Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
File:                     4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa (raw, json)
Hash identifier:          kfC6XxGDC/63h1DJOyBnaW/r0+8cOVgxC1jlBXOhb8I=
Subject key identifier:   13:C9:E3:F1:47:03:DC:12:9F:DA:2D:0A:23:B2:7A:70:E5:6D:8E:27
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C1BBD80A635D6599206740
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
Signing time:             Mon 11 Nov 2024 18:44:54 +0000
ROA not before:           Mon 11 Nov 2024 18:44:54 +0000
ROA not after:            Sun 09 Feb 2025 18:44:54 +0000
asID:                     376
IP address blocks:        206.167.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c1:bb:d8:0a:63:5d:65:99:20:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:44:54 2024 GMT
            Not After : Feb  9 18:44:54 2025 GMT
        Subject: CN=390a4f1e-7ee8-4498-af23-b610ce269481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:0c:0a:02:47:7c:bd:4b:88:19:78:cb:bd:
                    df:d6:88:8d:8c:98:22:ba:6e:73:6f:4f:f3:69:bd:
                    a1:89:c1:37:66:40:b2:be:f1:96:69:27:a2:07:d6:
                    a6:0f:78:36:03:3b:84:33:f8:af:3b:60:0c:be:ec:
                    d8:40:6d:58:1f:be:3f:85:92:68:4c:ef:e3:c8:ee:
                    46:44:06:2a:6f:55:bf:4d:65:49:0c:36:6d:96:54:
                    34:28:6d:c7:a1:d3:f8:3c:8d:4e:8b:e2:53:69:ce:
                    a1:96:1a:d3:35:02:e3:71:68:df:a7:57:a6:ce:ea:
                    56:be:e3:39:14:e0:9e:09:25:5c:16:af:ef:e0:6f:
                    21:1e:db:d9:76:10:84:50:96:f3:34:a4:94:8a:ed:
                    2f:37:79:a1:8e:30:d5:d5:22:22:70:da:80:43:44:
                    82:a0:64:e6:0a:e5:2c:66:17:3c:24:40:eb:6d:de:
                    41:b1:61:fa:78:23:0a:14:c7:f2:ac:2c:73:df:e8:
                    3a:48:37:b9:4a:f6:03:29:93:eb:d3:87:76:38:96:
                    6a:a9:66:d2:ba:26:60:a2:9a:a6:94:bb:51:63:ad:
                    fd:83:ab:5b:90:f4:03:81:cf:a6:fc:8f:30:e8:1d:
                    c0:c9:c3:0f:a3:c0:e7:3f:12:ab:b4:61:09:15:5b:
                    db:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C9:E3:F1:47:03:DC:12:9F:DA:2D:0A:23:B2:7A:70:E5:6D:8E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:be:ab:fe:43:5e:7c:0d:69:f8:08:27:94:5d:de:8b:0f:
         07:18:e7:a5:44:72:6c:ca:52:ac:89:c8:17:07:3b:ae:a6:ed:
         e8:c9:61:aa:ef:40:47:23:1a:b6:31:ce:d5:32:94:43:c7:45:
         24:72:da:a3:ec:8d:39:61:e5:e2:d1:2e:d4:ae:ab:ba:b0:81:
         12:48:3f:bb:13:45:bd:43:15:7f:f5:7c:0e:a2:3e:89:d5:19:
         8c:44:86:da:ef:89:ba:9b:b6:35:28:39:83:e9:7f:66:8b:6d:
         f7:73:8c:e8:8a:61:ec:79:6a:42:89:e2:b4:dd:30:b5:79:9c:
         cb:b7:86:b3:55:f0:05:88:6b:9d:e0:64:d6:76:26:42:1e:7a:
         7e:ff:6b:ba:80:45:8b:c2:ce:ff:88:5d:60:e2:aa:55:2b:85:
         c3:20:45:a3:99:04:f7:35:a3:86:e4:41:e9:48:93:cc:2c:62:
         3e:31:7d:cd:61:e8:3f:6d:5e:a0:0c:b7:52:4a:5d:f6:a3:be:
         bd:72:43:d9:49:bd:d7:5c:2b:85:cc:5d:07:27:d2:bc:3c:f2:
         5a:c0:9e:62:9f:38:27:81:91:31:fc:78:f6:7a:0a:33:87:75:
         a1:4a:ab:e4:9a:dc:57:e9:53:bc:32:a8:e3:f7:08:9f:ed:e2:
         a6:1e:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:03:29 2024 by rpki-client on console-ams.rpki-client.org