Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa
File:                     b218fdd5-4a2a-360b-94c2-f1057168b660.roa (raw, json)
Hash identifier:          5m8AeE0c39G9h78y+xY9muREoXJdrYPxwbH22bYfaBg=
Subject key identifier:   64:8A:CE:0D:F5:B0:97:FB:1D:FC:04:AA:F6:84:21:E7:60:9D:89:BA
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F43285847B101587B9AF4B758900F4280
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     397666
IP address blocks:        192.25.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:58:7b:9a:f4:b7:58:90:0f:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=cc616764-b99c-4539-a4c7-e218a39a4445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:b1:37:03:54:e1:69:db:ae:fd:83:a2:08:
                    ee:47:8e:b5:af:96:4c:78:7a:7d:ec:9f:98:65:d8:
                    1f:2d:f1:74:36:94:a0:99:2c:5b:21:73:b0:ff:1d:
                    78:3f:d3:36:a0:0a:c6:8b:6e:45:05:52:50:b3:31:
                    f2:35:e6:72:87:5f:2f:b2:0d:4e:26:ff:84:03:ad:
                    5c:01:25:af:f2:2b:3b:12:66:c5:30:3f:96:59:4d:
                    f8:82:55:c0:de:0f:e2:80:d8:be:52:fd:ff:dc:57:
                    eb:60:64:bb:cf:fd:e7:f9:08:54:9c:19:2c:2f:58:
                    41:a7:18:98:5d:48:c1:8a:85:fe:fe:17:37:4b:8e:
                    57:ab:48:9e:1c:4a:47:01:9b:e3:0d:0b:e6:58:61:
                    9a:bf:55:6f:5c:e0:93:c7:02:04:94:51:88:54:21:
                    44:2b:55:0f:4c:e2:fa:6b:1e:08:a9:17:e0:e4:a7:
                    b2:ed:50:11:16:7e:b4:f2:cc:54:4d:f9:9c:44:c3:
                    38:d2:c8:e3:9b:78:07:b5:14:6f:66:73:a8:6d:07:
                    d7:a9:17:83:29:68:36:06:55:1f:6b:11:71:34:12:
                    fb:f7:4c:f6:5a:9f:ff:12:69:e0:74:1b:44:7f:30:
                    f1:59:bb:f6:02:a0:6e:a2:d6:28:24:ae:0b:2d:83:
                    34:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8A:CE:0D:F5:B0:97:FB:1D:FC:04:AA:F6:84:21:E7:60:9D:89:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/b218fdd5-4a2a-360b-94c2-f1057168b660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:80:37:77:3d:7c:d0:1d:60:fe:80:b7:25:a8:9e:2c:3d:61:
         eb:15:d4:a2:2e:6a:a2:73:76:63:3b:ec:0c:8d:a6:69:d0:b5:
         7f:0a:df:fc:41:58:c6:37:7a:20:ee:73:61:9a:ac:8b:5f:04:
         4f:b4:17:77:0d:77:f4:f4:83:00:ca:12:04:48:e5:15:9e:eb:
         1f:03:bc:ba:37:ea:24:a9:78:59:2d:b1:c0:b3:7e:44:6e:ed:
         71:77:64:c4:c5:7e:fa:f0:4f:f8:21:29:7e:06:73:c1:f2:db:
         89:8d:8e:92:cf:88:c6:1d:e1:45:b3:32:a2:42:ab:37:b3:bd:
         51:c8:16:4a:e2:cc:28:19:12:a3:98:96:ff:20:06:e0:66:31:
         7a:22:76:e9:67:c2:b0:d9:1a:be:ae:d8:4a:54:8b:6d:62:44:
         44:f5:0c:4c:7c:a2:71:cf:07:e9:e4:68:5b:1f:c7:96:b5:78:
         8f:fd:5b:aa:22:9c:72:c7:fe:c4:1b:da:29:cd:cd:40:5e:d3:
         0b:ad:14:d7:01:69:5a:19:b9:17:1d:cf:59:e0:16:74:84:da:
         9e:40:5f:19:39:7c:7b:fb:a5:27:18:2f:33:d5:ca:53:13:4d:
         89:14:08:0b:b2:83:c7:e7:6f:78:5d:70:ce:d8:5a:7f:f4:de:
         d8:8c:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:24 2024 by rpki-client on console-ams.rpki-client.org