Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
File:                     d6d8cee2-6301-3063-826d-b91ab0fc7577.roa (raw, json)
Hash identifier:          /ubPwaStEcozPgb1ake92VS7tEwQ61TY3eda+IWDwnQ=
Subject key identifier:   4C:3E:29:A1:32:3D:08:2A:8B:14:DA:7E:94:7F:31:DD:51:21:17:C2
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F43285847D569FE5C12582D997E714880
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     13332
IP address blocks:        172.84.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:69:fe:5c:12:58:2d:99:7e:71:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=3c2d0e8d-4101-46bb-a66e-1630f4079429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:0e:a5:64:28:84:fc:bb:82:1b:ec:c6:24:
                    e7:2b:ea:9a:cb:02:a9:75:e9:87:80:51:f4:96:c0:
                    42:e9:e4:30:a6:0d:20:20:0e:c3:bc:92:d9:1b:b3:
                    ea:9e:e0:c5:3e:3d:89:76:32:ee:28:90:e0:93:cc:
                    9a:97:30:f8:36:a7:fe:34:43:14:9e:4e:41:3e:2a:
                    01:ed:1c:32:91:45:5c:60:81:b5:ee:4c:bb:2a:8e:
                    54:62:34:9d:81:d6:98:91:6f:b7:61:8f:83:ca:63:
                    fe:36:9d:ea:75:78:5a:97:9a:bc:95:a3:5e:72:c7:
                    a4:0c:1c:7c:cb:09:e2:d0:b4:64:2b:4e:7e:2c:e5:
                    bd:c4:d0:98:78:21:d4:07:b3:c5:d1:02:19:3c:46:
                    8d:a0:5c:a8:13:07:a3:d2:ba:ab:6a:47:d2:93:a6:
                    58:63:6e:2b:22:27:9d:af:ee:a9:4e:3d:78:36:b4:
                    17:79:f2:35:5d:32:86:6e:82:d9:bf:46:2f:97:c1:
                    a3:42:2d:f0:d0:12:6d:fb:14:31:f3:c4:d7:28:a4:
                    23:95:6f:dc:ee:4a:c2:51:b8:3f:f5:b6:b2:9a:e1:
                    f4:4f:b8:68:bd:a9:0d:14:a1:c9:31:b6:c9:6a:ec:
                    06:b5:a1:9d:75:46:78:2f:34:de:07:12:ab:cd:52:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:29:A1:32:3D:08:2A:8B:14:DA:7E:94:7F:31:DD:51:21:17:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d6d8cee2-6301-3063-826d-b91ab0fc7577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d0:5a:5b:47:76:c2:5a:7b:aa:9a:ad:7e:4f:b4:fb:ad:91:
         1b:1f:95:87:9f:a9:20:c2:88:ee:2c:27:0f:74:1a:7d:ea:11:
         ee:39:43:e6:b3:83:8d:85:39:39:69:54:05:18:b2:10:f4:24:
         70:df:18:ac:9e:11:16:35:8b:54:95:f6:02:37:6d:5b:d8:50:
         7b:19:c2:46:1d:57:47:72:fd:e4:e5:3d:2a:fa:12:a2:bb:b0:
         b0:a0:08:fa:8e:e3:48:42:c5:e3:cb:ca:0d:d7:b1:76:d1:64:
         48:98:17:fc:fa:5a:bb:bd:76:9a:e9:f6:97:08:53:80:e4:cf:
         96:f3:7a:42:59:7f:95:f7:44:13:a9:27:13:89:52:78:2f:06:
         b6:10:61:29:09:8e:26:87:b6:a7:b3:fc:c1:d3:f2:fa:d7:48:
         14:ec:00:f7:b3:3a:c8:39:41:19:8f:f8:a3:e1:43:67:44:15:
         e6:71:60:07:43:47:16:01:02:fd:f7:76:ae:9e:5c:9f:2a:06:
         2e:9f:8e:c0:36:5d:71:95:26:1b:91:22:0c:6f:a0:a0:67:51:
         b4:07:42:ea:2a:0c:79:93:e4:1f:9b:e5:64:69:55:e9:b1:d3:
         76:a8:34:69:ff:cc:b3:14:b8:be:3a:43:9c:85:7d:4a:da:46:
         cc:f0:2d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org