Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
File:                     61831d1c-625e-3eb6-a562-d812a9101222.roa (raw, json)
Hash identifier:          /uD8Ty9qE0Q1zgxyMpfX/ZhVgGbjMsyUezwz0OmZvAU=
Subject key identifier:   E6:66:E9:30:0E:5A:23:C0:4D:81:17:DA:6B:82:5B:1E:F8:18:FF:DA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285845A2C343545AED38DD70EF99C0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     6461
IP address blocks:        216.123.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:43:54:5a:ed:38:dd:70:ef:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=0d77ea69-6262-4d13-b056-052e8b2188c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:35:69:68:4d:e4:f9:a0:b2:93:b9:8c:60:84:
                    11:95:1a:b6:73:7e:51:bc:e4:5f:b9:68:c9:7b:0e:
                    1f:f7:9a:c4:94:c3:65:da:d3:cc:65:1b:45:62:18:
                    46:98:cf:99:31:b7:aa:10:6e:32:bd:cd:8d:cd:fc:
                    10:b9:16:cc:ea:17:ad:a8:c8:9e:ff:e9:16:0f:c7:
                    ed:8a:68:0b:da:a2:9d:9e:13:22:e3:d9:9b:75:51:
                    ad:6c:74:e6:66:33:08:03:37:cd:88:2c:8f:6d:c0:
                    10:72:23:27:b2:dd:48:55:ac:5e:6f:45:0a:6c:b2:
                    81:22:8b:68:cd:78:58:40:a1:68:e7:f4:df:04:59:
                    6f:af:46:8f:b0:f6:e7:58:b2:66:a4:b6:79:9c:75:
                    fa:40:47:02:bb:8e:ec:0f:eb:66:d5:eb:f2:a8:57:
                    21:34:1f:b6:66:66:49:0a:26:10:28:c9:a9:4d:5a:
                    58:0b:5a:56:5b:f9:4a:3c:ec:15:cf:23:ea:7e:a5:
                    2c:be:8b:f6:cb:d0:00:34:27:b8:c3:26:cc:de:03:
                    ff:e4:e1:c4:86:1a:7e:c8:23:7c:d8:82:f1:c4:5b:
                    7a:3d:a2:55:2a:e7:b9:fe:f8:e9:48:b3:77:29:09:
                    0d:5f:e4:e2:f0:54:af:31:51:00:26:96:5e:e1:b1:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:66:E9:30:0E:5A:23:C0:4D:81:17:DA:6B:82:5B:1E:F8:18:FF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:44:92:1b:8a:79:2a:d3:e8:f4:9c:27:cc:cb:1e:5a:e9:
         21:23:79:6f:39:78:71:3f:d8:bd:c1:55:61:e9:5d:1d:67:16:
         5c:a2:b2:fe:61:43:68:b3:25:16:d6:a3:21:d4:5d:a3:f1:1c:
         07:de:8e:59:6d:2b:77:ae:a5:25:91:4b:de:e8:b7:70:f5:61:
         ce:48:41:17:46:b3:bc:f8:d5:56:35:74:cf:7f:df:46:78:ba:
         d8:99:b5:92:62:b0:8a:f3:eb:74:ba:7e:70:03:ab:b6:46:7a:
         a3:6a:0b:c0:94:30:6c:7a:b2:bd:3a:b3:7b:be:55:be:6e:a0:
         27:b4:9f:6a:b3:9a:7c:5e:d1:c6:a6:98:b1:63:f3:d6:b3:e5:
         49:a3:31:b8:ed:cb:f9:9c:84:aa:cc:37:34:2f:e9:bb:82:a8:
         1c:01:a4:9f:51:05:8f:38:df:d6:1c:5b:2f:63:d0:5b:0f:20:
         97:69:68:3f:dc:09:49:52:5a:ce:4d:23:16:b3:36:30:57:27:
         64:3a:9e:17:3c:75:dc:e0:73:6e:20:f2:f4:06:8a:7d:9c:70:
         d6:ea:7f:17:4a:bd:ad:48:8b:da:c3:a9:07:9b:73:53:e7:f7:
         e1:17:7d:42:0c:c4:11:8d:13:9f:3d:26:fc:ad:2f:3f:2f:c8:
         1f:6b:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:34:58 2024 by rpki-client on console-fra.rpki-client.org