Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf2f7623-e557-3a3f-8095-d19b17e229f2.roa
File:                     bf2f7623-e557-3a3f-8095-d19b17e229f2.roa (raw, json)
Hash identifier:          EWSgL85Yk+wvfblwKnm4D4wS1rK0fpOPseLH+z2W1BI=
Subject key identifier:   6E:E8:1D:21:D5:A7:99:99:F9:44:75:33:56:65:C9:DF:75:66:2F:AF
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285847D8C333F3AF521F6BB9E46300
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf2f7623-e557-3a3f-8095-d19b17e229f2.roa
Signing time:             Mon 11 Nov 2024 18:47:52 +0000
ROA not before:           Mon 11 Nov 2024 18:47:52 +0000
ROA not after:            Sun 09 Feb 2025 18:47:52 +0000
asID:                     376
IP address blocks:        206.167.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:c3:33:f3:af:52:1f:6b:b9:e4:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Nov 11 18:47:52 2024 GMT
            Not After : Feb  9 18:47:52 2025 GMT
        Subject: CN=3afa1937-62f4-4196-b158-089643f386d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:cd:0c:cc:2c:6d:32:8e:6a:17:65:2c:99:
                    8d:ad:87:4f:3d:0b:a2:d6:dd:02:d0:14:8a:30:7a:
                    83:3d:fb:d0:a5:d0:33:ea:90:57:00:e1:f5:19:15:
                    9d:de:c2:2e:51:16:16:cb:e2:a2:58:89:48:b1:a4:
                    38:38:67:4f:4f:4e:7e:e0:cd:59:81:d6:37:8a:83:
                    60:a8:6b:3b:0a:a3:79:a5:1c:46:bf:d0:f1:d4:56:
                    7d:b4:04:bc:77:d2:32:44:08:7e:ae:f0:5d:f8:6b:
                    27:dd:66:0c:e7:a7:1b:db:e0:3f:dc:81:45:8e:c1:
                    96:b5:f3:dd:69:07:7e:12:5e:1e:42:df:35:76:4d:
                    29:50:ca:6b:b2:c3:e3:63:c1:4e:7a:05:aa:40:c6:
                    b3:03:4b:ea:22:94:f6:ff:83:45:fe:b8:ce:f0:be:
                    6e:43:59:ea:c4:c0:5a:4b:29:5b:da:32:04:1d:bf:
                    ea:29:0b:3a:24:11:8c:48:31:1e:f3:16:94:31:98:
                    66:82:0e:4d:3d:41:1f:15:b8:b4:0e:85:1a:35:7e:
                    55:c8:c6:90:2a:19:31:31:21:a0:0b:36:21:4a:57:
                    ed:d7:a5:17:22:12:dd:b6:15:12:4b:47:4a:37:8f:
                    ca:ae:99:09:4b:2a:7a:f0:e5:38:de:b0:88:d0:9a:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E8:1D:21:D5:A7:99:99:F9:44:75:33:56:65:C9:DF:75:66:2F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf2f7623-e557-3a3f-8095-d19b17e229f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:79:07:8d:b6:24:22:cb:62:da:d4:71:b1:c4:f5:b4:ba:a2:
         2f:e9:f3:20:9a:f5:ca:b6:85:36:35:1f:dc:f0:d6:47:1d:7d:
         bb:58:6a:13:3c:56:04:e0:3c:82:09:11:03:72:bf:f0:93:33:
         c5:34:b7:fe:85:72:82:f6:51:90:f5:f9:7f:61:b2:50:c5:bc:
         ee:f1:2f:1f:e0:27:4d:2b:b8:47:04:03:9f:c2:5b:de:b1:96:
         2f:eb:ea:9f:f8:dd:ab:fd:93:94:37:a3:f3:42:70:89:24:80:
         31:4c:2b:60:4d:b7:2c:30:19:57:7c:ca:d8:18:77:24:0a:5a:
         51:0d:0e:bd:31:f8:06:77:c7:60:51:3d:93:b7:bd:84:62:dc:
         0a:bb:23:89:12:70:73:93:9c:d6:f9:ba:7e:5d:10:ce:58:b4:
         3a:e6:66:d4:ad:4e:13:17:03:29:52:59:59:f3:eb:87:b6:2e:
         6d:03:db:f6:b3:00:75:90:8d:9b:b3:0d:78:ea:eb:de:fa:e6:
         fa:ec:cb:fa:12:00:79:ba:20:a5:22:dc:8c:ac:1d:77:30:0f:
         0c:d4:31:dc:e3:4d:54:20:74:d5:be:3d:4a:fb:71:2e:bb:fe:
         7f:0a:8e:00:10:c0:53:ce:fb:c5:c2:75:6a:77:35:d9:26:d5:
         fa:35:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:30:05 2024 by rpki-client on console-fra.rpki-client.org