Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa
File:                     fb97fe62-d69c-303f-82f4-0933263566b8.roa (raw, json)
Hash identifier:          s8lTeSheSFBFPGbdQHZVXVS/5thk/oF1A2wSPFoj/jE=
Subject key identifier:   4E:73:5E:12:C3:DE:7B:B0:46:A6:E1:C6:B9:16:D6:D5:09:4A:8B:83
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D661BBD199228D3B701500
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        209.112.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:61:bb:d1:99:22:8d:3b:70:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=83d32dac-c753-43f4-9b7a-7b8aa52a9eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:07:d8:4f:41:fd:27:b5:de:b6:c8:e7:c5:
                    ff:e5:e8:1b:00:62:e5:00:85:e5:18:20:39:93:9e:
                    a4:42:21:f0:2c:6c:39:04:09:a5:0e:1e:6d:92:6e:
                    dd:f7:3b:29:92:2a:62:cc:7e:7b:a6:96:78:eb:36:
                    8c:4b:87:2b:ee:6a:b1:33:32:48:59:5e:19:df:08:
                    f3:44:ee:ea:5d:0e:b6:93:2e:fa:0b:68:1f:9e:1b:
                    66:52:fe:f8:ee:0f:82:08:4e:e2:62:13:c0:f1:3c:
                    de:33:16:f0:14:11:3d:d8:c4:06:45:65:e1:38:93:
                    88:1c:b0:ba:31:e9:a9:ca:99:71:dc:d0:45:a1:b0:
                    c8:c5:0a:a9:7e:ea:a5:4e:39:07:10:54:65:77:c2:
                    c6:2c:d5:77:b9:00:d5:fb:7d:1d:26:c2:d5:fd:36:
                    ec:1f:3f:73:bf:5b:08:fb:ac:9d:5b:6d:3b:6f:37:
                    34:32:59:bd:f0:2f:80:d3:24:03:59:58:4d:c2:30:
                    36:af:ca:28:e2:f9:6f:a6:a8:22:94:bd:56:fb:e9:
                    06:85:9d:e9:9a:da:ce:a0:7c:d7:7b:94:fd:17:39:
                    18:7b:27:db:5a:ed:f1:bf:38:58:e7:c2:a3:89:86:
                    55:9e:12:56:5e:bc:e6:53:34:66:7b:a3:74:64:62:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:73:5E:12:C3:DE:7B:B0:46:A6:E1:C6:B9:16:D6:D5:09:4A:8B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/fb97fe62-d69c-303f-82f4-0933263566b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.112.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:55:5c:6b:83:53:7d:e1:e7:98:a9:6b:2c:88:a8:f2:70:
         f1:5a:5c:3d:de:d7:a8:08:a3:60:8e:ac:fd:56:11:2a:cd:b7:
         f0:b1:51:5e:c2:6c:04:cb:53:a5:75:84:c2:07:b5:08:ef:4c:
         74:d9:fd:aa:04:e9:18:67:0b:8b:4a:f0:7f:55:f1:0d:ca:cf:
         da:b6:c8:fb:f5:6b:7d:7d:37:0e:b5:0c:3a:70:c0:5d:ae:3b:
         e5:cb:36:48:ff:de:53:b1:7b:55:5e:68:45:71:f4:75:63:34:
         06:54:9c:b1:43:2a:7b:71:e6:df:8a:9b:54:7a:9f:8a:64:6b:
         5e:82:c8:5a:7f:48:17:a5:85:a0:5c:4d:08:9b:61:fe:b6:13:
         14:2c:c8:2b:2f:57:9a:6c:ea:ed:49:1c:0c:33:be:e7:93:b9:
         d8:a3:87:9d:f3:f6:fb:31:f8:3e:29:30:3b:35:ae:6e:23:f2:
         32:50:15:43:f2:8e:59:b0:fb:06:76:f2:ff:4e:8a:77:44:57:
         33:07:65:06:fc:96:89:f4:05:47:20:a9:58:cc:5a:b4:a0:80:
         d5:2a:69:45:f3:a4:a9:85:a0:24:1d:6f:89:4b:26:2c:d7:ea:
         f3:2d:74:6a:39:0c:53:0e:ca:a1:e5:f5:99:15:25:d8:06:5d:
         51:31:a4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:30 2024 by rpki-client on console-fra.rpki-client.org