Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
File:                     68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa (raw, json)
Hash identifier:          ZSgUFQBgvld7twBFbZt7BTcyXj5aDubL2P1rks3pXsc=
Subject key identifier:   C7:6B:CF:F2:86:9A:B8:22:58:98:45:4D:C1:92:BC:A3:2D:A8:A4:88
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F43285847ED24C099746507252C2C5CC0
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     20101
IP address blocks:        199.192.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c0:99:74:65:07:25:2c:2c:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=bd6adb53-e7a2-4388-9a59-a7b9d36b0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ee:5c:04:68:4f:af:ca:59:30:35:04:ef:39:
                    1e:28:9b:cf:32:98:39:b8:85:a5:3b:00:65:7d:53:
                    22:09:59:ca:8a:05:b3:ef:05:67:4e:c1:b9:65:27:
                    08:cd:57:a4:1e:c4:96:c3:0f:32:61:4b:a2:8c:44:
                    dd:c2:bf:9f:79:02:17:a7:b7:6d:2a:c4:0d:ab:be:
                    26:0c:7f:ea:09:bb:db:ab:6d:df:90:2e:a7:88:5c:
                    63:e0:af:ad:fc:c3:aa:59:8a:24:4c:b9:c0:dc:83:
                    71:09:a3:cf:7e:ac:1d:af:a9:d3:f7:df:c9:ab:b9:
                    81:cb:ba:f7:ce:62:8b:49:6a:74:d4:23:09:2d:19:
                    b6:7b:ed:fc:b3:54:d5:a4:d5:83:56:49:31:6a:41:
                    10:43:ae:1e:1d:bb:f2:96:59:d1:21:0e:a5:2a:76:
                    67:50:12:b8:f2:c6:b6:77:50:b4:82:b7:2e:ef:58:
                    5c:3e:5c:b6:b6:47:39:5a:da:c4:47:11:b8:bd:bd:
                    83:f5:e8:4c:7f:ab:5d:ad:3a:f7:fe:34:64:22:7c:
                    90:41:59:02:c2:0b:92:7b:0c:82:49:41:c1:69:86:
                    97:92:fe:b8:77:7c:9b:05:d5:ed:79:d9:13:f9:a6:
                    6b:10:8e:43:de:c6:1a:2f:f0:94:37:06:10:2a:a3:
                    69:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:CF:F2:86:9A:B8:22:58:98:45:4D:C1:92:BC:A3:2D:A8:A4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/68128e71-e6b2-3ccb-8cf1-2071dcbe6568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:10:64:53:1d:c1:37:fc:94:ed:7e:c1:f8:30:58:5e:df:
         8e:a9:bb:aa:7a:4b:fc:e9:5d:27:e7:3d:38:67:66:7f:68:fd:
         5e:7e:b9:db:33:23:81:fb:af:33:79:f8:53:bf:01:4c:e3:30:
         18:c1:38:39:a9:9d:ad:52:91:db:d7:9e:eb:fe:41:78:66:fd:
         1a:c8:cb:e4:d1:f1:40:3a:3d:8e:87:3a:87:8d:c0:2a:ec:df:
         50:75:3e:0a:a5:dd:f9:66:d3:8c:2c:54:1b:c3:a4:da:8f:3b:
         27:82:e8:9b:db:47:a4:4d:ef:2a:c5:46:96:2f:3b:a2:1e:88:
         2e:dd:db:72:f2:78:58:45:77:cc:e4:e6:b2:70:69:0b:03:48:
         2c:a4:98:e9:a2:0f:76:a0:cc:53:eb:09:88:27:32:34:a2:a4:
         c7:cf:f2:49:c6:4a:c3:29:4e:b9:4f:0c:2d:6b:c3:1f:c9:42:
         63:e0:1c:da:64:05:31:84:1c:57:6a:5f:77:37:3d:c6:02:57:
         c9:f3:9a:61:67:b9:e6:ec:89:e8:e3:63:a1:bd:9f:e3:67:b0:
         ef:7d:de:56:88:67:c3:c8:9a:89:90:48:d4:6b:cc:89:0c:22:
         1d:bb:a6:69:75:bc:16:9d:6b:16:bb:50:9c:95:8b:74:b4:c5:
         18:e4:34:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:15 2024 by rpki-client on console-ams.rpki-client.org