Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
File:                     0852727b-d03d-312d-bb64-c77098602914.roa (raw, json)
Hash identifier:          /kMG9kcZzMWGPD8jamA/vn3nX6tSWiSrx8+G6mUTyp4=
Subject key identifier:   BB:E2:2A:EC:7A:31:E1:7D:87:40:57:A4:AE:78:6C:B9:96:55:A1:06
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB78BE4A0F9BD7BE5A0E00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        216.123.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:78:be:4a:0f:9b:d7:be:5a:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=a08b4eca-667f-4301-9880-a37dddf3e0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:07:70:16:55:61:a4:16:58:68:a1:c6:31:
                    69:bc:76:ec:ad:5b:87:b2:99:ad:35:0b:16:0d:73:
                    ba:b8:6c:01:fc:6a:a6:6c:e9:2a:ca:63:0e:c0:ba:
                    7d:1b:ea:78:bd:46:2d:4f:7b:7d:53:2c:12:7c:60:
                    ab:91:5c:5b:5d:d7:40:b8:b0:af:08:c7:da:ec:66:
                    ef:e0:64:6c:05:bf:bd:13:28:1b:18:f3:37:70:3e:
                    9a:c3:c7:78:41:91:52:7e:8c:cc:66:93:b1:c4:b1:
                    6a:00:25:3b:d5:3b:b6:18:c2:bb:ca:f1:85:5d:33:
                    ca:0b:15:be:23:80:74:e9:41:08:bd:83:76:03:4d:
                    75:8e:3b:f0:c7:22:34:c5:fd:dd:ed:22:e9:7a:bf:
                    90:e8:d6:44:4c:a7:aa:21:34:c9:3e:14:cd:2c:97:
                    08:9c:7a:cc:39:c6:70:c7:20:04:2f:cb:a5:c0:20:
                    6a:cd:8d:df:f8:72:c1:ba:8a:f8:af:3a:7c:68:ce:
                    5d:6c:bc:5f:c1:dc:d0:c2:47:b2:f7:d9:ac:2f:55:
                    6b:07:32:07:f8:6c:cb:96:21:22:a5:0a:cd:48:22:
                    30:46:4f:e2:c1:4f:7c:c1:05:73:aa:05:df:b6:4f:
                    5d:45:e2:e0:89:df:3b:68:10:ef:2e:d5:57:03:8c:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E2:2A:EC:7A:31:E1:7D:87:40:57:A4:AE:78:6C:B9:96:55:A1:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/0852727b-d03d-312d-bb64-c77098602914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4c:7d:0d:b6:32:13:c3:c2:94:87:05:40:15:4b:34:c7:d4:
         02:a7:59:ae:27:28:4b:ae:41:2a:d8:de:a6:5f:c3:5f:08:4b:
         07:69:18:0e:0d:c5:a4:03:c8:a8:e4:84:36:c9:5f:49:15:2c:
         1d:c6:df:94:1a:84:86:bb:f7:6c:89:31:12:a5:3a:5d:29:40:
         16:12:c6:da:a9:2f:f5:d5:34:42:ee:6c:ea:12:c0:d2:94:9b:
         a5:53:fc:6d:a0:3c:22:e4:77:60:39:18:7e:27:92:a2:7e:fa:
         c4:78:3d:30:fb:26:87:de:da:ab:bb:65:a5:be:4c:c1:99:bc:
         ee:67:a0:d7:40:ca:49:dc:11:97:a9:1b:9a:c2:61:f2:a2:0f:
         f8:10:0e:31:a7:89:7e:db:c2:ad:dc:90:d6:e1:ed:95:7a:4f:
         d0:a9:3b:1d:8b:89:09:07:e3:fe:c9:67:7d:70:cd:a2:43:9f:
         f3:ed:57:80:63:d2:cc:1e:5d:1c:1f:dd:2d:b4:ef:19:a7:97:
         85:5c:fe:1f:2c:57:76:30:aa:d3:3f:c0:cb:38:7a:c3:f4:d9:
         8c:e6:65:29:df:39:29:99:6e:d7:c4:cc:95:b9:8c:be:4d:b6:
         fa:0c:c9:d1:ee:64:85:df:f5:e5:b3:93:23:b2:0f:cd:19:0f:
         9e:45:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:22 2024 by rpki-client on console-fra.rpki-client.org