Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
File:                     3be427a8-ebdc-33dd-937c-12b027b07d3a.roa (raw, json)
Hash identifier:          sxAeSu637kN9DrkYtNX86eoKHZ1g1nkBxf0Z7kvbAKc=
Subject key identifier:   82:D5:B8:B2:AE:32:A5:14:AE:DB:C5:FD:1B:61:5D:23:2E:5B:47:69
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF80219C3BB875F1633200
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        192.190.94.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:80:21:9c:3b:b8:75:f1:63:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=8f5f6a85-443b-46bc-a813-3acc9be17f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:86:9a:55:06:7f:44:2e:c1:0c:e5:9d:26:
                    fb:29:89:c3:09:88:ba:e6:db:5a:bd:d5:e2:90:45:
                    f3:72:3e:26:40:da:17:12:cc:9a:4e:fc:c3:ca:b3:
                    60:12:14:12:78:c7:71:cb:b8:68:89:89:c0:bd:e5:
                    f9:53:d9:29:e8:f2:a4:e1:85:dd:7f:4a:94:1f:9e:
                    10:e3:71:12:a6:4e:4a:64:2d:2c:e4:7d:2a:cf:cf:
                    fc:db:ff:01:0a:73:90:eb:a5:6f:ef:e4:68:52:b1:
                    81:3a:7f:fa:0b:2a:ee:05:1a:03:44:4a:d1:0c:32:
                    fd:af:d7:01:d4:36:c0:cf:ad:d0:af:c0:ea:a3:db:
                    e9:33:ad:21:76:3e:c3:2c:d8:6e:3e:bd:13:23:48:
                    a5:fd:8a:91:6d:91:21:a1:c4:25:3d:79:3f:86:b3:
                    5f:d7:99:1c:38:f5:a0:14:c1:13:11:1b:f6:86:b9:
                    f4:43:86:3a:4b:ae:90:ed:0c:95:1c:b0:d2:81:b1:
                    cb:c8:f8:84:6f:ff:c6:15:7f:ba:fe:61:0c:11:67:
                    a3:76:bd:b0:60:b9:5f:d9:46:5a:aa:28:8b:18:93:
                    e8:7c:24:b2:81:5f:bd:af:63:a9:78:73:3e:90:df:
                    39:0a:65:c2:f2:f6:d8:b8:1a:91:55:b8:81:28:13:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D5:B8:B2:AE:32:A5:14:AE:DB:C5:FD:1B:61:5D:23:2E:5B:47:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3be427a8-ebdc-33dd-937c-12b027b07d3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:74:79:9b:24:9f:13:cf:f1:5d:84:ed:ad:ce:67:db:0b:
         e2:58:8b:1c:33:51:6c:50:64:98:ad:7e:00:75:e3:5f:e7:a8:
         80:ea:d4:eb:97:8f:57:e0:d3:27:c2:45:d8:3e:a9:93:e8:86:
         7c:08:16:13:49:dd:a4:b9:f7:90:92:7f:e9:00:89:94:63:38:
         8b:53:be:50:8e:69:43:27:47:24:7d:57:92:00:ba:9b:ed:69:
         ef:9a:6c:94:90:3e:68:f5:2c:dc:ae:af:39:0f:b6:25:34:bc:
         e3:31:1e:f8:ce:d3:67:20:80:89:88:9c:2d:d3:f4:e1:e0:da:
         3f:d4:41:b0:e1:8b:f6:db:75:e8:2d:8d:c8:a3:ec:70:4a:fc:
         94:5a:39:d8:84:84:bf:2b:7a:33:5b:ae:94:64:6c:e3:a7:18:
         46:8e:f4:ab:f1:9a:61:3d:11:c5:ab:90:66:84:b0:92:d0:6f:
         a6:86:fd:52:86:7e:0a:20:5a:ee:b7:d7:06:5d:75:30:20:a9:
         71:5e:fa:18:75:66:1e:fd:41:3a:63:4a:fc:c6:a3:7e:1d:e0:
         8b:f6:71:e2:00:4f:3a:f8:55:ae:99:ab:0e:87:49:f2:21:5e:
         c1:de:31:06:8b:5c:34:cd:b9:09:6b:7f:d5:e3:61:c5:61:1c:
         8e:0a:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:48 2024 by rpki-client on console-fra.rpki-client.org