Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa
File:                     851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa (raw, json)
Hash identifier:          eOmX/0jUCTlVvGekRMG83nKffXnU9F5jBgw2TV/FyC8=
Subject key identifier:   05:9F:D8:CA:DA:CD:1E:4A:BF:09:03:ED:91:75:CD:C0:2F:B8:95:C6
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB72EA66EDAAFBD1CA4540
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        184.94.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:72:ea:66:ed:aa:fb:d1:ca:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=ce9d6cb3-b899-4c1d-b616-76fe29d253be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:3d:d3:1c:b4:d2:4e:5f:f3:0d:f4:ec:21:
                    7d:19:72:fd:18:da:a2:a4:59:66:da:5b:7c:62:8e:
                    e4:dd:eb:30:83:78:4d:c7:0b:63:e6:6b:cf:46:7b:
                    91:f9:c8:97:72:1d:83:ad:2b:fa:21:1b:cf:7c:f5:
                    87:8a:c3:ea:11:90:20:f6:a9:d1:bb:b4:89:e7:de:
                    1d:03:3f:a6:fb:e7:1c:80:72:5f:9b:4a:eb:38:a6:
                    38:b4:6a:05:7b:4d:e7:48:ac:ec:7f:dc:14:ef:7e:
                    8a:97:bc:39:2a:c4:f1:67:ae:bd:c8:ad:b9:b3:7c:
                    5d:87:53:24:87:47:b2:8d:6d:17:98:f7:21:19:fe:
                    8e:cc:f3:ec:56:49:87:a4:c5:41:93:95:f8:1f:60:
                    93:46:b7:3e:cd:44:ad:96:89:cb:3f:a7:a0:a7:6c:
                    c6:3b:26:f0:05:e9:56:87:06:19:59:46:d1:fa:28:
                    e1:8c:d9:d2:2f:d5:43:fb:e8:4b:63:b4:a7:e1:9a:
                    8e:2d:cd:db:be:8a:5b:92:69:c8:5b:51:ce:76:d3:
                    a8:d3:45:9c:ed:73:9a:4b:3d:2d:03:d4:04:df:d5:
                    16:26:a0:04:2d:87:93:22:e1:0c:38:3f:90:4f:aa:
                    11:60:3d:fa:de:03:62:80:e3:ce:2b:7e:a2:eb:5f:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9F:D8:CA:DA:CD:1E:4A:BF:09:03:ED:91:75:CD:C0:2F:B8:95:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/851266c0-0dd2-365a-aa8e-ab5cdc6ad5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:27:09:88:62:97:b6:23:5f:b1:b6:a6:18:d2:ae:37:e0:
         6b:cc:64:40:20:d9:00:7b:f1:0a:17:e9:2d:eb:7c:20:75:ae:
         d9:90:43:35:e1:62:34:ee:9c:48:85:cd:6a:73:b6:8d:3c:c3:
         78:2b:f3:e0:92:ef:67:a0:72:97:1f:94:19:e1:39:d9:7a:89:
         68:ec:ad:90:e4:85:36:89:56:47:91:33:23:c1:39:a8:29:ae:
         7c:e0:7c:d8:eb:f3:a9:91:74:db:59:81:2c:67:ab:ae:eb:1f:
         91:08:af:67:0a:b9:a6:5a:73:48:59:58:cc:98:79:6e:fa:d1:
         92:85:62:aa:5b:8a:0c:4f:4b:ce:21:56:bc:3c:f4:eb:d7:8b:
         ab:39:d5:dc:e0:2c:e3:f1:36:a0:bc:8a:14:f6:6d:55:97:c3:
         47:9b:9a:b1:c1:0c:c7:d3:c4:33:02:b6:9f:dc:53:1b:74:08:
         c3:be:b6:01:29:63:9b:88:28:37:51:a7:48:6a:77:b6:3d:5d:
         99:10:df:32:33:20:a1:47:ec:eb:b1:96:c1:4e:4d:dd:d6:fa:
         85:39:c1:4c:18:f5:86:bf:a9:95:16:cf:8f:2b:5c:5c:b0:58:
         a2:21:38:dc:ad:8d:c8:93:cc:f5:36:bd:b9:71:4d:d5:85:48:
         29:ba:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:08 2024 by rpki-client on console-ams.rpki-client.org