Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/8379365d-d385-3d57-9c4c-f51f95b11e5b.roa
File:                     8379365d-d385-3d57-9c4c-f51f95b11e5b.roa (raw, json)
Hash identifier:          XBy2qiC2GVLMec+yiXtqgwrjS4NGff4rW1mEBUHTKRg=
Subject key identifier:   61:F5:A8:BD:02:27:5C:32:6F:86:8B:04:E2:7D:73:63:EB:23:4D:E6
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F432858476B3644FC6580491393BBDB50
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/8379365d-d385-3d57-9c4c-f51f95b11e5b.roa
Signing time:             Thu 03 Oct 2024 13:00:41 +0000
ROA not before:           Thu 03 Oct 2024 13:00:41 +0000
ROA not after:            Wed 01 Jan 2025 14:00:41 +0000
asID:                     27220
IP address blocks:        209.104.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:36:44:fc:65:80:49:13:93:bb:db:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Oct  3 13:00:41 2024 GMT
            Not After : Jan  1 14:00:41 2025 GMT
        Subject: CN=52c99cfa-3f9c-415b-b753-085281d9884b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:5c:f7:2e:52:c5:d2:4b:a7:bf:ee:cb:a2:
                    9c:38:ee:c9:c8:9c:2e:ac:96:7a:a1:e0:a2:54:5a:
                    3a:06:b4:86:d6:c5:76:9b:b6:e4:47:c7:f0:cc:c4:
                    c1:37:f6:89:96:0c:e9:3f:f1:23:d9:21:3e:aa:15:
                    86:76:c6:bc:3c:49:10:92:49:1a:d4:c4:f4:10:b7:
                    96:ff:dd:33:60:2b:e1:1e:10:86:c2:af:cd:f8:3f:
                    54:a5:a0:b9:02:80:f4:f0:c6:fd:c4:d0:3c:10:b0:
                    a8:bc:7c:5e:ce:84:f9:3d:15:95:ae:ab:8b:07:6f:
                    e7:b5:9f:0a:a1:bd:bd:2f:b7:aa:44:8d:f4:1f:31:
                    a0:55:d6:9b:f4:97:9c:aa:8d:40:26:ac:3d:33:63:
                    8e:30:6d:94:53:57:f5:aa:b2:4a:4f:76:9a:a4:be:
                    b2:24:7c:02:24:4d:e8:fd:71:ce:f2:f8:62:f3:7c:
                    9b:ef:f3:31:22:95:2c:94:3a:4c:ed:9b:98:4f:17:
                    5f:aa:91:45:7a:a6:06:7c:0a:1e:15:53:e2:5f:f9:
                    ab:6b:86:af:53:bf:ca:69:b2:6e:2a:41:c2:25:12:
                    59:a4:5e:b5:5c:c8:22:d0:c1:32:3b:9c:29:87:c1:
                    53:22:f6:93:92:26:e3:81:f6:37:e8:00:35:dc:44:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F5:A8:BD:02:27:5C:32:6F:86:8B:04:E2:7D:73:63:EB:23:4D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/8379365d-d385-3d57-9c4c-f51f95b11e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:03:14:63:f7:0a:0d:3b:15:f6:b0:83:22:62:99:10:18:b2:
         b8:53:24:03:e8:e9:e3:5c:f6:b6:16:2d:70:06:10:2b:97:78:
         fb:0c:b4:b9:ad:d7:b7:0e:b0:40:2e:e4:4c:d9:6c:74:30:a7:
         f2:44:73:41:69:60:e4:7a:7f:80:70:0a:26:d7:3d:02:69:f1:
         f5:3c:80:3a:94:e2:1a:db:dd:a2:c3:69:be:54:80:c6:49:45:
         c7:19:03:0b:54:76:39:72:b1:34:40:b2:b6:7e:55:80:f6:4d:
         9b:51:12:80:b8:5d:16:6b:1d:69:3b:2b:4c:1f:b2:82:51:61:
         67:b0:1a:06:82:2f:03:36:99:38:88:9b:b3:55:8d:f2:e7:68:
         ca:e6:ef:42:4b:95:13:e6:e8:88:c0:64:c3:e0:68:58:9d:04:
         45:be:8f:7d:9b:dc:ca:92:c6:71:4d:61:2c:50:c8:f7:1a:5a:
         a9:e9:2b:69:88:67:0f:fe:bc:59:cd:9c:12:8e:3d:65:ec:eb:
         bb:de:7b:65:22:8c:7b:43:7e:61:1d:7c:4b:84:53:7c:19:02:
         49:7e:07:b3:a8:ce:16:b4:e1:e0:a4:b3:d3:4d:34:f1:d5:15:
         df:1f:c9:e3:d8:bd:3b:0e:77:24:4b:b0:3d:d3:39:ae:81:87:
         94:46:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:28 2024 by rpki-client on console-fra.rpki-client.org