Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
File:                     c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa (raw, json)
Hash identifier:          WhfpkoYKPR0kcToyjg8ZoVCrzzgBgdM9QXSLeV2ZLNQ=
Subject key identifier:   3A:74:E2:51:71:FC:80:5C:D6:02:3C:BF:8B:09:4B:E3:E0:60:72:85
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858474420BC82478107E4D717DDC0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     19905
IP address blocks:        104.255.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:bc:82:47:81:07:e4:d7:17:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=9b25f34e-4d48-4383-8771-31bde23b36ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:5f:da:7c:12:21:9b:7a:5b:08:78:19:88:
                    51:73:06:22:f7:db:43:78:2a:d7:54:1e:1a:77:3e:
                    8a:6a:86:87:ce:1d:93:9d:8c:65:0d:cd:fe:0f:8c:
                    7d:d1:4a:12:bd:91:d7:d2:6f:a7:d0:ef:50:76:1f:
                    2c:d2:bc:01:73:b5:e9:61:68:3b:db:3f:e3:d0:24:
                    7b:a7:a3:9f:52:41:f1:9c:77:ff:eb:89:e2:4a:4b:
                    ea:09:ca:17:46:db:be:ff:87:92:21:af:12:07:5d:
                    04:ec:11:54:25:17:86:3f:8b:ca:64:bb:02:39:4b:
                    49:3e:04:a3:e5:8b:fa:18:d4:66:a7:62:bf:81:c1:
                    58:3b:b7:ff:15:b5:d3:32:7f:0c:77:26:f2:2e:79:
                    b6:63:17:28:57:52:a1:1a:f8:67:16:f4:8d:35:20:
                    c7:53:54:58:e2:61:66:ce:4a:ea:9b:54:92:1f:5f:
                    43:a5:b4:23:33:12:73:d3:7e:1b:f9:98:93:1a:b8:
                    26:f3:83:c5:01:7e:8d:2c:58:8b:15:98:a5:3c:d6:
                    64:39:0b:79:0f:12:b4:51:85:0a:37:6b:ad:20:3e:
                    a7:af:fb:e4:1b:40:19:53:e3:2d:3f:24:f8:94:e7:
                    e0:d5:76:3b:c4:d4:9a:00:ab:33:2b:29:02:27:23:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:E2:51:71:FC:80:5C:D6:02:3C:BF:8B:09:4B:E3:E0:60:72:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c76d9779-fcb1-3b9b-8aaf-05a3ce372a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:70:17:73:0f:7c:29:97:bb:8f:10:1d:46:0c:2d:21:da:8e:
         57:bc:bf:53:68:74:a6:c9:f6:35:19:65:d0:a6:51:4c:5c:d8:
         f8:f9:9c:02:6d:d7:5f:17:83:b0:46:1a:ff:3d:b4:74:1b:21:
         fb:de:05:1e:54:4c:91:c8:b7:bf:bf:85:6f:f7:59:fc:7d:c5:
         75:37:63:e7:41:25:74:dc:de:8f:71:a3:95:0b:e9:4b:98:22:
         f0:6d:23:75:1c:b9:5f:03:18:8c:e1:e5:f6:d2:fe:12:1c:27:
         b9:d3:14:30:e4:28:d4:6d:47:b8:b6:fb:99:d1:73:8c:09:6f:
         a6:6e:b8:00:59:c4:ca:6c:3a:5e:c7:27:a8:f3:55:7d:62:1f:
         2b:6d:88:c1:c3:a1:da:b0:46:eb:4d:4f:bd:15:dc:8b:45:ea:
         86:09:91:34:26:da:fd:55:e8:3f:38:f4:44:5f:b8:f5:9c:8c:
         dc:c8:34:58:3c:1b:f5:0d:f1:e2:e7:b6:1a:63:f7:06:92:9e:
         b4:8b:d6:0c:19:cc:15:bc:ac:c1:7a:9e:2d:7c:9b:99:20:a8:
         c5:51:b6:f1:06:11:fe:e8:b0:53:40:7b:1d:09:c0:71:b2:7e:
         6a:23:90:21:5f:96:7d:ad:cd:94:e1:61:3c:67:90:df:98:c2:
         72:76:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org