Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
File:                     7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa (raw, json)
Hash identifier:          E+dLQl2a4skxF2MislDlTqBd/qaHFTXfnReUwugB65Y=
Subject key identifier:   BA:FC:8E:8F:93:F2:C3:F8:1D:08:92:C7:D2:DC:7E:42:2D:C5:D3:5A
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F432858478B51120E49C341E731706F00
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     36184
IP address blocks:        209.160.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:12:0e:49:c3:41:e7:31:70:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=b470656c-4000-42ad-9c19-79fe8ae351c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:0f:9e:16:af:b4:1b:d8:b5:6f:a2:8c:4e:
                    28:f5:03:8f:c1:61:3c:56:b4:d4:0c:45:3b:52:b4:
                    32:fa:04:af:82:bb:e9:87:67:a1:6e:7e:d7:92:a4:
                    59:77:64:c4:83:53:79:f7:3a:1b:61:80:a0:73:72:
                    bb:e1:56:bd:34:37:1d:e1:c4:bf:de:68:f9:99:ee:
                    57:40:a0:25:f9:6a:99:b1:ca:19:8a:e3:d4:f3:0e:
                    40:c0:50:93:b5:0c:04:f6:2f:0a:5b:6d:94:85:74:
                    3c:14:89:c2:e5:4e:5d:60:d2:f7:81:96:f9:7b:f2:
                    08:3a:c5:96:ad:35:26:bc:6a:66:45:94:84:05:2e:
                    1c:57:10:cb:32:f1:24:8e:21:76:2d:d7:82:7d:4d:
                    83:01:2d:b6:c5:81:d8:9c:18:eb:6a:66:7e:0c:1a:
                    c0:4f:5c:ce:07:65:ed:bb:cc:63:47:0f:9a:48:7f:
                    19:d5:81:5c:3d:d2:93:96:cf:18:4b:7a:7e:f1:6d:
                    8d:92:7d:ed:3c:85:c8:4f:d6:48:9b:e9:36:ec:e5:
                    3f:46:cd:66:b1:eb:07:73:0d:e7:a0:dc:2c:1e:2d:
                    66:41:b7:6b:4e:7e:4a:07:d1:ac:7e:79:93:54:b4:
                    61:94:ba:98:65:d4:04:eb:e8:23:bc:59:85:23:17:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FC:8E:8F:93:F2:C3:F8:1D:08:92:C7:D2:DC:7E:42:2D:C5:D3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/7a4e53c5-e448-3313-b055-eb9b8e0387d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:ae:f1:34:5c:5b:6a:ad:6a:a9:3e:f1:0b:2d:5b:6b:d0:
         43:86:b4:69:28:5d:8a:d4:c5:9b:48:2f:f6:a0:e0:fb:99:79:
         59:33:e8:28:8a:35:32:f0:4a:76:bd:98:fe:08:85:bc:3b:44:
         c4:d9:5e:de:37:85:ac:f0:5a:d5:65:c1:d1:50:06:56:bb:e6:
         ad:a1:f0:7b:ff:c8:81:db:3a:b3:96:81:af:ac:a0:19:9b:ff:
         69:7e:cf:b4:0b:f7:9b:59:9b:b1:84:28:ca:cb:49:ca:10:c4:
         96:7b:09:47:71:21:00:be:60:39:22:f8:ec:34:8d:f8:6e:cf:
         b8:1a:aa:48:d3:ff:24:b1:6d:af:e0:ec:8c:3a:62:21:f9:e2:
         a1:06:ee:74:1a:94:f5:74:54:c2:04:3a:74:b1:9a:a4:41:12:
         4a:7c:fc:a2:ad:65:55:5f:94:b5:18:d5:8b:a7:fb:43:ac:6b:
         81:8c:0a:0d:e8:31:70:b2:36:ed:69:09:2c:1d:ce:7d:2d:7f:
         0c:93:1f:53:ae:f5:ba:7c:5d:eb:b1:18:a0:c9:a9:d4:47:be:
         2e:4a:82:c9:57:ce:0b:0c:8b:da:8a:42:c8:be:3f:e1:98:5f:
         c5:f2:1e:0e:3d:88:3c:21:8b:06:f7:e3:0f:91:5c:10:35:c1:
         df:1d:01:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:19 2024 by rpki-client on console-ams.rpki-client.org