Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
File:                     191cfb57-9384-3c94-905f-f6fb390f6a38.roa (raw, json)
Hash identifier:          FsAo2J/fXKmmPYG6vw4Co1N8o9YoURZbChRdx9DzJOM=
Subject key identifier:   FC:D7:97:42:9A:69:6E:29:ED:5F:4A:DC:D8:A7:49:ED:7F:EA:B7:5B
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F432858473FF0A80B58826C5D4FFA6780
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     5719
IP address blocks:        192.12.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a8:0b:58:82:6c:5d:4f:fa:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=9bcb5b44-03c7-44ba-aaee-666e321c24b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:15:61:30:1c:99:52:f1:75:4f:3c:36:3d:
                    14:f1:74:ee:f2:b5:bd:f7:de:c5:e7:50:4b:62:63:
                    d8:56:38:9b:b1:39:09:fc:75:63:2e:58:ff:1b:da:
                    06:a1:16:30:68:47:80:dd:22:b7:88:c5:ff:2e:b5:
                    77:a4:87:d8:49:ab:bf:d6:d4:3d:55:03:24:f4:6a:
                    dc:89:82:19:0d:cc:f2:4a:73:1e:aa:87:b3:7b:3a:
                    71:e0:59:26:34:97:48:75:da:0a:ae:cb:9f:a4:de:
                    d3:e8:e3:dc:e6:57:ac:f4:5a:85:19:5c:8f:7b:1a:
                    80:57:e2:f5:86:71:fc:65:13:d5:49:f9:80:15:84:
                    19:e8:7c:ed:42:c6:6a:b0:d8:1a:b6:46:c0:95:e5:
                    13:a5:55:cc:31:e3:61:ae:5a:24:5f:a1:0c:1d:0a:
                    e8:43:e3:bb:fc:86:b3:eb:19:56:cd:88:c7:af:1e:
                    05:e8:f3:10:ec:a9:93:b8:d8:0e:47:43:ab:34:43:
                    1f:bb:54:4a:e3:9f:df:7b:38:6c:bd:48:af:0e:75:
                    d2:e9:c2:35:a9:a3:1b:39:bb:08:3d:0b:5f:1f:59:
                    13:74:c8:e3:46:ef:3d:30:98:81:01:b7:dd:ed:17:
                    54:ea:75:a1:e0:22:1c:0e:c1:a7:48:de:22:5b:f1:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D7:97:42:9A:69:6E:29:ED:5F:4A:DC:D8:A7:49:ED:7F:EA:B7:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:38:0d:57:75:93:ad:8a:09:21:fd:18:9c:73:64:46:5f:
         30:f7:55:da:91:eb:47:15:df:b8:bf:a7:e1:16:9f:db:9b:dc:
         c6:54:83:8d:60:e7:dd:55:2f:5c:3c:e9:08:4b:d4:94:83:cf:
         44:9a:eb:5c:70:4a:ed:53:18:5a:3a:81:81:1c:57:b7:f4:74:
         88:e2:8a:ff:f1:07:21:88:48:ba:25:02:06:c0:d8:3b:7b:95:
         20:c6:2b:1e:33:e7:5a:16:56:7f:68:27:c5:ca:2d:c8:67:9a:
         67:a9:26:47:9e:de:6e:94:99:27:fc:74:4b:6b:1c:2a:8e:38:
         f5:13:8d:af:d6:09:3c:e7:94:00:10:20:d5:13:ae:47:57:7c:
         8a:a2:2d:9c:e1:5f:c7:03:12:b3:46:87:49:c8:db:d3:b1:53:
         b1:2e:df:2a:88:4b:98:3e:4e:f1:28:b5:18:a3:52:1a:da:9b:
         5a:79:80:bd:04:3d:5e:67:35:66:5d:f5:1b:fa:a1:f6:37:c4:
         8b:68:5c:a6:76:cf:a7:78:87:e9:13:2a:ce:78:d7:d5:56:95:
         3c:48:38:90:d3:e0:82:32:90:3d:63:bc:73:54:84:41:6a:23:
         24:22:70:6b:6e:35:dd:ef:63:c4:c0:9f:bb:a2:5c:ac:0a:ad:
         96:6e:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:16:40 2024 by rpki-client on console-fra.rpki-client.org