Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa
File:                     5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa (raw, json)
Hash identifier:          P5a3W8szRzzqqZ0W6U8L+NXwAU3iOsmk4ZLq/S3z70E=
Subject key identifier:   AE:E4:C3:3C:14:4D:2D:A0:09:2C:AB:75:6D:A2:1F:30:94:40:85:F4
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C3C9538732DD61C4B67D00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa
Signing time:             Mon 11 Nov 2024 18:49:02 +0000
ROA not before:           Mon 11 Nov 2024 18:49:02 +0000
ROA not after:            Sun 09 Feb 2025 18:49:02 +0000
asID:                     376
IP address blocks:        206.167.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c3:c9:53:87:32:dd:61:c4:b6:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:49:02 2024 GMT
            Not After : Feb  9 18:49:02 2025 GMT
        Subject: CN=2f48984b-c09e-4acb-8650-0527a26bd9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:5b:fe:bb:cb:73:24:cd:1d:16:d1:42:e5:
                    d1:56:8d:ff:f8:5b:67:26:2e:7f:c8:67:21:ad:ad:
                    ca:ef:2e:d4:08:b8:f6:29:48:c0:53:41:1c:08:63:
                    b7:d4:0a:88:0a:56:c0:ba:db:07:56:60:32:fe:54:
                    6b:e3:af:78:91:74:cf:94:2e:d1:3f:2e:4d:7e:49:
                    b9:40:d4:7f:fc:1c:a6:eb:1a:2a:93:00:86:89:a2:
                    c3:b7:f6:89:44:27:5c:b6:b8:fd:5d:7c:e8:ac:9e:
                    82:e6:cf:3b:53:cf:47:d3:a5:72:a8:f2:0e:3d:bd:
                    4a:b0:4f:ca:ca:7d:a6:56:61:78:b1:1d:c9:0a:73:
                    ad:27:1f:8f:83:cb:f7:e4:11:59:87:d5:c7:f3:cb:
                    d6:6f:1a:b8:69:28:95:4d:71:e9:be:b0:65:f5:a5:
                    de:dc:79:3e:f6:e8:d4:6e:30:be:bf:8c:65:27:7a:
                    09:50:8e:5d:2f:a4:b3:c6:7a:f3:d3:7a:63:96:f1:
                    80:29:fb:d3:49:76:c2:6f:bd:5d:8b:ad:7f:a1:ba:
                    e4:76:ed:d8:17:6d:61:04:a9:31:2a:ba:54:72:69:
                    dd:3e:30:10:c9:2a:e2:77:56:96:de:d1:83:72:57:
                    93:cc:ba:e8:37:42:47:3b:fd:3d:7c:8e:dc:6a:ab:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:C3:3C:14:4D:2D:A0:09:2C:AB:75:6D:A2:1F:30:94:40:85:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ba4413b-f9dd-3fd2-a36d-664a22075e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:a2:a9:64:4e:dd:55:9c:3e:c8:02:c2:7d:9c:4a:3c:1c:
         19:e2:86:07:8b:3c:b6:09:5b:a7:63:2a:b7:65:1c:0b:ba:5a:
         8e:78:dd:dc:70:71:e1:9d:45:f3:8b:55:dc:b3:49:3f:86:49:
         13:73:1d:5e:c9:0a:b8:03:70:6e:b8:d2:c9:cf:07:f2:41:a1:
         ba:53:6c:25:30:a3:0d:a2:11:c9:f4:b4:30:2e:39:40:bb:5e:
         e8:cd:48:2c:5f:0d:ac:b2:f0:44:ad:5b:6b:03:d6:56:64:b8:
         1a:59:0b:aa:0b:2f:74:17:a1:d5:20:76:48:5f:bd:b3:27:72:
         6e:48:87:5b:b3:c7:58:0b:92:52:d2:b9:30:7a:46:5c:be:c9:
         44:be:f1:8f:45:ae:a0:9e:94:2d:24:2e:6c:62:76:be:e4:c2:
         16:27:a6:92:4e:3d:90:e1:5d:26:ed:2b:b7:02:73:e8:7c:c4:
         25:a0:c1:53:c9:8a:88:f3:4f:cd:ea:da:b2:b2:0a:22:d7:ef:
         74:48:9a:e0:f3:6c:4a:6a:96:8e:4b:53:67:21:b9:95:a5:4b:
         be:69:f4:0c:02:a4:45:d6:cc:d5:da:2f:a4:c3:85:b9:9d:7c:
         06:90:84:d4:c6:02:fc:55:4a:7a:86:e7:77:74:b8:fd:1e:e5:
         21:e6:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org