Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e2999313-8d9e-3864-8255-447f0f6ac165.roa
File:                     e2999313-8d9e-3864-8255-447f0f6ac165.roa (raw, json)
Hash identifier:          gn/VBj0CWSodZ9vt0inkba4tpnRQUvj3ZA9TJwFYYwQ=
Subject key identifier:   D8:CA:6A:79:34:5E:E7:43:92:65:E0:11:A0:F8:1E:B4:A2:5E:29:3A
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB708E81562712D74B2340
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e2999313-8d9e-3864-8255-447f0f6ac165.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     11628
IP address blocks:        159.18.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:70:8e:81:56:27:12:d7:4b:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=a6f6c3d4-0f03-4b82-8242-bb3339c7743a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:cb:b0:65:e8:bf:ca:a8:59:63:98:7d:be:
                    3a:a0:07:ff:46:79:d5:84:0a:1d:b2:c0:3a:af:60:
                    c1:1f:a5:76:0e:b6:d2:1a:b4:f7:d7:2f:63:90:a8:
                    63:b9:26:b6:70:04:d0:99:ac:ba:78:b4:8e:23:5e:
                    8d:b1:7d:cc:6e:76:f3:34:8d:87:f7:1e:09:a0:7e:
                    ef:9a:89:49:f7:36:64:ce:2a:73:f9:cc:1a:5c:79:
                    7d:bf:15:99:5f:b4:b6:51:80:8a:db:d6:ea:eb:df:
                    61:56:b6:82:ea:95:e0:49:86:a0:41:18:ed:2d:02:
                    0c:6a:16:e3:29:d3:50:df:7a:43:6f:27:6c:d1:f3:
                    c9:64:5c:be:33:c2:13:18:c6:a9:c4:40:de:e0:02:
                    17:42:07:b8:ad:c6:a7:ff:37:51:b7:76:7a:cf:32:
                    ef:22:3f:fe:70:c5:d4:62:df:58:67:7f:97:8a:8b:
                    3c:9c:1b:f0:35:de:b4:d1:1d:a9:e1:38:77:fa:2a:
                    35:b3:49:9a:db:ff:4d:4e:ae:48:43:a1:65:65:7a:
                    ab:bf:9d:ee:a8:af:59:31:0a:95:81:25:ec:07:cb:
                    40:ce:28:d8:14:5c:70:0b:7e:ae:f9:d2:d1:cb:55:
                    e8:83:0d:58:37:fd:ea:9d:45:c3:32:9e:98:57:b2:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CA:6A:79:34:5E:E7:43:92:65:E0:11:A0:F8:1E:B4:A2:5E:29:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e2999313-8d9e-3864-8255-447f0f6ac165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:5d:af:8e:7e:46:ee:f3:df:ac:c0:89:0a:50:cf:f6:6d:
         b6:df:53:82:40:98:c3:b3:8d:97:96:da:6d:26:93:ab:c7:f3:
         de:4b:0e:47:e5:fb:47:dc:d8:33:1c:2f:78:6b:f4:a7:d7:97:
         23:49:c5:33:1c:b5:b6:9a:b6:45:f7:ad:ca:4b:67:44:5c:f5:
         b8:9c:f1:29:0c:3a:47:9f:29:2c:9b:da:13:85:70:38:05:00:
         29:a5:51:1a:69:d5:59:8b:62:46:94:8b:bb:d1:41:ec:47:68:
         a7:ff:52:bb:d6:f6:d7:a3:01:a3:bf:3a:39:15:82:de:d1:49:
         ef:24:2b:45:fe:4c:51:ae:f7:cb:d8:e9:54:8f:89:74:8c:35:
         6b:e0:fa:79:40:e1:7f:e8:9d:a2:65:e8:97:7c:ff:2b:c3:d7:
         ee:ff:b6:6d:bc:39:84:a1:3c:1a:75:07:09:d0:9f:c2:91:1d:
         6c:8b:c7:aa:8c:cb:8c:d2:8b:59:57:2f:dd:95:2c:be:e7:3a:
         c5:73:33:ba:2e:12:1a:d9:8e:da:19:d0:00:b4:9b:0c:01:95:
         2a:7a:77:c9:41:6b:06:a8:2a:4f:e4:fd:31:fc:ca:7b:34:d6:
         1d:b9:1c:e0:f2:ed:97:22:01:6a:1e:1a:de:a4:db:8d:7c:16:
         49:83:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org