Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4a8961ae-5ee8-32e6-aae8-e0d6c85d93c4.roa
File:                     4a8961ae-5ee8-32e6-aae8-e0d6c85d93c4.roa (raw, json)
Hash identifier:          5k3YnOdhjpdz+Btxr2BvAvuaZfJe7ultuVMqhB1pq1k=
Subject key identifier:   BC:E1:06:03:AC:99:AC:93:B9:B6:BA:DE:09:EB:2B:AD:59:F4:17:5F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285846303062450E30C03394088EC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4a8961ae-5ee8-32e6-aae8-e0d6c85d93c4.roa
Signing time:             Wed 12 Jun 2024 16:49:18 +0000
ROA not before:           Wed 12 Jun 2024 16:49:18 +0000
ROA not after:            Tue 10 Sep 2024 16:49:18 +0000
asID:                     6461
IP address blocks:        216.123.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:30:30:62:45:0e:30:c0:33:94:08:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Jun 12 16:49:18 2024 GMT
            Not After : Sep 10 16:49:18 2024 GMT
        Subject: CN=ee14dbc1-26c0-4318-be85-82544ca98099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:9c:55:2c:a9:37:2c:b0:d0:c6:44:cc:78:
                    87:a7:77:dc:8e:83:2a:e9:55:ee:6b:88:7a:7c:95:
                    98:ac:f4:61:3f:48:8d:62:3d:c4:0c:48:70:4f:1f:
                    aa:98:f1:8a:51:f3:db:50:d0:db:3d:bd:da:8f:82:
                    d1:d3:7e:9c:67:6b:d2:8e:f8:2d:9b:4c:ca:22:ea:
                    f6:79:25:7b:42:c1:89:49:2b:2b:d1:ae:1e:e7:6f:
                    a3:0c:6c:6f:fa:d4:4c:00:7e:77:0e:ba:bb:2a:b5:
                    f7:62:a7:f2:18:41:5b:c8:80:58:e3:60:8a:6d:97:
                    e0:c4:ed:3f:08:3e:90:a1:61:75:76:7e:7d:2b:24:
                    97:45:ac:c2:5b:9a:9d:1b:cc:6e:48:2d:7d:33:d9:
                    62:aa:96:bc:17:72:3e:f9:a4:3a:2a:bc:60:e0:df:
                    60:92:3f:a7:83:cc:74:ab:6d:3b:7e:15:60:6c:55:
                    98:62:ee:d9:bc:2e:47:5e:f7:54:61:08:d4:b2:14:
                    41:9e:97:3b:1e:4b:50:30:6c:01:0d:8c:d5:62:ae:
                    24:45:2f:a6:61:f3:64:f7:56:de:13:66:4e:7c:58:
                    12:e3:1f:e0:30:b5:d1:f5:a5:03:2f:f3:e7:84:38:
                    9f:74:d4:ed:c7:2b:d8:46:3e:d4:d2:3e:45:47:55:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:06:03:AC:99:AC:93:B9:B6:BA:DE:09:EB:2B:AD:59:F4:17:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/4a8961ae-5ee8-32e6-aae8-e0d6c85d93c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:72:2b:c5:72:f2:17:13:59:13:0c:9f:90:e7:be:23:4f:
         88:93:ca:92:29:b4:8e:ae:31:53:2c:96:0b:5c:00:77:ea:c4:
         44:3f:02:f9:5c:73:16:48:93:73:7c:8d:f2:c7:40:7d:be:d2:
         55:1a:da:f5:ed:ec:76:1e:48:09:fc:ce:7d:70:ec:22:4e:98:
         b7:bb:79:3c:c0:8f:93:9c:25:2d:89:92:79:73:48:06:5a:b6:
         19:af:89:c0:8e:49:a7:18:bd:17:c1:a5:0f:38:93:b2:4c:f5:
         81:6f:b6:73:30:ff:3b:61:f8:db:3d:16:1c:eb:12:d1:e8:b9:
         6d:b6:51:03:3f:bf:f1:f8:d1:f8:ed:8c:0a:87:4d:bc:ec:c2:
         67:23:94:2d:09:c4:4f:a2:a5:67:e9:bb:61:0f:7d:d9:51:53:
         cd:0a:0f:da:4b:85:ab:a9:92:3f:20:5e:4f:d7:88:b7:97:b9:
         fe:e7:b9:af:29:93:f9:5a:6a:28:0a:6d:1f:e1:a1:ad:c9:cd:
         5a:8c:bc:87:3a:12:e8:45:a3:ff:ac:c9:08:b2:f4:66:96:fb:
         d3:ac:52:76:8e:6f:06:2d:4c:99:1e:6b:e2:cc:03:15:0c:28:
         a1:b6:1f:21:40:bf:a1:fe:1b:2a:86:3c:ae:ce:67:cf:2b:76:
         0e:32:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:49:34 2024 by rpki-client on console-fra.rpki-client.org