Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa
File:                     c873bb50-4bd1-3766-8c93-abb4b0657cac.roa (raw, json)
Hash identifier:          muiNPR4cjKMvAruoFVAKzFjg7OW9xx6JJ+FVCr0+4ek=
Subject key identifier:   60:0C:3C:D0:7E:70:A9:6D:71:AC:C7:EB:D2:36:96:68:E5:8F:C4:52
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB848C795F84FC7B6026E8
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     21570
IP address blocks:        216.191.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:84:8c:79:5f:84:fc:7b:60:26:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=5ae36595-09e4-4f4a-b74e-7718d57d8540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:fb:f2:b4:1d:7a:a6:01:51:2e:35:aa:53:
                    d2:2b:d4:a6:f8:b2:76:64:75:d9:f1:53:e5:fb:d3:
                    e0:1f:d8:03:b9:15:f0:2a:ef:c3:ac:85:8e:f0:bb:
                    22:c4:d9:14:c7:8c:55:39:e9:bf:99:e2:19:92:50:
                    8b:0b:3a:23:df:41:62:f1:80:97:e9:ef:30:e1:64:
                    3d:d3:2c:a2:3c:ae:cf:86:81:10:71:ed:58:52:67:
                    df:31:e6:e8:38:81:c3:ed:fc:b4:43:93:48:c8:93:
                    d4:09:18:97:33:5d:3e:3b:6e:42:4d:12:da:28:bb:
                    46:a9:1f:04:b7:fb:da:ff:a2:d0:8c:d8:14:5c:80:
                    e2:9c:11:8c:22:8d:b5:da:df:fc:88:f1:04:12:0a:
                    c3:51:d2:8b:ed:f4:5b:b5:0d:a5:c2:b1:22:dd:a3:
                    ad:af:31:b4:21:5b:45:11:81:e2:10:d5:b3:d4:8e:
                    75:01:49:5d:45:3b:86:b5:a3:34:dd:1e:d3:95:7d:
                    22:46:c2:f4:0d:bb:57:fb:97:d2:ba:c6:a7:5e:4a:
                    7d:99:42:4d:1b:9a:7d:8b:c8:e2:c3:40:43:43:0e:
                    cd:9c:bc:d4:85:42:ae:d5:72:a9:4e:0f:2a:c9:48:
                    00:68:ca:89:26:57:82:0c:d8:7e:c4:66:41:88:d4:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0C:3C:D0:7E:70:A9:6D:71:AC:C7:EB:D2:36:96:68:E5:8F:C4:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c873bb50-4bd1-3766-8c93-abb4b0657cac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d0:8c:4a:f4:a7:e9:d0:25:9d:3e:93:e0:fd:2e:45:c0:ed:
         1c:41:88:14:9f:1b:af:83:c6:7e:9d:cf:56:49:e7:28:0a:63:
         d0:d6:52:3d:19:02:85:8e:24:d9:25:98:59:ad:e5:37:b4:39:
         a3:b1:18:57:dd:2c:e6:11:cf:13:60:c1:1f:e5:66:b2:7e:33:
         64:35:f3:fc:14:d2:f2:0f:d7:9a:79:40:d9:b0:a9:2e:db:f0:
         38:5b:9e:77:47:56:20:ed:33:29:bb:3e:e0:cc:78:5e:a6:95:
         3f:e8:3f:15:89:61:9f:29:4a:66:1c:02:a6:b0:3d:e1:73:c7:
         78:d8:a6:9d:24:74:07:85:00:8d:92:46:5c:3e:9b:16:1c:33:
         3b:52:76:9f:ab:5d:bc:97:55:80:73:ac:30:bb:75:90:bd:84:
         69:7a:42:8c:83:b4:fd:3e:80:d7:3d:25:ba:90:62:50:17:54:
         41:1b:11:8e:c2:bf:9b:b7:34:18:f1:9f:35:98:8b:15:95:b3:
         f1:8a:8c:0a:73:8b:3c:db:2c:7a:62:51:47:a9:c3:e3:07:ac:
         7d:a5:06:b5:09:69:24:ce:c4:2a:79:91:1e:0e:c4:00:ed:83:
         f7:5b:15:54:2d:ff:bd:cf:1b:6e:7b:2d:d0:f3:f4:38:68:a1:
         4e:66:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org