Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8f722a5d-5162-3fb7-b51a-db911fa7aed4.roa
File:                     8f722a5d-5162-3fb7-b51a-db911fa7aed4.roa (raw, json)
Hash identifier:          zLDRz43ZM/aYAMxA+CVP9/fgfQZ72e4UggUhP8wyk0M=
Subject key identifier:   C3:1B:E6:88:ED:79:2A:A4:2A:F0:9F:F3:6A:12:BD:6A:1C:43:A1:EA
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2C5FCECCB3D305D475780
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8f722a5d-5162-3fb7-b51a-db911fa7aed4.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        67.209.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:c5:fc:ec:cb:3d:30:5d:47:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=28353519-108c-4e50-8f79-7536164bcb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:29:95:2e:31:37:dc:45:8e:25:88:ce:bf:
                    2b:d2:a0:73:3b:5a:d2:f5:dd:88:16:48:66:77:13:
                    f0:c7:ac:6b:a4:85:eb:d3:02:04:1c:23:6a:45:c6:
                    3c:71:9d:1f:67:1e:c8:58:2e:63:a4:ff:c8:55:99:
                    37:94:75:0e:d8:4e:25:56:fd:fa:e6:9a:f2:52:08:
                    54:02:6b:31:d2:a3:62:88:ed:35:95:e7:59:0f:f0:
                    9f:3e:f5:b1:a0:10:36:c5:d3:3f:8b:68:bb:58:90:
                    ad:5a:ea:9b:55:9b:8f:27:c9:79:b1:23:9b:da:d2:
                    da:ec:00:3f:05:ad:fc:59:cf:8d:ad:40:b7:6a:31:
                    b3:58:75:a1:01:8f:30:ff:16:d9:a1:c5:49:36:dc:
                    51:f1:75:da:6a:cc:8a:ce:0a:78:ef:ec:1f:7b:93:
                    3e:31:05:da:e2:49:6d:31:20:59:4d:3e:88:d5:9e:
                    f0:56:79:68:ad:95:75:32:98:56:3d:78:36:72:c6:
                    bc:43:6a:84:ea:45:00:49:a6:86:2e:5b:21:87:c3:
                    fd:52:c0:23:8f:e9:42:7e:70:2a:4f:a1:30:fa:64:
                    b4:d9:5b:c3:1f:7d:bd:30:81:0c:ad:8f:88:21:fa:
                    76:09:75:f2:cd:92:33:76:2e:84:71:44:07:e2:c3:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:E6:88:ED:79:2A:A4:2A:F0:9F:F3:6A:12:BD:6A:1C:43:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8f722a5d-5162-3fb7-b51a-db911fa7aed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:e9:ba:88:9b:a8:fd:d5:6d:23:ed:ba:b8:a9:21:53:73:
         70:da:77:0b:a4:95:00:64:c8:4f:75:87:79:6b:7e:f1:73:a2:
         a5:85:83:fa:d6:63:4a:89:33:b3:fd:1b:f9:6d:d6:fc:8f:fd:
         1c:72:d3:e0:4b:a2:12:c7:4c:6b:d6:da:e5:00:f4:fe:40:63:
         4a:a7:88:93:fa:ef:cd:3c:f7:96:a2:d1:c1:77:40:d1:64:2b:
         d2:ad:69:7b:44:ba:3f:9c:08:4f:38:76:5f:ec:7c:39:61:1c:
         ac:04:5b:2d:a2:ba:22:5d:ab:9d:0a:87:8b:99:1b:5c:fe:57:
         94:20:6a:4f:d9:d4:c2:f1:d2:97:ec:1e:8a:65:b9:f4:01:da:
         93:63:7a:b6:07:b4:0e:d2:02:19:2a:56:cd:e9:8a:68:c3:d5:
         1d:75:20:b2:18:dc:fa:75:69:19:c6:8b:c7:87:49:7b:d1:66:
         ed:8b:e8:79:ea:92:29:de:b0:b3:ac:73:44:96:d2:ce:cc:ea:
         55:d7:a0:2e:ac:27:21:7b:00:ec:30:82:b7:90:f3:ba:c0:ad:
         b9:b5:e3:7b:ba:fb:32:0b:f8:cc:c7:48:d4:b5:7f:a2:34:3a:
         74:c6:11:8e:1d:61:e7:b2:5d:4c:76:cb:6f:b1:67:be:a3:47:
         11:dc:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org