Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
File:                     f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa (raw, json)
Hash identifier:          pdzLI0zr5/ZbnnVG/mR10te5xCUMBG9ABTDPW0ir+P4=
Subject key identifier:   FB:89:CC:D7:49:84:65:19:80:57:D4:A5:F1:11:FB:62:91:D9:1D:4C
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858476C9DB9CA3B9707FCE5D96600
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        162.212.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:b9:ca:3b:97:07:fc:e5:d9:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=ea9497eb-37f9-46e4-a5fa-98068de7c448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ac:9b:e5:ae:00:51:b8:d0:6d:92:79:d8:70:
                    4c:4f:64:25:10:1f:47:7d:e2:4d:2c:a8:27:37:48:
                    9d:6d:7d:0d:21:88:6f:b4:63:17:79:64:8e:d4:c3:
                    21:6b:0f:f0:19:f7:99:9e:f6:8a:91:d5:dd:5c:24:
                    72:0f:23:04:58:f7:3f:a1:7c:e4:a9:74:90:45:42:
                    41:ac:e0:37:e7:f9:5d:aa:51:d1:88:10:89:08:9b:
                    48:3b:64:7d:62:38:e5:75:42:10:02:81:76:e4:f5:
                    c2:e0:bf:0f:f8:1e:cb:7b:67:88:bc:c9:cf:f7:54:
                    8c:5f:9c:b5:51:34:45:51:b8:8e:b2:0b:3f:d9:d8:
                    9e:bf:25:c2:53:60:7e:48:af:af:79:0e:ca:1b:fa:
                    e8:30:e6:50:50:22:fc:91:d2:5f:f8:20:b3:00:06:
                    6e:5f:32:35:9f:8a:42:f3:b8:2c:34:ba:dd:e0:37:
                    59:ca:c6:2b:f1:50:1c:ae:a1:20:fe:ca:9b:e3:c3:
                    0f:cd:76:56:2d:8c:fe:d7:73:87:10:29:96:f2:12:
                    a1:5b:02:bd:12:47:10:62:49:9d:47:0c:c6:68:92:
                    e6:3a:77:3e:e0:a3:c1:d5:09:74:5e:2a:ee:e9:f6:
                    53:0e:9a:5a:8d:c8:ba:8a:88:3c:08:1a:7d:b8:30:
                    4d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:CC:D7:49:84:65:19:80:57:D4:A5:F1:11:FB:62:91:D9:1D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/f1a10b4a-a445-396b-bc3f-6aa34bff54aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:93:28:60:c1:7e:f3:3f:2d:cb:52:14:ec:b6:60:fc:9d:86:
         52:85:4b:a5:b2:64:2e:91:ab:8f:82:a5:c2:72:74:c3:b8:b7:
         9d:6e:4f:67:72:ec:c4:16:17:cb:29:86:9b:9a:0e:a8:98:1b:
         4a:f2:26:12:e3:a8:61:44:c7:b2:fb:75:36:39:67:a5:b1:0d:
         93:47:2c:f5:ae:cd:ec:56:15:32:58:67:1e:b4:f2:a1:3b:46:
         f8:e8:27:df:14:e3:85:91:0c:f1:b4:45:18:60:d2:e7:c3:0e:
         c3:59:44:f4:74:e2:11:e5:49:69:7f:f3:5f:26:79:1b:49:dc:
         fb:81:7d:da:1c:4c:ff:3e:60:69:4a:7c:15:39:fd:fd:8b:88:
         26:b6:a9:31:4c:56:ad:0c:71:08:75:b0:15:48:b8:05:c1:1b:
         bf:1d:de:2c:5f:21:38:c4:bd:18:29:0c:3f:7d:1d:c7:f7:68:
         f8:43:66:af:d5:46:0a:3d:af:63:55:d8:23:6f:5e:6f:20:46:
         8c:91:25:7f:04:6f:0b:c9:d2:fe:dc:60:eb:bc:3f:e9:30:2c:
         cf:7b:fc:b9:8b:f6:57:97:4b:14:62:30:6d:cd:de:b2:e9:ae:
         2b:40:59:9e:1e:09:65:e8:f7:47:e2:92:3d:79:09:58:5c:30:
         8d:0b:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:48 2024 by rpki-client on console-ams.rpki-client.org