Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
File:                     9a647916-d419-3dbb-868d-b7491eb1551d.roa (raw, json)
Hash identifier:          AAxiHcc1gzcQntDNLr+wNd6RUU1oMAVkfOd8flcVgsQ=
Subject key identifier:   74:BE:F6:F8:FE:1C:71:F3:68:0E:0C:66:B8:0D:4B:C0:3C:45:EE:01
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F43285846FFBAD7963617CDF690C9C600
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
Signing time:             Mon 26 Aug 2024 01:00:32 +0000
ROA not before:           Mon 26 Aug 2024 01:00:32 +0000
ROA not after:            Sun 24 Nov 2024 02:00:32 +0000
asID:                     29848
IP address blocks:        199.5.197.0/24 maxlen: 24
                          199.5.198.0/23 maxlen: 24
                          199.5.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:ba:d7:96:36:17:cd:f6:90:c9:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: Aug 26 01:00:32 2024 GMT
            Not After : Nov 24 02:00:32 2024 GMT
        Subject: CN=611e6507-d153-4e62-aadc-732d4539f91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:4f:db:05:2a:44:bb:a8:94:ab:bd:d3:3f:
                    4f:42:77:e4:a5:03:32:21:3d:d6:68:53:32:cb:2a:
                    09:64:3e:f5:30:ed:3e:17:7c:ba:da:c3:36:e7:95:
                    cc:b8:28:d4:00:09:10:97:91:36:d0:e0:95:03:f5:
                    9f:ee:bc:d6:70:b4:0f:a4:6c:61:a8:4c:65:c1:4d:
                    d3:7e:ff:a0:3a:aa:0e:ca:b3:93:95:f4:55:f0:4a:
                    76:f3:0a:11:8a:2d:41:99:21:74:87:82:da:10:6b:
                    15:c9:22:f3:0d:77:21:04:9f:ff:18:f9:1b:dd:e7:
                    7e:b0:5e:e6:2f:c8:a4:c2:22:16:8a:36:b3:d0:db:
                    02:5c:39:49:0c:a4:ca:00:b5:a5:37:a0:68:99:c7:
                    ee:0c:42:bd:5b:de:4e:ce:42:ed:5d:ac:57:34:a3:
                    65:75:c6:65:6f:fa:e2:97:4c:70:d5:3a:37:3f:bd:
                    b8:f4:78:d2:77:12:5c:78:dd:a3:0d:4b:9f:45:13:
                    86:50:3b:7b:62:c5:5f:63:ba:51:0b:4b:37:1c:11:
                    54:4d:39:0a:69:54:e1:d7:8b:03:9a:d9:e7:01:c4:
                    20:41:d6:2d:b6:2e:26:c8:39:e8:fc:a2:7c:87:a8:
                    b5:43:f6:71:59:79:3f:fd:4f:50:16:5e:5a:14:43:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:F6:F8:FE:1C:71:F3:68:0E:0C:66:B8:0D:4B:C0:3C:45:EE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.197.0-199.5.200.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:62:37:c4:bc:34:3d:c4:37:84:ea:32:d5:9e:5e:7c:2c:
         54:63:e9:23:47:60:06:d1:78:bb:f2:20:4b:ee:04:3f:a1:69:
         ec:33:5b:c1:1b:ad:b9:19:27:67:91:87:1a:12:b6:26:20:e9:
         59:10:92:a1:33:be:2a:30:1c:0e:d2:88:7c:1b:d5:cb:fe:17:
         8b:5f:d7:ba:61:9e:58:db:7d:04:5a:1a:8f:da:98:9f:d1:1f:
         52:20:16:07:06:c3:04:d7:74:f7:83:34:fc:e7:04:7d:6d:da:
         fb:4f:d6:7a:18:72:38:04:11:d9:76:6a:0f:f0:ca:94:e4:0a:
         f0:d4:8f:8c:8f:ad:b9:79:24:ca:5e:7f:f1:6a:4d:5d:72:fc:
         6b:13:01:ee:90:0c:5b:74:a0:cf:40:8b:16:d7:a8:d7:0a:79:
         db:71:fc:00:16:f3:e8:ec:7b:24:51:45:b9:19:bc:7c:33:df:
         e8:98:cf:4f:90:bd:36:8a:48:fe:fb:4a:32:84:18:a4:16:a0:
         02:e2:02:08:23:09:cb:62:69:b6:3e:a6:20:2c:f5:7c:15:2f:
         d5:be:f3:98:52:69:12:9a:72:dd:7a:13:a0:f6:c1:f7:93:dc:
         db:02:bd:25:5f:b3:36:39:0a:d2:7a:ab:da:1e:e7:8b:99:8d:
         0e:fb:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:08:49 2024 by rpki-client on console-ams.rpki-client.org