20:7b:43:81:e8:b9:f6:27:62:71:fc:0d:2e:
         53:e8:1d:5a:f6:ba:9c:e0:db:37:7f:6a:6f:75:a1:94:09:16:
         46:9a:90:b7:7a:b6:19:47:d9:73:bf:4e:ba:57:8a:cc:9c:0d:
         61:ab:29:19:a9:98:3b:56:b1:20:f7:01:72:ca:1c:cc:1e:ee:
         11:ec:11:2f:71:50:7c:7a:96:d1:76:fd:5c:7c:44:d0:66:a3:
         13:8c:73:d9:4c:ed:c1:a3:9c:72:60:53:a6:52:b4:32:f3:74:
         78:9a:c3:87:eb:5f:73:1e:04:12:9b:09:a4:0f:3e:b1:b4:0a:
         f6:82:3e:e0:55:a7:d0:34:07:8c:01:46:ab:30:ac:c2:51:26:
         68:ff:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:34 2024 by rpki-client on console-fra.rpki-client.org