Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
File:                     e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa (raw, json)
Hash identifier:          eumCu/WdMKAw85XxJ72Cu2wVwmL252d1tnlnkkBvJ1A=
Subject key identifier:   19:19:94:3E:EF:A7:A6:EB:6B:BD:E9:65:38:78:36:4F:25:F2:CD:81
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F432858474B1B46812820A2AB02A9CE90
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
Signing time:             Sun 22 Sep 2024 01:00:32 +0000
ROA not before:           Sun 22 Sep 2024 01:00:32 +0000
ROA not after:            Sat 21 Dec 2024 02:00:32 +0000
asID:                     14618
IP address blocks:        67.199.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4b:1b:46:81:28:20:a2:ab:02:a9:ce:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Sep 22 01:00:32 2024 GMT
            Not After : Dec 21 02:00:32 2024 GMT
        Subject: CN=cd05a579-7144-4ad1-885d-92d2f7a55361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:40:8b:aa:ee:94:55:af:bc:40:1c:e8:6d:
                    0c:32:98:b2:49:7c:7a:8c:61:bd:7a:e5:22:c9:b8:
                    a9:a1:b7:81:c9:7d:27:08:4b:43:57:35:ff:b6:f8:
                    95:b9:84:88:90:d2:33:1a:e0:f8:49:63:d7:95:68:
                    ce:cd:d8:7f:90:29:4b:b6:f5:fa:e2:83:9f:3d:5c:
                    da:85:a6:dc:4a:be:b9:6a:e7:bc:3d:46:d7:b6:7e:
                    9d:da:fa:b0:da:cd:6c:0b:78:f6:69:1f:ac:f2:c9:
                    d8:31:4b:05:81:d7:16:4f:53:36:96:7d:bb:80:3b:
                    31:77:cc:99:93:0f:43:37:90:4b:05:d4:ff:8b:af:
                    fb:6e:b9:92:92:1f:63:3d:38:74:a3:c8:2a:ee:f9:
                    85:51:54:37:a4:cc:e6:72:b1:cc:1c:42:69:51:b5:
                    1c:56:af:78:70:40:25:0f:9c:ad:21:92:22:e4:e6:
                    7c:8c:82:b7:ad:d8:4f:30:7f:2b:17:00:83:ff:75:
                    d8:90:c7:36:05:f1:49:95:a3:c3:4c:4d:fb:d2:40:
                    d5:a4:83:35:6c:04:24:7c:96:94:c5:59:49:c0:8d:
                    7a:b9:df:71:31:63:55:78:ec:25:3a:79:6f:86:16:
                    96:66:7c:69:e7:f4:61:7a:be:59:bd:22:42:fa:8c:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:19:94:3E:EF:A7:A6:EB:6B:BD:E9:65:38:78:36:4F:25:F2:CD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:70:cd:dd:52:57:98:af:68:2e:cc:25:3f:0e:4f:cf:2f:
         dc:72:15:70:ea:35:3d:64:be:af:c8:58:9e:05:2e:b7:91:5d:
         04:ff:18:d0:a9:ec:95:4b:7d:2a:ee:82:9c:39:67:ef:7f:fa:
         74:ea:84:b5:7e:8f:73:d4:7c:bc:d6:b1:bd:63:32:57:a7:6e:
         b5:57:be:01:9a:4d:bc:57:d3:af:ac:93:78:71:a7:33:a0:18:
         d3:2f:04:ba:3d:7a:58:e8:70:7b:cd:04:52:0a:d5:a0:26:26:
         db:35:ed:a6:29:9d:0f:b1:70:19:bd:dc:46:01:f0:a8:49:5a:
         35:7c:9e:d4:a9:18:db:53:ad:ef:a3:31:54:3a:1d:8d:a2:61:
         bb:2c:f4:f5:9f:56:f5:47:2a:c4:57:5d:44:c5:f8:a8:e9:cc:
         1f:dc:dc:ad:68:a8:19:07:4d:61:0f:ee:f9:e1:01:23:94:99:
         2b:11:4e:07:5b:61:7b:93:a4:d4:5b:a8:2d:74:76:85:26:9d:
         a0:0f:4a:68:88:83:3d:49:af:99:7c:8b:fa:aa:9a:0e:73:24:
         35:39:bf:30:4a:83:bc:43:50:7e:b7:45:05:f5:78:cf:2d:14:
         dc:25:17:1b:af:5b:47:f2:75:86:ea:26:4e:67:c5:e2:90:df:
         bb:c9:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:45:51 2024 by rpki-client on console-fra.rpki-client.org