Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
File:                     cb33f4ca-7864-3f1e-854d-1cec059ee046.roa (raw, json)
Hash identifier:          5Efe37NMvPOyIgEMurjjQU2FCNwq/opbihtfcTs0W1M=
Subject key identifier:   C4:8B:75:3B:BF:A2:08:52:45:F6:22:97:39:1C:B7:75:5F:E2:68:AA
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584742BB592CB77DAD08E9CE0E40
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     25899
IP address blocks:        67.210.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:59:2c:b7:7d:ad:08:e9:ce:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=6369acf2-cedd-4ba2-9c6d-5902df7011bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:ba:0a:ff:04:dc:89:fa:5c:b4:eb:d5:d6:
                    95:42:11:88:20:b9:6b:28:8f:f4:90:c5:b2:dc:95:
                    e6:3c:69:84:5f:33:e7:f1:95:f1:4f:34:95:c1:a2:
                    b0:09:fa:7d:f7:84:20:bc:4d:80:16:f4:5e:f6:7c:
                    7e:a6:a8:57:a2:71:39:6c:91:6d:e2:f1:26:f9:8f:
                    a5:13:69:6d:35:36:02:c1:a8:7a:b1:ab:89:af:42:
                    65:df:0b:b9:52:7d:ba:77:1c:cb:ce:99:bc:00:7a:
                    c5:0b:b7:60:b9:dc:53:98:82:24:d0:8f:6d:07:98:
                    d2:27:c9:fd:91:10:03:ab:1a:29:7f:10:30:96:69:
                    32:d3:a7:3f:f1:25:b6:92:a4:42:f9:71:a2:56:96:
                    d1:f7:b8:15:ae:8d:ce:a9:8c:c3:c5:12:5e:cd:a8:
                    2d:68:ab:a0:ac:db:08:04:f6:2b:00:4f:e5:3b:be:
                    92:c2:ca:96:dc:7a:e4:d2:f9:6d:76:e7:fe:1c:68:
                    84:0c:8a:32:bf:cd:ac:b7:8f:56:dd:bc:f4:35:d0:
                    e8:69:4a:ef:32:35:37:9b:23:8f:4b:53:61:30:70:
                    c1:0b:aa:06:ff:7f:be:a1:ab:33:6a:37:79:e6:fa:
                    6a:21:3c:b5:35:22:75:4e:bc:6f:b5:e1:a8:e7:65:
                    99:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:75:3B:BF:A2:08:52:45:F6:22:97:39:1C:B7:75:5F:E2:68:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:20:79:08:42:5f:b7:36:1f:20:bc:23:ec:7d:6f:75:86:
         5c:d9:42:aa:12:0c:24:59:7c:9e:c5:a7:06:8b:6a:46:9f:ce:
         03:92:9d:ce:fe:bc:83:a6:81:08:bf:ba:7b:60:4a:34:2e:be:
         33:d4:05:db:f9:c9:37:82:64:30:17:ec:3b:89:78:bb:7c:e1:
         6b:ea:2f:08:06:03:2a:00:6a:1d:87:55:2a:f0:75:d2:81:4d:
         0f:e1:c6:dc:42:61:06:92:ab:be:73:46:c1:e8:ac:f1:0d:e8:
         47:79:a6:19:0e:5e:ae:a3:d5:94:e0:75:e7:fe:4c:ab:6f:d1:
         9c:03:fe:b7:c8:75:fa:89:3c:bc:33:01:96:40:f6:39:01:80:
         45:3a:91:7e:73:3a:9e:f6:53:34:b2:4b:31:b4:05:67:41:9f:
         f3:76:c2:6d:91:43:20:e9:e6:b9:00:0c:d1:87:e3:a0:19:79:
         43:5a:db:22:1c:19:24:f1:3c:2b:ee:ab:83:d0:ed:99:dd:38:
         d7:8a:8e:69:20:81:4f:fa:6b:57:5b:19:59:a2:8f:9a:88:12:
         d6:ac:9e:0d:bc:48:13:3d:f9:50:13:5e:ed:ed:55:e6:41:e0:
         0c:24:67:0a:63:02:29:f7:5c:f4:c4:ff:48:8e:4c:14:12:7c:
         32:70:93:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:01 2024 by rpki-client on console-fra.rpki-client.org