Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/21a6b920-d4df-375b-8a91-2533c245ed2c.roa
File:                     21a6b920-d4df-375b-8a91-2533c245ed2c.roa (raw, json)
Hash identifier:          9jjFl9wa+cSUo55D2DV8gUZ/nyNUmtmzfWjR7kp0HMk=
Subject key identifier:   FE:5C:05:C6:05:88:68:6C:E7:A2:3E:9F:71:69:17:9C:6A:53:C7:55
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C34273F73520E7BD3E4B00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/21a6b920-d4df-375b-8a91-2533c245ed2c.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        207.230.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:42:73:f7:35:20:e7:bd:3e:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=66839cac-87eb-480b-9c47-a4feafcdd11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:6f:34:57:cb:32:b0:30:2c:80:83:d5:1c:
                    15:0e:a7:fc:2e:94:13:d2:79:ac:fe:79:0a:f5:6f:
                    db:cc:5d:71:46:e8:76:e4:f4:39:5c:1d:bd:bd:70:
                    fa:fd:02:c6:92:e4:b7:59:82:d4:3f:dc:96:0d:30:
                    05:92:17:ef:8e:c8:ab:74:71:76:ee:7a:b9:96:7f:
                    ec:4a:11:ec:b7:dc:76:66:e1:d3:09:3c:8e:24:1f:
                    75:d5:08:df:03:91:9b:f2:ef:f5:c3:b8:b1:1f:27:
                    de:59:95:68:06:ad:7c:96:1d:19:80:39:48:d5:d7:
                    d3:f1:f1:c6:f2:31:ca:20:8b:3d:20:45:82:a6:40:
                    ae:3f:21:69:99:8f:6b:fa:a2:d1:84:a6:0b:26:73:
                    ea:1f:94:c9:75:c5:38:49:cb:d1:8a:5b:c8:cb:46:
                    d1:9e:9a:ef:ab:3b:44:ba:13:70:b3:e8:ac:a5:d2:
                    79:16:4e:28:b8:77:4f:23:47:50:94:f9:a2:4e:05:
                    53:89:ca:0d:f4:e3:2f:5c:08:46:ee:70:3e:85:fe:
                    60:c6:2d:12:79:d5:e7:31:8c:d0:9f:b9:b5:27:d0:
                    0a:82:63:d3:49:9b:6c:74:06:39:63:53:09:f5:2e:
                    ff:0e:fd:3b:be:14:27:39:4b:07:1a:78:ca:a7:79:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5C:05:C6:05:88:68:6C:E7:A2:3E:9F:71:69:17:9C:6A:53:C7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/21a6b920-d4df-375b-8a91-2533c245ed2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:25:83:33:3b:fa:9f:11:df:0f:85:8c:49:b2:b9:b4:2c:
         c5:84:66:44:ed:32:73:80:15:97:f1:7f:8b:03:17:59:dc:d0:
         df:c9:48:a9:34:c9:e3:63:11:37:59:e7:4c:65:4c:37:8f:c2:
         46:8e:65:c5:5b:bf:a9:18:8f:91:f3:f9:f0:8d:ba:b2:40:6e:
         a4:1f:b6:b2:e3:62:52:2e:53:09:02:a1:db:ad:22:be:81:ed:
         a6:51:e7:a6:b5:ed:e1:e7:69:98:b1:04:eb:03:6a:a5:eb:85:
         0d:ed:b9:fa:7f:13:0b:59:8a:59:12:20:56:bf:0f:34:a2:34:
         7f:7d:99:23:f4:74:0e:24:d4:03:76:30:73:18:2d:bc:55:c8:
         ee:c1:10:69:57:05:82:52:30:00:41:ae:0e:8a:05:e7:b9:f1:
         91:40:12:37:43:ae:75:f0:d0:e8:15:33:54:d0:4b:17:8f:c4:
         cd:0d:13:d4:fa:4d:02:b8:1b:7d:54:e6:a3:38:9b:da:01:08:
         f0:f5:7f:ed:77:38:7e:45:d5:44:50:ae:53:a1:8a:ec:fc:6a:
         0d:66:16:3e:80:9e:f1:e0:cf:83:e8:3f:66:f4:c4:e0:be:99:
         71:fb:4e:50:2f:7d:90:49:ad:c7:0e:45:57:17:43:56:27:57:
         72:1a:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org