Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa
File:                     f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa (raw, json)
Hash identifier:          RE4D8GeU5u42rff3Va/40HKqEn63LpzDBH769xMN6Vo=
Subject key identifier:   64:4D:BA:2F:5F:57:F5:0E:3D:94:27:5D:95:AE:0E:56:58:A7:E2:DB
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858475BDB76C02AB5FB3C9BA02640
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     15290
IP address blocks:        209.146.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:76:c0:2a:b5:fb:3c:9b:a0:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=934a073a-f89b-4b9f-a567-88daa43daa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:e6:1c:d0:53:fa:b2:31:03:ad:ad:4b:75:
                    2d:3c:4a:59:b9:d2:c0:9c:ba:7c:24:57:14:8c:00:
                    25:46:63:fa:dc:75:ae:3e:92:bd:2e:ed:73:5a:5d:
                    24:ad:f8:d7:a2:b7:94:7a:64:31:84:78:94:7a:6a:
                    cd:d3:87:77:7a:f4:3d:ce:c8:3c:35:c6:f3:9f:d9:
                    a7:12:e2:83:c4:5c:84:21:d8:ed:cc:a7:8a:f0:d9:
                    f2:6c:55:49:64:58:37:c7:40:ff:32:6a:96:5d:6d:
                    d4:62:c2:4c:d2:ac:18:3c:d3:b0:ab:ea:8c:dd:73:
                    e1:de:6e:91:9b:11:fa:36:96:55:9d:99:c5:96:b9:
                    a7:a0:6e:ae:81:9b:53:47:8e:a8:b1:39:f4:87:8b:
                    4e:c2:f7:e6:47:35:35:7a:8f:1c:f4:7d:40:d6:4d:
                    87:c0:7f:b6:78:30:b8:9b:be:77:8a:f7:35:15:41:
                    6c:4c:79:68:31:10:5b:5e:05:b2:41:c9:1e:6d:88:
                    75:bf:ab:3f:6b:bb:a3:61:aa:59:8c:5e:bb:bd:2a:
                    4d:bc:65:15:9f:56:f5:33:98:4d:84:43:96:de:7a:
                    5e:6e:cd:c4:1e:22:76:2b:c4:e8:25:3e:43:23:97:
                    2f:16:3b:8e:b2:6c:63:0f:fe:ab:ff:c0:ac:79:93:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4D:BA:2F:5F:57:F5:0E:3D:94:27:5D:95:AE:0E:56:58:A7:E2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/f7a20a53-9f00-3a53-9e38-bc73bcdd932d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:15:7e:c9:1d:ea:79:6b:1a:88:d9:34:ca:60:64:6b:03:
         59:14:2f:5c:15:50:06:ae:85:1f:41:3d:40:4c:9b:1c:90:b8:
         9f:6b:53:b6:f4:65:0b:e0:e6:b9:c3:18:64:e4:6b:14:a0:77:
         8e:28:a0:bd:59:94:91:ae:1c:eb:63:5c:b0:08:f9:3e:7d:6b:
         cb:3f:15:10:51:e1:94:7d:75:2b:10:ee:59:a7:e3:e6:0f:c2:
         b6:37:b2:c1:78:ad:b2:d9:a1:1b:d4:1f:16:b1:40:2b:66:8f:
         69:0c:95:8d:47:da:d0:22:b0:86:84:a8:10:eb:c9:b7:81:a5:
         b2:43:df:79:1a:7e:3e:e6:d6:24:a0:cc:a4:e9:dd:4b:3d:94:
         0a:97:fe:34:1c:37:40:bd:fb:d0:24:0f:b7:0d:3d:00:5f:09:
         29:70:d9:14:fd:ae:40:6d:75:39:62:d6:0f:b2:cc:79:42:c5:
         f0:d5:b5:42:7e:8c:e5:10:99:55:ac:1d:55:00:d0:36:ef:34:
         26:39:87:ea:a5:57:62:08:d3:ca:be:c3:a8:98:fe:74:f2:47:
         9b:6f:d5:cf:52:21:7b:07:4c:7e:5b:5f:a5:d3:c5:3b:8d:e8:
         d2:90:8c:f0:b5:56:fa:98:1e:27:da:dc:b3:7e:92:65:a4:f0:
         88:5c:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org