Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1bdd3f04-f0b9-3fd7-8c92-43ce88de1a9b.roa
File:                     1bdd3f04-f0b9-3fd7-8c92-43ce88de1a9b.roa (raw, json)
Hash identifier:          GU+2cRgeSN+mWeV7PAVxaLEwjI46sSWWV5iLxwyDoQU=
Subject key identifier:   10:EE:12:FC:06:FF:C1:59:99:2D:6B:E3:22:9C:B3:85:D4:12:76:D3
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF8E29E9E58DF295D7D80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1bdd3f04-f0b9-3fd7-8c92-43ce88de1a9b.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        216.191.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f8:e2:9e:9e:58:df:29:5d:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=5c9c09cf-7bc9-4d22-995f-dd952b306974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:ee:1b:1f:e4:da:fe:2b:cd:f4:17:72:40:
                    d2:5e:56:44:07:2a:f2:4c:40:3a:f8:e5:c2:38:5f:
                    19:d1:d7:cc:04:de:1b:bb:46:97:36:89:94:7a:66:
                    6c:59:37:5c:b9:ef:98:74:54:aa:e9:ec:d1:da:bf:
                    3b:a3:a5:d9:62:03:4e:f4:6e:06:0c:5b:29:50:58:
                    b9:a4:b5:6a:50:7c:51:b3:a9:0a:a1:a8:d2:ea:4a:
                    77:0b:f0:64:1e:e6:85:ec:ee:72:1c:04:6e:a7:88:
                    e3:6b:e0:43:2e:6a:b0:51:43:92:34:0b:e6:d0:c6:
                    8b:0c:b6:d3:f2:35:29:12:7f:b7:3c:64:82:ae:20:
                    1d:2d:25:6a:91:3a:9f:41:a6:0f:88:1a:c1:86:2e:
                    b7:e5:b3:a3:c9:af:bf:97:19:98:e6:46:34:05:9b:
                    ef:86:0e:a1:45:9e:47:0c:0d:07:b5:a7:8f:21:47:
                    55:0b:38:bf:3c:80:29:dd:ae:ee:40:71:e3:45:74:
                    af:b0:05:3d:48:0e:e1:28:92:3b:cc:a9:a7:38:95:
                    23:f3:e2:8f:23:b8:dd:c7:c6:35:31:e4:0d:57:44:
                    28:b3:6b:bc:f9:8f:f6:56:b0:68:ab:65:89:bb:3d:
                    a3:6d:28:4f:e9:dc:81:34:af:6f:2a:89:0f:29:66:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:12:FC:06:FF:C1:59:99:2D:6B:E3:22:9C:B3:85:D4:12:76:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1bdd3f04-f0b9-3fd7-8c92-43ce88de1a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:c5:5c:6a:3d:90:35:d9:10:d8:07:28:3e:2a:e8:79:8c:
         be:a3:39:4a:9d:7c:bc:3b:de:8c:f7:5e:a4:5a:32:bd:07:b7:
         81:21:d4:21:ae:3a:45:11:c9:3e:71:ed:e5:40:d1:ce:13:9d:
         4b:e3:a9:cf:6f:f2:23:5c:98:21:09:98:bf:50:4d:af:d2:e2:
         84:34:f7:3a:0a:56:e2:94:07:1b:e6:92:47:91:3a:39:08:3c:
         a2:5a:eb:32:42:c7:40:0f:e0:db:8d:89:86:3d:58:da:e6:30:
         cb:26:cf:93:05:5f:1a:0b:1b:70:a5:96:06:df:12:21:99:62:
         6f:2b:e3:75:d0:73:1e:84:0e:66:f6:f6:81:dc:0c:6c:99:31:
         f7:a5:04:65:5a:81:59:80:34:1f:ea:79:f5:dd:da:33:c4:33:
         3b:49:9f:bb:b4:7d:16:8c:3d:c3:ae:15:b6:ee:69:d6:cc:2f:
         60:75:40:de:ab:3d:dc:2f:6c:ab:b3:e2:8e:68:d0:a9:b0:1e:
         6b:2b:58:75:40:c4:cc:f6:b8:77:3b:fb:60:70:1d:14:97:d4:
         9b:c8:cc:41:e5:34:d5:ed:c2:ee:ee:c2:1c:3e:b5:e0:2e:ce:
         9f:57:76:59:ad:d1:67:26:14:fb:8c:a4:90:84:39:b9:bd:d7:
         c8:12:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:19 2024 by rpki-client on console-ams.rpki-client.org