Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa
File:                     e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa (raw, json)
Hash identifier:          oRwL/DeJ9utcTys2R/QoEjuzhnEZmI5bLW+mYb+g+gg=
Subject key identifier:   4C:5C:D0:B9:7A:50:A3:17:77:49:35:46:6E:05:90:19:B4:07:C2:14
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D6621883FD868A94B00B60
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        216.129.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:62:18:83:fd:86:8a:94:b0:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=6fc6493a-fe3b-4493-bebb-2b7eda784ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:53:62:39:49:ea:ee:26:cb:76:ce:84:51:
                    b8:d5:9b:70:8c:bc:8f:0f:dd:c3:05:ed:ea:e9:84:
                    03:98:d7:64:fc:62:1f:d2:cf:db:02:b1:54:47:82:
                    8c:e9:21:55:22:4f:cb:91:e2:07:3d:f6:0f:0d:ef:
                    6d:8f:12:6d:6e:dd:56:03:6a:56:23:ec:e3:90:b4:
                    27:16:e9:29:be:06:00:5c:64:11:ca:35:d2:d5:1d:
                    e0:b5:4b:fc:40:c6:d2:7c:a6:45:f5:60:df:0a:53:
                    c4:00:fe:02:b1:0c:a8:20:96:35:a4:0f:47:ed:41:
                    a3:28:d7:7c:5f:67:b1:87:6e:6d:78:2d:ef:71:66:
                    be:c7:6b:0f:2c:e9:a9:84:79:55:c5:83:b1:80:19:
                    67:e7:94:26:9d:e9:be:2e:52:a3:98:99:aa:ad:c5:
                    a3:94:be:e8:1b:e3:bf:62:10:e8:08:e6:14:07:76:
                    3e:57:ea:67:c7:e6:37:56:dc:0a:d1:2c:00:1f:6b:
                    41:88:cc:17:32:b8:e3:2b:e3:42:d0:57:e8:89:63:
                    2f:62:91:d5:e4:c9:91:f2:a4:df:62:04:2e:b2:3c:
                    0c:72:a7:c3:31:60:d9:60:b2:6a:bb:41:fd:24:00:
                    d0:d7:aa:c9:4c:71:62:93:e9:9f:9e:04:ff:c3:d2:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5C:D0:B9:7A:50:A3:17:77:49:35:46:6E:05:90:19:B4:07:C2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e57b0d4e-1ad3-32ea-bef3-37966c1e760d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:17:d1:10:5b:c3:af:3b:f3:6a:77:7f:fc:dd:91:f9:22:77:
         52:63:11:74:f1:41:63:72:88:32:8c:c7:47:ae:1d:2b:93:97:
         3b:e8:c4:7b:c6:28:f9:d8:13:f2:a6:c8:ea:c1:41:e1:be:ae:
         01:1b:4f:65:dd:50:47:7c:e5:ef:c4:e6:c6:ce:f4:2f:f6:ac:
         a7:62:6c:1f:2c:60:71:84:3f:79:82:fb:be:4d:fe:1c:2f:39:
         0d:5c:d3:67:f7:89:c8:50:7d:cd:28:79:b9:b2:0c:d0:dd:d0:
         1b:c4:5e:7a:75:77:ff:f1:dc:b9:82:94:69:15:9e:9d:0b:96:
         54:83:de:04:86:0b:15:e0:e3:db:6e:7c:17:3c:99:81:1a:86:
         a5:10:06:b6:25:7c:9c:ae:7f:53:ff:bb:7f:24:53:d5:81:af:
         55:98:6e:9e:4b:a0:08:6f:df:b1:48:04:73:1f:08:29:15:3f:
         c0:43:83:ac:b8:3a:57:be:75:2d:4c:eb:35:4a:29:2c:6e:93:
         c4:3f:30:1b:77:28:3a:50:e9:40:89:26:28:97:bd:3c:d1:e8:
         0e:42:b0:2c:10:8a:04:cf:b9:92:6b:d3:7d:36:1a:15:86:45:
         8f:2d:f3:54:16:04:7a:33:68:1c:63:50:6e:53:f9:50:b2:4f:
         a1:4e:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org