Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa
File:                     1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa (raw, json)
Hash identifier:          /Ip8oUqdNUclTzVCdqoUQ3d3j7IJS0VzsGGxH/0lg1w=
Subject key identifier:   00:1A:8D:24:EA:5D:0D:6F:03:75:84:A7:EB:1F:6A:9E:87:11:5F:34
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF939522D92856E06A960
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.191.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f9:39:52:2d:92:85:6e:06:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=889b7cc0-91d6-46d7-b92e-a13245496507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:9c:d2:dd:44:4b:e8:75:92:f8:cc:c0:d7:
                    5b:6d:4f:18:ab:c5:d2:af:92:bc:23:1e:a4:3c:33:
                    a9:85:ee:c3:ae:0c:e3:e0:70:f1:9f:7d:a3:2c:1e:
                    f8:ba:75:2b:52:bd:c7:1a:a5:95:c5:5d:bd:a5:05:
                    fd:71:f1:37:85:37:0e:99:15:23:1a:f6:9e:22:0a:
                    b7:a1:4c:90:6b:87:f2:e5:21:97:54:75:49:eb:ef:
                    d1:fd:aa:b8:00:cd:e7:10:10:c8:db:a0:8f:c8:d5:
                    20:81:a8:41:3f:ba:e1:72:c7:bd:a5:6e:78:02:84:
                    68:1e:c3:3a:49:ce:bf:65:5b:58:ec:c3:6b:b6:98:
                    ca:2b:25:77:a5:e0:27:bd:22:c1:26:7f:34:00:0d:
                    a4:85:1e:1d:67:00:88:34:6d:0b:f4:fa:e4:f7:11:
                    fb:a5:d0:14:28:d1:f2:2f:1c:4c:af:8e:5c:48:26:
                    3f:38:d8:cd:c6:79:64:2e:56:c9:6f:6e:19:fb:83:
                    d2:fa:9d:37:ef:9d:5b:f6:90:82:c0:b0:97:7b:c8:
                    f7:5d:fc:fe:46:17:bd:69:9f:4e:94:79:7c:27:9a:
                    18:4b:87:04:c5:75:34:e0:b9:01:d5:50:84:8b:c9:
                    81:ec:72:b6:13:77:dd:ef:08:e2:0c:21:4a:e1:66:
                    71:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:8D:24:EA:5D:0D:6F:03:75:84:A7:EB:1F:6A:9E:87:11:5F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:30:66:10:eb:3b:57:d3:fe:d0:ec:76:6d:72:4e:4e:4a:29:
         0e:84:cd:0e:a0:6c:5c:99:cb:78:44:8a:29:3a:d4:31:53:16:
         76:c8:04:14:04:ab:f4:8c:f3:e7:69:98:65:b9:b4:00:e9:90:
         72:f4:c7:45:9e:55:27:0d:16:09:74:68:9e:da:00:c9:75:7f:
         fb:39:08:dd:34:8e:ad:6d:db:59:1d:e2:fa:27:8c:d6:12:ad:
         19:b4:12:18:74:cc:47:11:82:70:7c:52:c0:d3:96:1b:67:81:
         4c:3a:81:0a:97:1b:7f:85:95:1b:17:fd:8c:25:c8:ff:c6:ed:
         bf:c3:29:ce:37:83:ef:ce:c1:20:70:93:55:73:0e:cd:5d:50:
         c1:7b:30:80:74:85:43:51:b4:98:a1:6d:24:9d:0c:c6:d8:ae:
         ce:f0:55:53:e7:d5:29:f6:69:19:75:fe:8c:aa:d5:40:7e:d2:
         b4:a6:ef:38:9d:37:54:e0:fb:2e:21:d6:73:29:d4:d1:46:79:
         9d:24:45:be:c1:24:84:08:c7:22:33:43:ed:d1:e2:67:c8:0a:
         4c:78:d7:be:2e:f9:e2:3b:02:0b:f0:17:30:fd:9f:9b:70:16:
         68:52:91:83:03:d9:3e:24:a7:87:c5:e5:75:cc:f7:47:de:b8:
         92:c3:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:18:29 2024 by rpki-client on console-ams.rpki-client.org