Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0352b9d3-7143-3699-a628-94060e69e4bd.roa
File:                     0352b9d3-7143-3699-a628-94060e69e4bd.roa (raw, json)
Hash identifier:          74oFH9e3cJA8FCUQDXkElM/eAYVxxT3gW0FDvV7ZmNc=
Subject key identifier:   5D:1F:F9:B4:DE:8A:2E:64:47:5E:4B:DB:ED:3A:E5:09:76:17:1A:21
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858458C6DCB32752014C310854A50
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0352b9d3-7143-3699-a628-94060e69e4bd.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     40560
IP address blocks:        159.18.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:cb:32:75:20:14:c3:10:85:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=5d08048d-9b72-4a85-bdf2-e7f1d46cb92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:96:a4:6b:f3:fd:48:67:d7:7b:99:01:a8:
                    f8:1f:90:cf:cd:50:f9:1a:d5:0e:67:bd:27:4b:a6:
                    29:4d:e5:9b:ad:50:e3:d1:bd:a9:d0:25:8a:fb:62:
                    7d:ba:fd:16:be:a8:5d:13:db:df:69:e2:f6:bf:c6:
                    8d:2a:f8:9a:a0:13:02:1f:5b:ef:69:74:51:c8:87:
                    8b:1c:27:16:ff:39:1a:b8:6c:08:a2:66:37:07:4a:
                    e2:a7:72:92:16:04:83:58:ab:52:c7:5c:da:10:47:
                    c0:cc:90:03:8c:63:d8:18:02:76:50:d8:e8:f9:f0:
                    a9:0c:b8:cc:a7:f0:10:51:c0:71:97:a1:5f:8c:06:
                    77:e2:34:14:74:52:29:4b:b8:f9:65:30:a4:a7:89:
                    1c:4d:bb:b4:65:8e:39:59:65:65:c5:63:15:c4:0b:
                    0e:16:ed:df:24:2e:e5:81:f4:6b:3e:be:ab:3d:e5:
                    ef:7f:72:98:2f:ba:58:2d:ca:ac:c4:4b:c6:c9:b2:
                    ab:82:de:0f:54:10:44:3f:5f:46:59:8e:18:78:aa:
                    94:6a:e5:cf:79:94:73:fa:02:c2:17:f6:b2:51:c4:
                    c8:14:08:21:14:f6:ff:ba:4e:26:a4:29:b3:13:4a:
                    cd:ab:ac:ca:eb:50:78:e4:2b:48:12:86:ba:90:f8:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1F:F9:B4:DE:8A:2E:64:47:5E:4B:DB:ED:3A:E5:09:76:17:1A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0352b9d3-7143-3699-a628-94060e69e4bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:fd:b7:db:8c:69:1b:03:0c:8d:44:ad:ec:55:ee:97:88:
         f3:09:5a:91:f7:7a:1e:78:e3:69:6a:fb:0b:eb:49:25:71:79:
         25:e6:9d:a3:7b:07:7e:f5:43:f1:36:2f:58:50:7f:9a:1c:f0:
         19:38:57:9c:3d:15:89:a1:ed:6f:2f:da:2b:15:87:de:ba:05:
         ae:87:c6:37:d2:1f:27:58:17:5e:6e:46:ae:26:01:c1:6b:01:
         c1:15:12:35:64:64:f4:3f:5b:27:c6:f4:6f:d9:dc:16:7f:e8:
         d1:a7:0e:2b:58:48:ca:bb:92:84:24:5d:f5:3d:a7:18:a1:3d:
         3a:0e:a5:e9:c7:cd:51:75:a7:91:e2:da:26:9f:6a:d7:8f:90:
         43:a1:25:0c:7d:4b:01:d4:94:ea:b4:07:dd:a7:00:e5:64:b2:
         f4:6d:c7:cf:06:10:53:a0:eb:56:23:7c:c2:ad:e6:39:34:91:
         39:02:4c:ed:7e:3a:45:a2:a8:d2:97:f5:14:89:bc:d1:7d:8c:
         e9:bc:c6:82:2a:36:df:82:e1:9a:f8:a2:bf:99:61:f7:c9:6a:
         fd:8d:1a:57:42:79:f5:8c:96:37:aa:ef:2d:ee:38:9b:5e:07:
         14:69:f7:7a:c1:ae:3d:47:0c:a9:8d:79:c2:d8:fe:70:93:fe:
         b3:49:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:33:31 2024 by rpki-client on console-fra.rpki-client.org