Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa
File:                     cf92c81d-a910-339e-84d5-3f8c6baa3900.roa (raw, json)
Hash identifier:          6s/JRFhxKxGPeUp9K4eIvFcZfOyHq69BWXQBEz8TDxo=
Subject key identifier:   60:7D:45:EE:C0:11:1B:28:99:D7:BA:3D:E0:49:1F:BF:B5:FF:DC:78
Certificate issuer:       /CN=83220b5e-8104-4c4e-bbce-305b174b684a
Certificate serial:       010D0C9F43285847E62A262781439CF8A3ECB580
Authority key identifier: A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     12233
IP address blocks:        172.82.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:26:27:81:43:9c:f8:a3:ec:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83220b5e-8104-4c4e-bbce-305b174b684a
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=c5c0623f-7c33-4f7a-a803-c8062773d0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:19:d9:47:0b:72:a2:3c:eb:76:e0:bc:02:
                    94:6d:fd:eb:ed:0d:71:c2:0c:bb:22:ca:0b:85:0a:
                    23:31:b5:52:78:42:57:f2:5e:85:b2:d2:a8:8d:7d:
                    7a:96:af:d5:2b:06:b1:db:53:6f:d2:8c:51:4f:07:
                    ba:c6:91:06:99:d7:d0:bf:c9:6a:02:a9:05:23:de:
                    d2:85:30:6a:a6:29:bb:6b:b9:29:db:84:f0:0e:36:
                    09:1d:1f:74:c5:7b:55:33:fb:2e:24:00:cc:9f:a2:
                    e9:e4:be:25:24:7d:5d:b7:be:5f:1c:60:02:25:06:
                    ee:6a:3f:55:9b:fb:56:ca:9b:0d:d5:e5:68:91:a9:
                    e9:af:2a:3c:55:dd:ca:5d:ee:86:91:54:f0:96:40:
                    b7:75:8f:0e:37:e7:27:e7:3f:c0:09:32:cf:ff:62:
                    70:fd:3f:05:64:3a:42:de:ac:9a:a9:ba:ee:aa:0a:
                    c9:9f:8d:18:53:78:d5:b5:c8:62:3e:48:04:5b:25:
                    6b:3a:f2:06:a0:5f:61:ce:33:61:ba:9c:c6:7f:33:
                    4e:f9:74:fa:38:66:7e:1c:4e:0f:a7:dd:6e:60:22:
                    08:87:d4:a2:fe:e2:9c:49:58:50:f1:ea:bf:82:1d:
                    5e:1a:f6:f9:d4:bd:ef:d9:bd:e3:de:7c:c1:02:43:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7D:45:EE:C0:11:1B:28:99:D7:BA:3D:E0:49:1F:BF:B5:FF:DC:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/cf92c81d-a910-339e-84d5-3f8c6baa3900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a/83220b5e-8104-4c4e-bbce-305b174b684a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:68:53:84:C4:6F:78:6A:63:BF:69:78:95:C0:63:32:08:F9:53:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/83220b5e-8104-4c4e-bbce-305b174b684a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:aa:59:d3:84:82:d2:98:fb:5c:d6:54:1d:6c:5a:40:21:
         25:88:b3:c9:1d:d5:6d:6d:be:18:4b:9b:d3:bd:b2:44:f9:3a:
         c2:9a:52:7f:c7:75:b2:66:2c:59:b7:cd:d4:aa:ea:fb:a8:c3:
         71:42:38:54:3a:7c:72:d2:5c:c1:63:b1:9c:61:af:d1:dc:d8:
         64:6d:09:5b:1f:8f:ac:31:a0:06:85:c9:22:ca:5a:5a:c5:1a:
         01:74:9d:85:90:28:ca:45:00:b5:e5:97:7e:27:de:11:08:72:
         dd:ef:2c:9e:cd:fc:5e:c0:04:04:a5:15:e7:0e:a1:1b:88:b4:
         0a:2d:83:90:86:18:9a:e7:38:74:65:11:b5:b3:5d:88:ee:33:
         54:66:c3:05:11:a6:03:2e:5c:8e:94:db:17:d8:38:33:22:b6:
         03:a3:12:07:fe:e8:b5:c7:0b:66:5a:59:ea:fd:13:73:ff:f7:
         09:67:73:c4:90:a3:b7:b5:50:c7:a0:4d:fe:bd:04:3c:b7:8e:
         47:16:95:c9:af:48:00:78:4f:63:84:76:9b:77:88:b0:26:6f:
         db:c6:0e:1a:37:8e:ba:4d:db:36:5d:98:e7:f1:d0:d3:08:21:
         68:25:e3:d7:d8:ce:d7:6b:2b:f2:09:1a:d5:2f:bb:3e:87:75:
         a7:62:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:26 2024 by rpki-client on console-fra.rpki-client.org