Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/23f69d7d-6a04-3bb9-baed-05ad04b39abc.roa
File:                     23f69d7d-6a04-3bb9-baed-05ad04b39abc.roa (raw, json)
Hash identifier:          hrH+fzOtewUI4011CakHSGGZbXZAYI7Y65vSbPnpD0E=
Subject key identifier:   B7:08:87:4A:91:4A:73:EC:23:65:D4:8A:74:48:E6:49:61:42:89:87
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858476E489F8BB1DE7FDC885A9400
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/23f69d7d-6a04-3bb9-baed-05ad04b39abc.roa
Signing time:             Fri 04 Oct 2024 15:25:12 +0000
ROA not before:           Fri 04 Oct 2024 15:25:12 +0000
ROA not after:            Thu 02 Jan 2025 16:25:12 +0000
asID:                     376
IP address blocks:        207.162.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:48:9f:8b:b1:de:7f:dc:88:5a:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Oct  4 15:25:12 2024 GMT
            Not After : Jan  2 16:25:12 2025 GMT
        Subject: CN=2e86b01f-e243-47c5-a06f-a18a391c819d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:ba:9b:85:4a:8f:43:86:a2:32:0c:c0:45:
                    02:5d:08:c8:81:57:2d:9b:3b:85:57:66:8b:62:9d:
                    1a:18:79:97:96:f6:58:6b:0a:d7:bc:da:4a:80:fb:
                    1d:73:13:6d:bb:c6:45:5f:b0:1d:25:52:98:26:db:
                    8a:29:e5:e7:3a:67:37:6f:b6:17:4f:3c:4b:b4:82:
                    3f:7a:05:3d:ad:c0:93:f5:5b:e8:ca:31:cc:ee:d6:
                    32:1b:5c:3a:c5:c7:ae:51:3d:44:b8:36:10:1f:44:
                    9e:55:78:d2:e6:34:6f:06:d9:9b:e6:61:5c:43:8e:
                    9a:30:7e:54:2c:9d:f4:a6:04:e6:a6:31:39:93:e9:
                    ec:3b:02:47:f4:b6:62:3c:e6:68:db:fe:09:d7:00:
                    85:0b:07:44:44:ed:6b:2a:cc:19:b7:62:d1:84:45:
                    8b:7e:cd:28:4f:27:a3:db:69:bd:99:bd:2c:f9:1d:
                    4d:af:a0:0d:3a:2c:35:23:c7:e4:d4:40:9d:15:c0:
                    6a:b6:5a:8a:7b:4d:12:e3:a1:4c:cd:5d:f3:07:d0:
                    f1:8c:a0:30:28:30:75:e0:66:01:33:e0:c4:54:d2:
                    28:90:54:91:93:d6:28:15:b1:bd:d1:1f:60:10:7c:
                    6a:13:30:85:d6:1d:2d:37:5f:6d:a0:20:3b:79:5a:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:08:87:4A:91:4A:73:EC:23:65:D4:8A:74:48:E6:49:61:42:89:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/23f69d7d-6a04-3bb9-baed-05ad04b39abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:d2:c0:04:84:c1:ff:a7:15:68:cb:2f:bb:7b:8e:85:0c:
         fb:27:15:d0:01:4c:6f:27:cf:d2:ed:31:e3:24:e7:c6:19:73:
         46:4b:78:f4:63:bc:ac:14:04:77:ea:65:98:28:4c:51:b2:ac:
         9d:84:e7:36:d6:f9:eb:12:f6:32:f6:11:69:0c:37:23:3c:ee:
         60:80:02:78:3a:c5:9b:1b:c6:58:24:33:5f:0e:1a:16:9c:00:
         7f:f5:db:25:5c:47:26:35:88:e3:3c:b6:51:24:1d:2d:ce:b3:
         69:d7:22:46:4e:fc:7f:d7:54:3a:26:b9:72:89:81:bf:9b:c5:
         90:29:89:67:b2:c6:13:95:9a:db:14:77:5a:ec:a9:36:0d:c4:
         3e:5e:dd:d0:7a:f4:b7:d5:2f:6b:0c:01:14:bd:a2:e7:47:76:
         24:51:fb:c1:ae:64:cb:c8:84:ac:24:fb:c2:8b:d4:c5:9d:5d:
         ba:64:0d:18:32:ae:2c:2e:1b:e3:98:9b:41:2b:33:37:3e:26:
         44:4b:27:97:f5:aa:91:6d:16:d2:a2:72:96:82:cb:f5:b7:16:
         09:bb:d8:90:8f:ef:ec:c5:7e:a3:e4:6a:4a:7a:38:1b:4a:58:
         bf:45:76:d5:f4:7a:9f:d3:fd:d3:09:32:da:80:f2:6c:3b:30:
         30:ae:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:26:31 2024 by rpki-client on console-fra.rpki-client.org