Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/61512ecd-921b-35d0-accc-a7979be86731.roa
File:                     61512ecd-921b-35d0-accc-a7979be86731.roa (raw, json)
Hash identifier:          w3EXXGgPpPejaFFTmZRy5l+zklKw+p1fmAshBo1zTgc=
Subject key identifier:   B7:13:8E:2A:03:C0:8E:B5:29:92:3C:93:A8:C2:66:D1:90:04:AD:5E
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583CC400B89954A8CDF1E1610A60
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/61512ecd-921b-35d0-accc-a7979be86731.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Sun 23 Jan 2028 05:00:00 +0000
asID:                     19905
IP address blocks:        216.137.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c4:00:b8:99:54:a8:cd:f1:e1:61:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 23 05:00:00 2028 GMT
        Subject: CN=433a6d93-d312-41c8-9f13-db147b176a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:5a:e3:7b:1c:4b:40:47:81:9e:98:12:c4:
                    0d:8b:81:5b:2e:5a:4a:bd:32:f9:24:e6:94:ab:dd:
                    2a:29:27:86:1f:7c:f4:e0:76:29:7e:ab:ba:9b:f8:
                    07:d5:57:7c:c4:7a:68:84:9e:fa:93:43:29:9d:ad:
                    b1:51:e5:dd:75:70:8c:6b:4b:23:8d:59:91:19:4a:
                    44:7b:4e:7b:64:cf:8b:3f:bb:7a:0d:6c:15:d2:e3:
                    98:6e:8d:be:49:c8:11:03:cd:ef:8a:16:8e:fb:5b:
                    e4:72:ae:1b:ed:44:b6:e2:3d:b2:8e:79:a3:a4:07:
                    e0:5b:81:cb:12:80:b6:34:5f:5c:50:af:d9:f0:e5:
                    8a:85:48:88:e3:85:e6:84:6a:ff:b0:0d:c4:dc:5e:
                    5b:e8:7d:c8:6d:5c:c0:e6:08:d1:d8:b2:e7:52:65:
                    74:9f:21:c1:c8:13:96:dc:37:3b:82:a5:bc:01:72:
                    82:ec:d8:e4:dc:a7:91:2f:83:3e:16:2b:34:0a:df:
                    54:ba:5c:0b:bd:fa:5b:7f:57:97:a1:fb:ce:40:ab:
                    de:96:89:7c:7c:9d:b1:9b:5e:bd:20:ad:60:0d:de:
                    63:5d:5e:47:29:d7:0b:9a:f9:b0:96:da:c0:74:a4:
                    2c:b8:74:44:06:36:7b:5f:44:e0:8e:78:e6:8d:6b:
                    d3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:8E:2A:03:C0:8E:B5:29:92:3C:93:A8:C2:66:D1:90:04:AD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/61512ecd-921b-35d0-accc-a7979be86731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:bb:c8:9b:ea:50:4a:47:07:d3:8a:ef:6a:22:a7:e2:cc:
         b2:6b:d6:49:53:5a:f9:73:b7:07:9b:9d:b1:db:5c:c8:fa:7f:
         30:6d:2b:6d:55:32:ef:78:18:81:eb:64:3d:00:7e:03:b6:f7:
         33:3f:7d:d4:ee:3a:3d:80:31:31:90:27:0b:73:2f:18:fa:91:
         c0:48:e3:bd:48:82:7f:68:8f:00:bb:45:89:1e:d2:85:d1:64:
         e0:ac:ee:71:39:03:45:f2:54:4e:13:d2:88:29:3f:fc:0d:09:
         3a:b5:9c:80:9b:ef:36:b0:72:9e:26:33:a4:dd:10:ac:75:d1:
         d6:14:81:44:6a:83:d4:dd:21:e0:a4:ec:63:00:29:6e:ad:53:
         55:ec:91:e5:a5:9b:80:ce:9a:bb:df:c5:10:44:01:66:be:49:
         00:34:79:ec:56:49:e4:7e:c0:10:68:6b:cb:c4:23:4c:76:df:
         33:2b:12:e3:4a:5a:3a:7f:5f:a6:fa:7d:48:5e:f8:75:02:0c:
         85:77:19:ce:6c:6f:33:f9:83:18:27:b6:49:52:de:8c:fb:bb:
         a3:1a:62:7d:0e:38:35:0c:63:61:6d:c5:37:8a:11:15:d4:88:
         b9:f5:8e:38:27:fb:ab:74:0f:a0:de:62:31:79:54:0c:21:34:
         32:b9:8a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:52 2024 by rpki-client on console-fra.rpki-client.org