Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
File:                     897c6f20-9699-364f-b5b2-a47eaee653dc.roa (raw, json)
Hash identifier:          6qvYhZjyDXZgk85658eL4vvegExGXPjJgy3y4sJJwPk=
Subject key identifier:   E1:84:24:B8:01:74:6C:70:E3:26:F8:95:AD:F2:C8:84:DA:F8:E3:79
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF4F58FEA6512440DEA00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        209.146.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f4:f5:8f:ea:65:12:44:0d:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=59b84384-8c29-42ba-a160-cfb51c383409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:58:51:81:28:54:46:44:1d:ad:2b:d4:3a:
                    d3:6b:6e:50:ce:a6:1e:b9:e0:c1:b7:34:61:59:49:
                    49:db:6d:0d:d3:e2:53:8c:97:c5:11:99:42:ba:0e:
                    d1:be:43:ff:3c:eb:b4:25:4f:b7:2c:41:9e:a1:1c:
                    5f:43:ad:18:34:70:38:47:dd:9a:95:4b:60:2e:e0:
                    53:37:2b:d2:0e:a8:2d:d7:7c:d7:96:a1:8d:8e:e2:
                    30:b7:3a:5d:42:54:18:d9:54:46:0e:14:a2:c0:ea:
                    19:f1:a3:23:bd:2c:3e:78:0f:6d:8c:19:05:06:1d:
                    cf:66:74:9e:47:8f:72:13:02:5c:82:c6:cb:3a:9c:
                    a2:6e:7a:f0:78:08:3c:e8:85:91:5d:98:84:c2:bb:
                    45:49:56:5d:fb:48:fd:94:58:ed:e6:bb:3c:00:a7:
                    76:a4:3d:9f:f1:b8:aa:3a:2a:e7:0b:47:53:9a:31:
                    5b:a3:3a:45:af:5a:c1:8f:44:9e:59:73:f6:96:ad:
                    e9:33:8b:63:d3:a7:d9:26:18:5d:d6:98:67:8f:ee:
                    63:a6:55:6c:87:9d:dd:ca:dc:9c:2c:0f:18:e8:be:
                    c2:51:53:32:89:2f:a7:de:94:d4:40:ac:11:f3:49:
                    97:30:68:0d:93:7f:c3:13:79:43:58:bb:c6:42:bf:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:84:24:B8:01:74:6C:70:E3:26:F8:95:AD:F2:C8:84:DA:F8:E3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/897c6f20-9699-364f-b5b2-a47eaee653dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:32:af:99:15:96:f0:39:ec:e4:41:f8:fa:2c:01:05:ff:24:
         29:e9:ab:f6:6e:a8:60:55:19:46:fa:ef:86:ad:df:9e:57:bc:
         68:bc:15:51:64:bb:a9:9e:73:c1:82:0d:d9:56:24:f1:bd:52:
         0b:8d:ef:ac:3f:48:80:72:51:37:69:e8:c6:b1:3b:87:41:da:
         af:40:50:03:e0:39:16:6b:75:07:c0:4a:c3:7a:3e:92:91:f2:
         56:ab:87:5a:0e:0d:ab:4c:07:a7:01:74:78:bf:dc:d2:da:a6:
         ff:4f:6c:f2:6c:96:36:10:af:be:61:37:be:4c:01:5b:0f:72:
         50:89:c5:90:f9:0d:0f:58:99:5c:1b:4e:04:4c:2e:ab:54:58:
         3a:9c:e5:88:5a:f5:92:31:6d:44:06:3d:36:f8:54:d2:ea:a8:
         bd:c4:c6:e9:15:27:5b:18:9b:b6:2f:be:14:28:52:7f:a8:49:
         d2:c1:4e:2f:b1:c7:72:f3:aa:92:8d:5a:9c:0f:bc:00:02:a9:
         8f:f6:ba:ba:fe:c2:25:29:e2:2f:ba:b2:94:8d:ca:08:5d:74:
         84:0e:7c:b2:b8:ff:2e:4c:1b:24:6b:2a:26:71:3f:07:d8:80:
         38:36:96:49:21:4f:4b:41:8c:f6:1f:c4:b4:2c:f8:d5:62:1b:
         5c:b4:6e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:19:19 2024 by rpki-client on console-ams.rpki-client.org