Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa
File:                     891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa (raw, json)
Hash identifier:          oaoYXfetmSfd5p//AgFme9QEvbHAIUWGWuO/gKqDGd4=
Subject key identifier:   D7:E6:90:B0:81:68:11:AA:26:8B:42:C1:2B:39:2F:DA:99:35:CA:BD
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858453317EA0EC3F931A9B4FC6280
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     21949
IP address blocks:        199.45.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:ea:0e:c3:f9:31:a9:b4:fc:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=db6af68a-22c6-4493-a215-14e856fd3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:10:0a:21:62:df:88:88:5d:2e:b7:2c:f2:
                    ca:1a:44:f7:25:7c:08:1b:37:57:f2:55:76:07:aa:
                    a8:77:35:98:0e:ef:d9:da:65:3d:c8:32:01:82:cd:
                    58:ab:c9:ef:f5:b1:f0:87:0b:d7:b6:ee:c2:0d:88:
                    1e:f3:8e:41:a2:0a:18:69:37:14:f7:b3:20:cf:8d:
                    4d:c1:1c:8d:8c:ba:0a:7c:3d:7f:c2:3b:8a:8a:5a:
                    0e:4b:97:eb:3b:fe:80:6b:d1:81:52:7f:1f:0a:15:
                    5f:24:e3:9a:af:55:36:c6:fd:7c:c6:46:e8:45:61:
                    c3:c8:6f:c7:04:5b:76:6c:00:aa:eb:7a:f8:53:06:
                    6e:c1:be:79:49:6a:cd:b8:37:4b:93:cb:b2:3b:77:
                    d3:e6:42:d8:69:c5:ec:90:b2:f2:3b:86:d8:43:cb:
                    99:ad:aa:0a:00:e3:c5:21:33:42:e9:bd:ce:c2:5e:
                    81:aa:31:17:1e:47:1b:53:77:3f:05:c3:e6:d3:c5:
                    6b:d5:5c:08:36:2d:75:90:15:87:4b:9f:4c:9e:56:
                    1b:d3:c4:b4:bd:7f:90:6e:66:dd:89:5d:69:e2:ae:
                    cb:41:0a:c9:82:44:47:ed:03:d8:e1:72:c3:11:67:
                    e5:76:33:09:91:cf:91:dd:07:cb:63:e8:10:46:77:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:90:B0:81:68:11:AA:26:8B:42:C1:2B:39:2F:DA:99:35:CA:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/891700c1-b3f6-3099-9f5f-78ba0b27d31f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fa:5d:76:1e:2c:84:42:f9:de:6b:c4:98:9f:8c:47:a9:b1:
         66:7b:e1:16:0d:8a:1a:a6:22:93:10:29:0a:ed:56:3a:2a:57:
         46:35:3e:c3:ce:69:c5:7a:d6:36:70:09:f4:ff:9b:a7:74:d5:
         56:97:30:33:9f:08:ea:68:d6:bd:b0:5e:9a:cd:36:8e:35:62:
         ca:a1:80:ed:15:4a:8d:62:34:ef:cd:cd:73:77:07:f8:ef:b3:
         fc:bc:1d:58:84:ea:a5:86:2c:17:07:d1:fa:79:a6:e0:c4:d8:
         b6:98:10:35:e5:df:bc:85:d9:c4:0b:07:2a:3b:84:bb:d3:e1:
         cc:9b:cb:fb:7b:ec:65:6b:da:f5:11:b8:57:2f:7f:1c:75:99:
         41:24:5a:f8:94:ac:d3:f9:dd:dc:4c:14:4d:7e:a0:ae:59:0f:
         29:f2:9b:82:41:7c:a3:e5:03:25:d4:0b:4c:45:a7:59:a4:b6:
         b9:83:8f:67:e2:4f:c1:26:b3:e8:5f:f4:2b:bb:59:a0:fb:21:
         da:dc:ef:fd:98:7a:55:10:b2:d4:f1:59:fb:cb:1f:4e:4e:4c:
         62:95:c6:54:58:55:8c:f4:3e:7f:cf:48:82:0e:93:12:53:9d:
         b1:3f:45:94:81:cb:a9:7e:6f:e6:d6:44:bd:3d:35:cc:01:33:
         67:bf:e6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:39:49 2024 by rpki-client on console-ams.rpki-client.org