Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
File:                     f1aed8d6-940e-3937-85b2-13f8369430be.roa (raw, json)
Hash identifier:          2iyAqifcw//ZK3pkE6oDdjLvxRfEpC1Zh1MJruppZEg=
Subject key identifier:   3F:0A:EE:27:CA:41:5D:8C:3D:FE:7B:0C:18:AF:6A:11:D8:52:12:43
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DEF06949D0F4D319DBD80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        159.18.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:ef:06:94:9d:0f:4d:31:9d:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=6d79c724-aef8-428d-bfae-b13d92b103ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:e1:da:73:81:0a:26:db:69:83:36:da:eb:
                    e9:ed:50:15:a4:18:d3:40:78:8e:b2:88:60:66:88:
                    9b:3d:cd:32:33:fc:fa:fe:56:e9:44:a4:c9:72:35:
                    ba:7d:6d:47:09:7e:5f:82:f5:64:f3:69:f8:25:31:
                    be:be:67:d3:b1:33:fd:8e:cb:65:e8:0c:a0:19:46:
                    08:fa:1e:85:bf:49:02:da:68:21:f1:e6:17:d9:56:
                    12:62:9c:91:80:10:25:db:08:ef:cb:fa:95:03:be:
                    01:d9:72:0b:01:dd:3e:f6:bc:03:42:f8:dd:8a:96:
                    0a:c0:24:7d:63:c3:79:7d:a0:e5:d4:07:b2:8f:a6:
                    c0:99:63:86:2e:28:b7:ad:a8:f8:41:c0:8c:2b:26:
                    6d:ac:50:ea:c1:c0:24:a4:8d:71:86:c9:d9:03:7a:
                    37:2f:10:2d:e0:50:fc:1d:ff:0b:89:4e:4e:30:ae:
                    e8:ee:18:b1:09:8b:37:4a:8d:79:c6:c2:12:6e:a7:
                    f4:66:b6:ae:ee:14:c6:f0:34:22:ea:e5:46:00:ff:
                    6c:34:b4:dc:f9:12:28:e6:61:32:6f:8a:3c:7a:51:
                    6b:94:70:01:f8:f5:8e:92:da:fa:7d:f5:58:3f:13:
                    de:b3:68:fb:34:ec:8e:c7:10:79:87:c5:d1:7b:89:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0A:EE:27:CA:41:5D:8C:3D:FE:7B:0C:18:AF:6A:11:D8:52:12:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f1aed8d6-940e-3937-85b2-13f8369430be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:7f:6d:be:6a:52:c6:4d:60:14:de:3d:f2:94:15:c9:c6:
         65:8f:1f:e4:cc:f7:65:01:44:f1:4b:12:f9:bd:d9:51:d7:75:
         b2:3a:f0:c0:d3:23:8f:d3:b9:9f:9b:8c:1f:32:fb:8e:f9:aa:
         40:74:ba:c1:08:fb:4b:f2:22:b8:67:76:e8:fe:13:69:94:b4:
         59:4a:65:aa:9b:b9:5b:13:df:47:7b:62:e1:af:88:3b:ad:db:
         cb:c1:60:bb:28:81:e8:62:dd:20:a8:7f:d3:65:d8:a9:6c:4f:
         0a:e1:e6:fb:e5:6c:ac:4d:04:e9:e1:ba:2a:10:7f:39:26:40:
         c8:46:af:7d:ff:52:45:5a:d9:31:34:b8:0f:5d:21:be:ff:ba:
         bf:55:cf:4a:d0:b2:31:68:10:86:27:14:21:cf:a5:9c:85:ca:
         55:d2:20:56:e7:94:be:e7:e5:8f:db:78:29:95:ed:09:f4:bd:
         65:ff:03:3b:d0:6c:7c:c9:8d:1b:c2:df:17:c2:3b:a6:54:12:
         36:ab:5e:82:21:01:6b:34:3c:19:3d:4b:1c:49:c8:4e:a0:88:
         32:36:8a:8d:ba:97:79:71:34:f9:e6:21:81:cb:3b:9e:92:d7:
         48:76:d3:cf:2f:d2:e7:68:15:e8:b8:77:24:4f:95:35:16:5d:
         ad:f8:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:18:37 2024 by rpki-client on console-ams.rpki-client.org