Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa
File:                     1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa (raw, json)
Hash identifier:          r3XJDXMdj8ublTzptEdxOFBv0VdxSdT5XSM311RYeN8=
Subject key identifier:   02:EC:1D:D0:B2:26:62:DE:A6:10:11:F2:BB:2E:FA:A1:5B:A3:AB:51
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858476E4A33619CEB8E80F1A11000
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa
Signing time:             Fri 04 Oct 2024 15:28:22 +0000
ROA not before:           Fri 04 Oct 2024 15:28:22 +0000
ROA not after:            Thu 02 Jan 2025 16:28:22 +0000
asID:                     376
IP address blocks:        207.162.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:4a:33:61:9c:eb:8e:80:f1:a1:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Oct  4 15:28:22 2024 GMT
            Not After : Jan  2 16:28:22 2025 GMT
        Subject: CN=94f9388f-8648-4483-bb5b-0087da6ea7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:7a:0a:ca:c3:91:c0:6a:62:6f:fb:c5:ed:
                    62:0d:97:70:32:2b:44:df:32:9b:72:b0:af:af:7c:
                    38:83:02:03:a7:5d:e3:a7:25:5b:d9:5b:26:d8:f4:
                    61:9e:f3:cd:f3:04:c1:bb:32:49:86:c4:31:23:41:
                    d9:3f:53:93:fa:15:e2:95:b6:57:36:8d:1c:7d:28:
                    0c:23:26:e6:92:43:ad:d8:5d:80:47:8f:18:cf:54:
                    aa:7c:65:66:07:76:0e:62:8d:83:b6:51:8a:66:a2:
                    2f:88:d1:c3:1a:f2:11:d0:3b:63:2b:8a:3c:50:3f:
                    e3:15:63:f7:4e:83:f8:ea:22:b4:c1:2c:7d:e0:7a:
                    00:ad:51:77:4b:18:87:62:1f:62:0a:bc:ef:57:70:
                    fd:fe:ad:21:b8:a2:fe:01:29:6f:1d:cb:ce:6a:ed:
                    27:4c:25:b0:04:d8:d9:30:b7:78:6c:0e:e2:d7:c0:
                    7b:30:b5:47:a2:68:73:01:0d:df:2c:c8:b6:e3:4f:
                    7e:68:1e:95:a0:64:ec:9b:2c:80:36:8f:01:bf:31:
                    8f:32:0f:60:1b:a6:cf:8d:62:fc:69:9e:d0:92:71:
                    aa:a9:29:9a:e8:9f:db:39:ff:a7:77:3a:b7:8c:af:
                    71:82:85:1e:81:e4:00:f9:03:0b:6a:3f:32:e8:54:
                    4f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EC:1D:D0:B2:26:62:DE:A6:10:11:F2:BB:2E:FA:A1:5B:A3:AB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/1efdd1ea-667a-3f76-8ebc-687df88a77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:7f:d9:61:e7:9c:c8:29:b1:14:44:ab:ca:dc:f8:c9:fb:
         2c:0d:5e:9b:e7:31:79:b6:31:05:97:ba:94:62:5b:e4:72:d1:
         bb:46:d7:b5:72:0d:36:bb:dd:3d:af:62:ed:38:f0:3e:41:ac:
         85:81:7d:50:7f:c8:6c:92:93:23:b9:5e:14:04:bb:ac:fd:a2:
         cb:2b:f6:bd:14:c5:df:3d:92:3e:b0:51:9d:a8:72:58:9c:af:
         c6:08:21:37:d7:7f:cf:a4:c7:fa:00:6a:34:f5:76:07:d7:5e:
         9e:ef:b0:91:89:46:00:4a:63:01:b5:48:a8:88:15:87:10:8b:
         72:5d:9b:d5:93:a0:c7:20:ea:67:34:a9:48:48:09:f6:d0:7f:
         f7:60:7c:76:74:2a:fe:3e:17:b5:a2:a9:1a:e8:6a:32:59:a9:
         29:ff:94:82:14:dc:1e:e8:df:98:48:39:59:47:da:73:3d:58:
         7a:21:0d:d4:56:e0:c9:99:79:1f:a4:86:98:8e:f0:b9:53:81:
         76:ba:88:22:45:c8:a7:01:0b:70:ff:85:a7:61:f5:35:e5:5c:
         00:51:36:78:5f:52:67:1d:07:c7:8c:d9:5c:2b:26:ba:58:b6:
         0e:78:bd:e2:0b:0d:86:a3:84:58:d5:bb:d0:ba:fb:40:b4:7b:
         25:7d:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org