Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa
File:                     d21cc304-50f6-3541-a630-e955ccb5f674.roa (raw, json)
Hash identifier:          fBPf+VTw5tzv4/O8Q3CTnIXXQ+etaV6PiI3xiHXHHiQ=
Subject key identifier:   11:34:01:5B:76:58:BC:3C:6C:C8:59:71:03:15:C8:84:9F:99:9F:BE
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858476E4185466443E9CFEC0F54DC
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa
Signing time:             Fri 04 Oct 2024 15:10:53 +0000
ROA not before:           Fri 04 Oct 2024 15:10:53 +0000
ROA not after:            Thu 02 Jan 2025 16:10:53 +0000
asID:                     376
IP address blocks:        207.162.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:41:85:46:64:43:e9:cf:ec:0f:54:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Oct  4 15:10:53 2024 GMT
            Not After : Jan  2 16:10:53 2025 GMT
        Subject: CN=cebda353-8031-4ecd-b299-a5a4b8236bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:6e:3d:76:53:b5:06:f0:53:83:2d:ef:ed:
                    78:f5:45:f2:09:40:91:a6:1e:7f:17:a7:a0:f6:b3:
                    9b:55:1f:ae:93:72:83:43:40:73:52:de:45:cf:5c:
                    82:60:fd:09:c8:91:2f:85:91:fc:a0:60:51:7a:cf:
                    7f:5a:f7:df:10:09:91:7a:1a:a3:ed:71:89:af:f4:
                    5a:f2:70:9a:61:a9:32:78:89:63:ce:cf:51:57:eb:
                    fe:87:ec:81:da:b6:65:a8:e2:ce:2f:f4:89:bd:89:
                    66:4c:7e:0c:58:d9:d0:8c:25:bf:4d:6a:5f:04:b7:
                    a2:5b:e4:09:19:67:c5:93:b9:b5:aa:ab:ee:4f:31:
                    63:7d:7c:00:49:38:a7:79:22:78:2a:b1:2c:f7:cf:
                    8c:d0:8f:1e:f4:63:b5:83:a6:f4:83:06:b5:b1:c3:
                    fa:4d:e9:1c:71:c5:10:51:d5:e5:aa:cb:7c:fd:89:
                    ac:12:b4:8c:cc:e6:3e:32:85:cd:04:d9:5d:82:2e:
                    9f:c3:b8:69:fb:04:69:d0:cc:73:10:66:6f:e7:1d:
                    85:1d:09:72:9a:de:24:34:e9:ff:71:e8:98:41:cd:
                    59:a9:63:e7:96:6e:8c:ec:21:50:10:c5:6b:67:96:
                    aa:57:b7:fa:c6:73:b4:83:88:4c:ab:51:45:00:9e:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:01:5B:76:58:BC:3C:6C:C8:59:71:03:15:C8:84:9F:99:9F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/d21cc304-50f6-3541-a630-e955ccb5f674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:dd:9e:a1:cb:cc:dc:fd:cd:de:23:bb:51:4d:b9:40:5b:
         a4:cf:a6:f0:4b:9f:95:bd:a0:bb:20:82:c7:0d:6b:67:26:7f:
         fb:53:e8:f4:05:4d:4f:57:6f:4b:a1:73:72:85:d6:23:89:c5:
         cf:38:79:a7:21:07:fa:0e:13:2b:22:8b:11:de:e6:b1:cd:2c:
         91:ee:a3:0b:9d:b6:f4:f1:d3:bd:8b:fc:45:a4:ba:08:57:ce:
         96:58:f1:b5:27:55:65:a0:38:5a:ed:32:b0:49:43:00:a4:bf:
         37:f4:12:93:4e:c1:27:91:75:45:56:59:4c:38:fb:b4:1d:de:
         56:40:72:37:24:36:52:b9:41:05:69:ed:1a:fc:84:7f:76:2b:
         57:7d:b4:93:3d:f3:1d:2f:40:b5:76:72:87:fe:a1:a4:f1:c3:
         d6:e5:a3:cc:15:1e:ca:f5:ea:cf:49:11:bd:32:b4:3a:be:3a:
         e8:0a:d5:1c:ac:db:e1:83:3c:17:ad:f3:ef:7d:a7:71:9f:34:
         86:c1:25:da:80:b2:09:43:85:de:f3:2a:80:47:09:0f:3a:c5:
         cd:27:9e:fb:8c:34:c6:ef:41:b9:07:1c:ea:b4:31:ed:d8:6e:
         af:70:4e:11:2a:4f:1c:f7:43:6c:20:2c:08:f5:bf:c1:cd:f9:
         97:62:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:21 2024 by rpki-client on console-fra.rpki-client.org