Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/08c1a6a1-9ef7-3d42-9b58-75fd2d1b3d4e.roa
File:                     08c1a6a1-9ef7-3d42-9b58-75fd2d1b3d4e.roa (raw, json)
Hash identifier:          ZcJoLQAzYhMvIjhgqDwVcpJk4y0i9i4WEVJavhzFYv8=
Subject key identifier:   AC:E9:F1:AF:B0:94:95:FD:90:CF:E7:3F:90:6F:EF:D1:BE:CB:AD:DE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FB55C6168A554A70B9DC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/08c1a6a1-9ef7-3d42-9b58-75fd2d1b3d4e.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     577
IP address blocks:        199.243.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:b5:5c:61:68:a5:54:a7:0b:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=ef3d66ef-8daf-442c-a471-3bee8bebc6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2a:44:1d:3d:1e:18:4f:c5:e8:54:37:49:b0:
                    b3:ea:f4:d6:63:e4:b6:a8:b8:33:5f:a9:eb:e7:7a:
                    80:47:a2:ef:89:c4:f8:61:0d:2a:cb:09:a1:31:2b:
                    ee:52:97:22:24:64:ad:67:60:c0:10:22:1e:83:f5:
                    67:60:cc:63:99:28:00:c1:ab:d1:17:92:c8:3c:24:
                    8c:34:8b:7b:f8:e7:20:3d:66:45:68:d8:29:87:33:
                    30:69:12:74:02:9f:08:a9:72:05:5d:2c:d9:c3:ed:
                    ab:dc:bf:8c:bc:14:07:ad:9b:16:ea:0b:f7:76:e9:
                    4c:34:04:65:fc:a5:48:fd:8c:db:0b:fc:6f:b1:0d:
                    8a:19:9c:ff:a5:bb:dc:5d:b4:39:24:fc:b3:7a:ec:
                    35:5a:49:83:64:10:40:e0:24:db:90:93:cc:d4:d2:
                    af:ff:c5:b4:5e:08:b6:a0:84:44:f7:dd:af:e4:14:
                    3d:c5:bd:9e:9f:16:66:f3:1e:78:e7:b9:3c:32:dc:
                    98:7b:1c:b6:a1:bc:16:d7:f0:89:97:da:38:0a:e8:
                    61:b4:c4:2f:f7:c1:15:85:80:ab:cf:ef:54:45:56:
                    98:f9:c8:6f:38:b6:5e:95:bd:c9:64:10:9c:ee:79:
                    a4:ed:f6:33:c3:ce:d8:30:f6:33:1b:2e:13:16:b0:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E9:F1:AF:B0:94:95:FD:90:CF:E7:3F:90:6F:EF:D1:BE:CB:AD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/08c1a6a1-9ef7-3d42-9b58-75fd2d1b3d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:14:77:17:40:6e:25:e9:3b:3d:c2:d7:c6:35:a0:bf:af:9e:
         89:0c:11:2c:d5:67:92:29:6a:4f:63:42:82:2e:28:a4:d7:3b:
         5f:5c:11:2c:7b:2a:38:5f:55:eb:9d:ef:f3:6b:ad:10:7b:4b:
         e1:20:95:57:ae:24:f7:81:7b:2b:a2:59:af:b4:d4:9b:f0:0f:
         e4:ee:da:6b:3f:bb:40:32:69:c0:79:06:aa:c5:2b:f5:16:94:
         12:e2:d0:fa:4e:6a:f1:e5:e9:26:f6:cc:eb:9a:f5:af:09:47:
         0d:21:24:4f:f7:e1:af:00:4f:38:56:17:36:65:f1:ea:22:24:
         af:08:51:3d:da:29:1b:dd:79:15:c5:2a:ac:a9:6c:53:5f:7b:
         1c:71:6a:10:94:06:4e:e3:c5:68:ac:07:b2:63:c4:48:3e:08:
         a3:6d:4b:f9:d3:a1:c4:57:30:c0:95:2d:4c:e1:cd:51:9d:47:
         27:e5:c1:a1:f0:3f:7a:98:35:c6:9e:22:05:fa:95:1c:5c:16:
         a6:bd:e5:b6:cc:38:3a:b4:2b:30:4f:91:ca:24:cf:ab:4f:7a:
         f3:3d:1c:ff:8e:33:29:a0:b2:9a:57:06:02:20:6b:1d:30:24:
         00:e7:b3:84:0c:bd:07:86:c3:e7:c0:2c:f8:00:9b:7f:3a:c9:
         b0:59:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:09 2024 by rpki-client on console-ams.rpki-client.org