Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
File:                     61831d1c-625e-3eb6-a562-d812a9101222.roa (raw, json)
Hash identifier:          5nOQonh5AGiAjxCeqr197QNzL7JHpsAtT27Qre/a4sg=
Subject key identifier:   94:E9:C4:D8:29:10:38:EB:F4:4A:7A:E8:51:F0:F0:F1:DC:84:68:89
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D6620C0E862C0665BB9740
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        216.123.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:62:0c:0e:86:2c:06:65:bb:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=2f54c1ef-bcc5-4952-aa24-79b26a1be21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c2:69:f3:b4:2a:d2:0f:ec:69:fe:eb:de:f0:
                    eb:60:cb:a0:88:5a:0d:4d:87:1b:5d:3d:54:8f:8b:
                    3f:d7:91:86:e1:d3:f5:7c:b9:20:88:32:15:b2:2d:
                    98:02:31:81:01:7d:db:6f:12:9f:59:f6:61:25:66:
                    74:88:6a:3a:fc:46:35:35:ca:f0:31:57:26:03:97:
                    e8:8a:e7:cc:6b:bb:19:18:40:dd:8e:6b:e1:bf:9c:
                    40:bc:6d:f3:d3:3a:91:46:8a:0c:3f:87:ca:97:84:
                    44:cb:e3:58:6f:5b:3d:3b:ee:2d:59:a0:16:73:dc:
                    d2:89:ef:e6:35:6e:4d:0e:57:6d:3a:b2:b9:90:de:
                    01:31:0c:bc:28:57:11:2e:1f:a4:71:28:5b:6d:f1:
                    b2:c0:49:b5:e4:91:ff:fc:00:ef:f0:e2:b4:4e:20:
                    08:ce:5b:64:5e:de:71:33:03:53:d9:3f:c1:55:a6:
                    8a:18:d0:2a:40:9a:88:50:bd:56:d2:ff:25:49:b6:
                    a9:05:a0:18:d2:72:6f:3e:60:91:2a:f4:6a:6d:95:
                    c5:64:9e:2c:09:88:56:5f:62:b2:32:91:4b:d5:8e:
                    f5:6d:36:8c:89:bd:fb:73:41:2d:ed:e9:f0:b5:33:
                    16:2d:27:97:b4:59:f1:ee:75:15:71:d0:00:17:f3:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:C4:D8:29:10:38:EB:F4:4A:7A:E8:51:F0:F0:F1:DC:84:68:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:18:42:5d:05:a8:1b:85:8e:31:27:c4:c1:91:4f:f8:c5:60:
         d8:c7:ce:b9:94:52:17:72:4e:bc:29:59:37:ce:93:85:f7:f3:
         77:30:ea:bc:61:08:1e:27:62:01:46:0e:db:33:74:33:34:d8:
         c2:ac:11:fd:c2:70:18:61:c8:0e:1d:c4:86:b0:e0:f5:2f:bc:
         cc:d8:76:2a:c4:a2:30:da:e3:a0:ba:03:b8:55:bc:a9:92:b8:
         90:94:f8:c6:5a:29:4e:b5:06:fb:e1:76:6f:67:03:0d:ee:3d:
         b4:d6:f3:34:68:c3:55:65:b2:6b:83:e9:b6:e3:02:11:ad:35:
         78:82:33:16:f1:cf:81:03:01:e3:bb:8d:a1:da:1f:3b:40:f4:
         53:91:e3:49:85:68:dd:8e:9c:58:45:e3:62:fc:db:16:1b:3a:
         61:f4:47:30:9c:fa:52:14:e9:ca:f0:41:39:6a:49:a8:38:ab:
         a0:45:d8:bb:cb:16:5e:b0:28:25:87:83:92:0b:03:d0:d3:12:
         a7:35:c9:0a:64:33:48:be:ae:a0:27:ba:f1:12:f5:19:c6:f4:
         39:2c:95:9c:79:8f:35:60:b4:b7:4a:33:47:b0:10:5d:cb:35:
         5a:d4:6f:d6:3d:85:a7:79:de:3e:55:f9:97:ba:7b:72:7b:6b:
         ad:d1:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org