Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
File:                     5db78074-c975-3b6b-bed1-6fc0a0633b64.roa (raw, json)
Hash identifier:          za6V8Vjcaobaj11HFVi9g/d+iYpMMY6RSnElzmTenOI=
Subject key identifier:   15:CF:9B:B1:62:B5:62:40:AF:6A:1A:81:A7:E1:CA:DE:01:85:B2:CF
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F432858473360A041D15D9F86402A9940
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     7794
IP address blocks:        199.185.192.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a0:41:d1:5d:9f:86:40:2a:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=eedffd0f-dee5-404f-9cb0-7060b06f5914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:04:6a:9a:c8:61:6b:bb:c1:c1:9f:49:32:
                    a3:96:c5:2d:02:03:40:81:55:81:6e:8c:0e:21:9b:
                    27:17:b2:2e:be:67:ae:0c:f8:d9:1c:41:d9:38:1a:
                    47:28:18:23:e1:75:76:95:03:23:e5:f3:a4:ac:5b:
                    0e:cf:08:d7:b9:95:86:74:df:1c:47:df:2a:49:65:
                    3e:80:13:e9:2d:f3:de:94:c6:08:ea:3c:4a:88:f4:
                    d3:ed:a6:20:96:d6:6a:8c:7e:85:df:28:a2:bf:5c:
                    b7:47:46:b9:8a:04:3f:74:08:79:c1:ba:25:37:65:
                    f4:35:5d:6f:10:e7:24:33:bf:d0:a6:51:b2:94:b0:
                    52:af:7b:2d:28:3e:42:68:7a:63:ec:7c:cb:0d:2f:
                    d4:cc:a4:00:d6:48:15:4a:6d:16:b2:9b:6f:0f:13:
                    ed:be:8b:55:ed:0d:3a:cf:4f:cc:ff:84:d7:c1:c0:
                    87:7e:ab:b0:7d:26:c1:e5:e0:51:d0:60:46:92:27:
                    b0:7a:63:e4:1b:ec:c8:b2:38:41:41:fc:75:1e:1d:
                    5b:8a:69:42:90:43:39:74:08:f0:99:78:51:6b:13:
                    53:15:a1:44:58:1a:d1:53:93:48:f0:b5:31:98:10:
                    06:c2:37:cb:49:a0:fa:31:5b:ca:3b:c6:86:e8:dd:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CF:9B:B1:62:B5:62:40:AF:6A:1A:81:A7:E1:CA:DE:01:85:B2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/5db78074-c975-3b6b-bed1-6fc0a0633b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:be:91:3e:0c:be:a7:f0:a9:c4:43:d6:49:21:a0:1b:ab:b9:
         c8:86:6e:4c:9a:bc:fe:70:e0:81:0a:68:3b:be:35:47:28:61:
         55:0d:9c:7f:8a:21:ff:d5:a9:70:3f:23:19:64:5c:d2:ff:d4:
         6b:0c:e4:9a:30:20:44:6e:cb:35:69:b6:4e:61:41:52:b6:b6:
         31:4a:3a:51:1d:b3:32:0a:93:dd:2b:5f:39:c4:11:fe:2f:54:
         0b:d4:81:ab:38:0a:f9:b7:ea:bf:93:ed:91:6a:c0:97:2e:07:
         04:37:e9:65:3b:48:21:3d:24:df:7a:9f:6b:af:5a:0c:a9:51:
         ed:52:4b:24:9c:d5:87:4d:80:5b:f6:44:5f:0a:c0:c0:b0:2c:
         e6:bc:2c:fb:a1:61:e6:5b:b3:3d:85:82:8d:0a:aa:06:95:5a:
         13:ae:2e:21:e3:86:44:e1:4c:bf:4f:e2:f6:24:30:b4:ad:36:
         6f:8b:af:4a:d8:62:2b:70:eb:44:71:05:58:48:49:40:0b:af:
         d9:3c:d9:b7:ae:bf:93:02:19:11:13:eb:13:72:58:36:69:19:
         2e:70:08:ef:9b:48:4b:98:d3:90:2a:9b:41:89:11:2c:29:77:
         ba:2b:76:45:2f:8a:07:d1:16:71:3f:91:89:50:37:4a:b2:7d:
         a5:5f:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:59 2024 by rpki-client on console-fra.rpki-client.org