Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa
File:                     cf247955-ef02-3333-a489-3d4b3ad68949.roa (raw, json)
Hash identifier:          ztg9s+wYmUM54zJrUKg4RxTfXx2VBcPLlwxV66MdMv8=
Subject key identifier:   5F:8C:81:42:2C:DB:60:31:6E:17:DF:B9:A1:0D:36:E7:E9:D2:BC:00
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F432858473360A0333006021624EC6D80
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     7794
IP address blocks:        199.166.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:a0:33:30:06:02:16:24:ec:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=410768c0-d3c7-4ebd-9222-d0b48ea2d1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:c3:ba:98:8c:4f:52:ca:89:03:91:4a:94:
                    f7:01:e4:5d:08:59:f7:41:55:3f:42:ab:a9:fa:e0:
                    3f:5f:fa:97:51:4e:59:2b:01:d0:b2:cb:cc:b4:94:
                    e9:12:28:7e:9e:7c:2a:65:3f:d1:f8:63:b4:d6:66:
                    f7:26:b6:61:11:16:25:db:23:7b:88:0c:88:8e:43:
                    78:74:5f:70:c3:a7:69:b3:91:86:12:83:ef:28:ba:
                    cf:e3:f1:6b:ce:b8:63:e5:de:0d:58:e2:6d:b3:93:
                    f5:c3:65:10:73:6d:4a:8d:e3:9e:6f:b2:6b:d9:cb:
                    84:fe:9f:08:e5:83:d3:cd:d4:45:34:7f:7b:02:72:
                    1c:1f:6d:3d:6b:2d:85:d2:58:9d:37:12:a4:9f:81:
                    f6:49:11:c3:f7:93:e3:2c:9e:e8:d9:09:9b:71:7f:
                    45:5f:94:ed:6d:57:a5:ef:8f:85:78:42:97:fe:0f:
                    6e:d0:a2:66:f2:c8:17:1d:c2:7c:ea:96:d3:ac:29:
                    a6:86:9c:cd:e1:ce:5f:6c:31:1b:42:53:1a:8c:6a:
                    b3:e5:1b:2a:be:71:6e:0b:98:20:66:66:7d:e1:18:
                    bc:52:b0:8d:9c:c7:06:fa:92:b0:94:59:4c:3b:97:
                    91:3e:35:64:ff:39:a2:ff:73:f3:c1:e2:5f:ac:7c:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:81:42:2C:DB:60:31:6E:17:DF:B9:A1:0D:36:E7:E9:D2:BC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:06:00:ac:eb:ae:9b:f2:db:06:3e:39:6c:11:26:72:9e:43:
         7d:2a:51:39:70:ce:f7:60:4a:aa:64:bb:2d:38:4b:d8:43:57:
         66:b0:a2:14:34:72:ab:c6:ce:78:49:68:dc:38:ce:99:3a:23:
         79:30:07:f3:12:e0:3e:de:cc:d7:73:8f:04:54:06:1b:7d:b7:
         d5:b6:d9:39:07:26:6e:04:8b:25:94:1b:aa:5a:32:e1:5e:c3:
         92:46:35:02:5b:c7:de:a4:b3:c3:a2:33:d9:17:1a:b9:e1:f6:
         b7:bd:57:60:03:92:a2:e9:8d:f3:72:f2:31:66:11:54:56:f0:
         e4:bc:5f:f8:f0:9b:89:8f:36:f5:53:d0:6d:48:04:06:f5:1f:
         d0:f1:78:f7:93:6f:c4:07:99:e5:91:e8:82:05:d4:5c:73:4d:
         fc:45:fc:9c:61:8b:d0:3a:04:e8:70:aa:36:bb:a5:ac:22:3f:
         d1:3d:a4:58:4f:e4:7d:39:48:cf:b5:00:7c:38:c5:2a:32:3a:
         b2:24:4c:80:6e:3f:51:65:90:48:14:44:39:54:b7:39:63:45:
         83:b8:5b:be:d1:0b:69:1a:40:aa:e6:48:7c:3e:53:00:39:fb:
         c8:9e:01:d4:5f:16:eb:c1:e5:15:08:97:16:4a:e5:25:a3:79:
         43:e0:d3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:59 2024 by rpki-client on console-fra.rpki-client.org