Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa
File:                     db8ec9a1-e76c-32c3-a365-98369a226dae.roa (raw, json)
Hash identifier:          w9FEh/f6BkfgDnvMCTx401555NlszaR9SDJQeboC3mo=
Subject key identifier:   68:38:29:9C:60:7F:FA:C9:92:2C:74:AE:EE:89:D8:06:A9:34:AA:E7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D661D88FCE244C4B2A9C40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        209.153.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:61:d8:8f:ce:24:4c:4b:2a:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=5e9c892e-ebbf-42f7-b199-aea6f8b69e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:e2:18:36:c7:16:c8:1b:b2:da:82:9d:6e:
                    70:9a:2c:5f:de:e0:89:10:da:b8:9b:3b:63:15:28:
                    1e:e5:db:65:57:2c:de:cc:50:3c:e4:38:5a:5b:34:
                    33:45:94:b9:b7:23:67:27:47:8b:71:cd:04:0f:b1:
                    1d:e2:fc:5b:54:32:0b:46:8f:f8:6c:1e:cd:58:20:
                    96:a3:5d:e8:f0:d1:54:b9:c3:5b:96:16:73:22:b0:
                    0c:40:14:82:a5:b4:ec:09:50:b7:ff:3d:d8:40:3c:
                    b4:f4:7f:4d:20:0a:ed:6c:72:2f:22:f1:62:6e:ad:
                    24:73:74:5f:6a:f3:73:38:f6:fc:bd:82:0d:a3:84:
                    27:a1:24:d4:e3:b6:93:eb:70:74:a0:62:9a:61:52:
                    fd:8e:77:f3:14:11:5e:20:32:78:84:c5:d6:8f:0b:
                    78:27:f0:48:55:ae:15:ab:88:a2:81:4e:f8:42:9c:
                    a0:33:53:70:ca:88:e8:b6:a9:95:fc:42:61:23:06:
                    8c:5e:e4:87:33:1d:58:63:2b:95:19:5c:6b:c0:80:
                    56:b0:f5:35:ce:97:18:e3:a3:d4:ee:21:72:28:bf:
                    9a:0d:1a:b0:20:16:cf:1d:e0:72:8e:28:c5:36:0b:
                    74:dc:97:45:51:99:ce:8e:64:6d:b1:2e:ff:60:92:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:38:29:9C:60:7F:FA:C9:92:2C:74:AE:EE:89:D8:06:A9:34:AA:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.153.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:f1:97:e4:e9:32:f2:89:fb:31:29:2e:6a:c6:f7:9b:8c:
         f2:dd:44:61:b2:47:24:6c:d1:98:0b:26:eb:51:59:ca:97:18:
         e6:dc:4f:12:29:6b:42:97:ec:54:7c:f8:a9:5e:6b:43:32:2d:
         be:9b:46:31:da:0b:ce:d4:2a:b1:e4:c6:d4:7f:cf:02:11:33:
         2a:65:10:51:ec:6b:69:c0:c9:8f:a5:c6:ef:7b:e4:e8:1f:1f:
         7b:04:4b:47:fe:a8:47:e6:59:aa:1a:11:1a:42:3f:7c:c8:78:
         4a:5f:fa:7a:b2:68:9a:de:7a:6a:60:2a:8f:fc:90:7c:ec:64:
         40:6f:0f:de:70:46:dd:d5:36:63:c1:f6:1e:4b:e6:1f:d2:cd:
         89:1d:c6:5c:5c:28:d9:a4:98:80:77:60:cf:f2:3b:fa:ca:f3:
         8c:b6:91:93:c6:5a:87:5a:8b:44:95:48:21:a6:6e:05:75:57:
         87:3b:58:a1:86:b5:3e:16:d2:33:87:65:ca:0f:3a:6e:26:92:
         34:7d:44:0d:d1:9f:49:a1:e2:c0:64:84:ad:17:af:fa:c7:14:
         a2:b2:d0:c2:cc:d4:ba:0f:8c:3c:70:d8:21:3d:af:00:bb:8e:
         4f:f4:b3:95:09:06:9a:ec:0a:79:9f:22:1e:d5:b4:48:94:30:
         7a:99:7a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:30 2024 by rpki-client on console-fra.rpki-client.org