Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa
File:                     50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa (raw, json)
Hash identifier:          Wm5Jf5Z12+uJmSn+MWVLicQC124jTqV7anFt+qh2FIs=
Subject key identifier:   B8:41:09:EA:06:C1:52:12:DC:AD:40:B0:BF:F0:F2:F4:50:BB:10:73
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F432858475EA626601DBB2E4F0CD51440
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     62575
IP address blocks:        192.243.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:26:60:1d:bb:2e:4f:0c:d5:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=b5ce46bc-fb94-4adc-9094-812b81ca33dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:c5:cf:5a:1b:04:b1:a3:d5:53:2c:89:f8:
                    12:48:18:e0:23:a5:e5:f8:e3:4c:3f:b2:56:e4:bf:
                    a4:00:bd:e1:4b:40:66:e6:07:62:dd:41:d3:fa:b1:
                    01:03:3c:cd:58:a9:1c:bc:c1:db:61:0c:f0:50:e6:
                    b0:43:a2:f9:06:16:20:25:aa:72:43:e6:ef:be:bf:
                    1c:91:52:ad:3e:0d:37:84:04:f5:b1:a1:23:8f:6d:
                    b7:a1:ec:67:7b:b9:e0:27:31:9b:c8:fb:fd:ff:67:
                    56:f2:30:bf:c3:87:08:46:46:58:23:5f:76:4d:79:
                    03:cb:78:71:23:21:ce:d5:e7:64:77:63:c9:93:15:
                    cd:4b:f5:56:6a:da:0b:3f:fb:b5:71:c4:f9:1a:67:
                    fd:90:16:b3:d9:6d:54:51:07:48:9e:3e:b7:a8:a3:
                    61:28:b0:f5:d7:ac:09:68:4b:e3:f8:f7:c7:de:04:
                    cb:3b:3d:c7:41:90:14:f4:f3:64:34:21:44:87:d3:
                    ad:73:56:95:ed:8b:86:3e:ff:c6:e6:61:9a:63:97:
                    42:2c:74:e7:a3:a8:68:05:c8:08:ec:e0:e4:30:4a:
                    f7:c1:65:ce:0b:4c:28:29:38:75:54:90:60:80:b7:
                    2e:ec:66:e3:b1:40:40:af:fc:b4:58:af:e8:84:7d:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:09:EA:06:C1:52:12:DC:AD:40:B0:BF:F0:F2:F4:50:BB:10:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/50bfd9a7-3e19-32a7-9065-2539ecfbf37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6d:2e:df:1c:59:19:7e:a4:93:4e:1d:48:4b:c8:d6:b0:22:
         28:a3:e5:3e:03:82:b5:dd:c1:59:b1:dc:c1:be:99:99:25:61:
         d9:6e:07:1c:ed:e7:1b:07:ad:cc:e0:43:03:73:d8:53:87:5d:
         d6:90:c0:7b:9f:3a:42:54:ee:5c:cc:a7:6b:d3:9f:9d:a3:b5:
         64:c3:7c:59:74:33:04:1b:6a:30:df:68:a6:4a:6b:1f:cd:ef:
         c6:a5:a6:c4:8b:03:ad:04:f1:1e:af:96:43:b4:9c:5b:81:95:
         c7:d9:7c:d5:03:29:05:e5:7e:c1:78:a8:78:ef:c3:c9:52:4f:
         82:9a:ad:29:70:59:a8:16:23:0e:8d:14:94:ca:4c:76:eb:e5:
         fd:da:aa:20:6b:45:f8:4f:e3:0c:ee:04:5a:16:36:27:f7:ee:
         94:1b:09:b4:e9:62:e9:05:6d:07:ad:b6:97:b8:8e:40:b5:06:
         08:a4:21:03:77:cd:31:e3:ed:0c:39:07:67:c9:58:e5:bd:8d:
         33:53:7b:30:a0:9f:e1:26:5c:ca:a5:af:60:21:1f:21:73:ba:
         67:d7:80:f2:2e:e0:ef:e3:7c:10:00:b6:49:06:bc:01:1f:88:
         f7:ca:b7:a3:70:3f:ad:24:6a:f1:25:39:db:c7:1b:82:81:ff:
         df:33:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:24 2024 by rpki-client on console-fra.rpki-client.org