Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa
File:                     deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa (raw, json)
Hash identifier:          VzcmM1l6gLzfKhx78Qa4LCVYjqR2d9zXEITPeDn/Tkc=
Subject key identifier:   5C:97:8E:AC:E9:B9:6E:94:9A:02:FE:29:C4:FF:BE:04:9F:4F:F9:6F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D6618EDD0158B899DE6800
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        207.245.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:61:8e:dd:01:58:b8:99:de:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=c6764779-8867-4160-b150-d96a38c15f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:20:3b:cd:4e:f1:52:d0:c6:0c:c4:3f:cf:
                    12:b5:9e:5a:35:01:92:df:23:f0:29:1c:7d:99:a2:
                    ef:7f:92:42:2b:61:e1:80:e7:e0:18:9a:13:48:3b:
                    3b:e2:ef:64:65:27:7f:86:01:9c:61:09:4a:29:5d:
                    c3:d4:4e:bd:e9:a2:17:97:3b:9e:ed:97:4c:16:0a:
                    a3:59:6e:09:51:72:18:ad:cb:31:43:8b:fd:38:8a:
                    9d:fa:3b:50:cb:0a:00:25:eb:f4:2f:a3:e4:34:39:
                    7a:89:ee:94:90:dd:32:76:dd:d2:3b:a0:49:a6:86:
                    57:75:b3:15:58:4a:91:e0:92:27:e9:5a:90:95:7a:
                    85:d1:71:e8:31:e0:d8:7c:87:e0:fc:4c:a4:6e:9a:
                    d0:bb:3b:83:80:3a:5f:a0:49:92:ba:0a:01:6f:2e:
                    29:f0:de:1a:f7:14:52:ed:d8:43:ba:e7:bb:ee:b7:
                    36:ee:cd:48:9b:ea:5e:ee:28:f2:10:ce:93:8e:7c:
                    a5:dd:a5:8d:a1:78:b3:5d:7f:b5:f7:59:34:b7:02:
                    2d:0d:29:48:de:49:b8:52:99:a3:e5:a4:26:b6:1d:
                    a0:43:d1:14:7d:34:f2:f2:68:aa:48:4a:cc:4f:1d:
                    2e:01:96:b4:bd:97:ab:d5:a2:b5:8d:02:f3:cc:09:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:8E:AC:E9:B9:6E:94:9A:02:FE:29:C4:FF:BE:04:9F:4F:F9:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/deb34e7c-1330-34c1-b9c3-a470fa4f8d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5a:a0:05:f9:a1:43:b7:0f:00:17:84:5c:82:0e:2a:2d:cb:
         19:b2:bb:20:8b:72:1c:38:4c:99:1c:b1:6c:f1:c7:62:b9:1c:
         2b:03:a8:a9:fe:66:9d:95:89:98:1e:cc:b4:70:37:fa:15:06:
         62:5b:a9:29:34:ec:d5:e1:f1:ba:65:f3:0b:73:27:6e:12:8d:
         1f:92:0b:08:9e:89:8c:21:42:19:5e:ef:c8:d2:76:b3:36:98:
         80:a8:04:40:52:8b:ae:0d:2d:8b:21:ed:c4:8f:96:96:6c:c7:
         2d:f2:34:88:69:e0:2a:ff:c1:f9:9b:8e:83:0d:88:28:72:51:
         4f:8a:93:67:0b:d2:43:f6:d3:ee:f4:ff:a8:ad:39:b8:e5:82:
         52:e8:bf:33:e9:d4:11:f3:54:36:09:bc:5a:5c:59:af:ab:0a:
         f5:fe:9b:da:e9:c5:d1:9f:21:65:4b:7e:be:5f:19:a3:18:28:
         ce:6d:31:47:4a:ff:67:b6:4e:5c:3a:62:4a:17:b1:6d:cd:95:
         22:b9:cb:ba:8e:9b:86:79:7b:07:7f:c2:af:7f:32:70:11:97:
         24:64:14:12:8a:fa:9b:ae:40:9e:13:53:da:04:c7:b0:c7:90:
         ff:a2:2e:6e:5c:36:15:86:8f:3f:db:f8:b4:a7:68:1c:55:45:
         f9:3e:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:23 2024 by rpki-client on console-fra.rpki-client.org