Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f2efefc4-bb16-33ec-88cf-04c4f45019c1.roa
File:                     f2efefc4-bb16-33ec-88cf-04c4f45019c1.roa (raw, json)
Hash identifier:          Ebf2n4yexQUCAHMYjUfPDlCxftfR6ewg4pev/rk2fHQ=
Subject key identifier:   E1:5A:07:55:05:15:E3:CA:71:D8:38:EF:17:9D:DB:94:9B:9E:80:45
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858459D2DF4044F00E7CC14F98B80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f2efefc4-bb16-33ec-88cf-04c4f45019c1.roa
Signing time:             Sun 21 Apr 2024 01:00:25 +0000
ROA not before:           Sun 21 Apr 2024 01:00:25 +0000
ROA not after:            Sat 20 Jul 2024 01:00:25 +0000
asID:                     15290
IP address blocks:        209.82.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:2d:f4:04:4f:00:e7:cc:14:f9:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Apr 21 01:00:25 2024 GMT
            Not After : Jul 20 01:00:25 2024 GMT
        Subject: CN=00716daa-f43b-41f4-9c94-7519b436c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:84:32:59:e6:ec:a1:86:a8:3d:6a:3f:6d:
                    15:ad:08:6b:ea:be:75:d3:65:02:74:62:5c:53:78:
                    3e:e0:67:36:b6:61:63:2f:55:a5:18:f6:ad:42:24:
                    d0:10:5f:39:ee:e5:65:79:01:b1:20:34:35:42:ef:
                    45:58:13:9f:bf:e6:95:b3:27:92:76:7e:ff:9a:68:
                    16:a5:f1:90:45:69:bb:5b:17:bc:06:43:54:e0:3f:
                    42:10:5e:01:30:7a:c7:36:8a:39:f8:b6:06:75:9c:
                    df:b7:65:a5:5d:9c:a6:71:de:e2:79:e5:a1:bd:7f:
                    09:ae:fc:5c:b3:f2:13:08:0b:fe:15:7d:e8:d0:bc:
                    1a:00:fd:05:9c:d8:14:d2:e2:b3:ad:09:d8:69:e8:
                    10:17:7d:e8:09:5b:b4:f9:ea:35:2e:06:f3:c6:25:
                    70:01:af:4c:7e:06:55:99:2d:3c:46:87:f7:52:34:
                    82:a0:80:fe:b4:63:40:cb:a6:e0:66:83:90:2a:02:
                    b9:5f:33:ec:47:1a:a5:68:53:42:c8:5c:11:1c:01:
                    38:5f:7f:13:8e:2d:86:db:d0:d8:99:b3:a7:50:f8:
                    fc:14:89:ad:82:7f:29:90:69:36:85:58:80:ff:64:
                    40:88:0f:1c:03:e3:5c:5c:e0:4b:d9:a9:38:04:ea:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:07:55:05:15:E3:CA:71:D8:38:EF:17:9D:DB:94:9B:9E:80:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f2efefc4-bb16-33ec-88cf-04c4f45019c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1d:1c:f0:1d:a9:d1:2a:f4:2d:4e:6a:6e:8b:21:0e:48:8c:
         1d:d0:89:d6:36:e9:b2:50:95:1d:8b:1f:44:ee:5b:fe:39:b8:
         52:96:c9:dc:5a:f4:ce:31:ac:87:3b:06:77:b9:28:72:72:f0:
         82:47:5d:8b:f9:dd:b4:61:46:61:36:69:b6:f4:46:ae:a1:2c:
         9b:64:04:d6:e9:5c:cd:d0:12:a0:18:3e:37:62:ba:0b:92:cd:
         db:2a:01:ff:61:d4:e2:28:a9:bf:20:a2:6a:49:ce:aa:29:02:
         71:e5:e6:a4:98:cf:e3:8e:ff:98:06:26:35:a4:c7:35:af:53:
         08:22:b9:1d:53:49:c4:b0:e2:a0:d7:64:7d:29:41:96:fc:32:
         da:7e:b8:0c:60:62:44:82:9c:04:5e:0b:6c:25:5b:e1:ea:3b:
         83:ac:fb:c6:c8:81:4b:ed:07:52:b2:81:7f:27:23:7d:19:87:
         3d:33:c8:91:44:60:ce:fe:59:8a:5f:2d:11:85:ef:f7:ee:0a:
         18:42:90:24:c8:e1:cc:1e:a7:37:47:4e:f6:a1:24:89:3b:60:
         55:d2:8e:71:96:7f:1b:dc:46:05:da:2c:da:7b:01:cc:52:c2:
         6b:3c:fe:1b:b0:db:9f:92:ef:73:81:05:79:68:78:f9:12:c9:
         ce:65:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:48 2024 by rpki-client on console-fra.rpki-client.org