Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa
File:                     282d2005-2c51-3e25-8999-3772ede60c07.roa (raw, json)
Hash identifier:          5R9DZXYM9q4hMN6wdpm+5iAXe/lvQJ6Zb3xMUXj8zXY=
Subject key identifier:   3D:A3:CC:34:2F:F7:71:15:26:46:40:B7:70:01:2D:5F:66:84:EE:E5
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C310CF02466F8119104D00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa
Signing time:             Mon 11 Nov 2024 18:47:35 +0000
ROA not before:           Mon 11 Nov 2024 18:47:35 +0000
ROA not after:            Sun 09 Feb 2025 18:47:35 +0000
asID:                     376
IP address blocks:        206.167.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c3:10:cf:02:46:6f:81:19:10:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:47:35 2024 GMT
            Not After : Feb  9 18:47:35 2025 GMT
        Subject: CN=d3a7a338-ff32-4eb3-a37e-6af69a7d079a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:b7:40:13:29:8a:66:42:55:43:f7:8b:3b:
                    b4:91:cc:d4:b2:f4:d6:99:8c:eb:08:e1:c9:79:8e:
                    6e:3c:f4:1d:a5:57:61:83:59:3d:73:30:4a:d2:08:
                    f0:ca:34:69:ea:46:31:b2:1c:20:06:bb:02:e0:85:
                    a2:1f:0e:32:3c:91:0e:6d:75:34:08:01:18:55:7e:
                    cf:b7:f1:ea:8a:ab:7b:48:06:f5:f9:ff:61:61:e5:
                    10:e0:9d:3f:84:ae:fa:84:87:42:ac:37:0e:74:51:
                    8f:d7:52:55:64:5b:e0:19:39:a9:ec:c6:d9:8e:0e:
                    f8:b3:6c:54:74:87:59:9a:8a:99:ee:bf:9f:bd:e2:
                    70:cf:3f:0e:0b:24:6e:99:23:ec:40:e7:fd:47:86:
                    a8:02:e4:91:65:48:0e:27:bf:42:61:c6:36:c8:04:
                    5a:fc:6a:4d:f3:c2:59:c6:33:7f:89:1d:84:0d:93:
                    b5:9e:1c:21:59:90:48:64:e8:62:d8:1f:c3:4f:72:
                    15:c0:1e:91:83:f1:76:eb:d2:74:64:4b:4f:4a:2b:
                    cc:49:0e:1c:67:ff:9d:ba:07:9a:1b:3f:88:36:06:
                    a6:03:f0:3d:92:19:67:87:66:69:67:b0:d3:90:b2:
                    b4:4e:76:ed:28:56:f9:17:e8:9a:59:2c:da:c1:0f:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:CC:34:2F:F7:71:15:26:46:40:B7:70:01:2D:5F:66:84:EE:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/282d2005-2c51-3e25-8999-3772ede60c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:7f:0d:9a:0a:2d:d9:cc:5d:5e:97:2a:24:89:84:0a:75:21:
         16:ad:b5:75:f6:ae:40:c8:bf:cf:7e:84:f8:d1:7f:7c:6d:42:
         84:0a:f1:c5:ce:7d:f8:bc:59:e7:64:f8:37:44:4b:27:3b:61:
         07:bc:eb:a2:3c:f7:1f:6b:b5:c7:36:cb:e0:c4:7d:04:17:94:
         af:c4:37:d5:34:3d:0e:26:8c:d5:ab:35:26:80:40:39:54:dc:
         c6:de:0b:0e:4e:9c:03:e9:57:9c:ef:6c:03:7e:0d:0c:43:3c:
         ef:db:22:49:0b:34:69:b7:0b:59:b6:01:6e:87:ae:c7:48:d5:
         5f:72:3d:f6:fe:e3:68:fa:b4:f0:16:62:2b:e6:4a:8f:2b:c6:
         a4:eb:7f:0f:37:49:5c:31:2b:f3:6d:05:37:0d:a0:41:1c:ef:
         ef:d3:1e:ea:eb:d0:3a:1e:5c:99:75:07:fc:62:51:d2:43:50:
         86:32:64:f2:49:04:94:7a:64:46:e5:d4:b8:bb:49:a9:17:b6:
         4c:c4:47:1c:c7:dc:5b:c5:d7:d6:3c:0f:59:2b:39:c1:da:10:
         9d:bf:df:f4:1c:74:e4:9b:d6:d3:32:ae:ff:f8:85:ad:06:2c:
         aa:d1:b7:f1:2d:b1:6f:cc:54:3b:09:b1:44:ef:7c:32:28:30:
         50:95:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:21:49 2024 by rpki-client on console-ams.rpki-client.org