Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17640055-4cd4-3a3e-ad32-1fae10acd549.roa
File:                     17640055-4cd4-3a3e-ad32-1fae10acd549.roa (raw, json)
Hash identifier:          zo++juNAmeRahBIig46EP0O8RsDkolPATmCxDlMhJUM=
Subject key identifier:   DC:1F:29:4B:C2:B0:AD:5F:EE:5E:F6:87:E3:13:7C:3D:9D:FC:51:B8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FB6C4DED7F271B716B560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17640055-4cd4-3a3e-ad32-1fae10acd549.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     40895
IP address blocks:        199.243.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:b6:c4:de:d7:f2:71:b7:16:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=0fa074dc-2c3f-4900-9d1a-7ecaf60ed5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:24:95:4c:7d:87:ea:15:6e:0b:04:8c:a5:11:
                    86:40:9e:9e:76:b4:22:d7:f0:f7:4d:a1:91:6c:c9:
                    2f:53:a6:36:57:83:63:69:fe:8a:0a:be:ff:15:17:
                    da:5e:12:5c:4e:b4:17:7e:de:2a:0f:2e:62:b0:5f:
                    eb:5d:3c:2e:57:60:34:26:36:bb:b5:91:7f:9a:bc:
                    51:e3:f0:17:8e:d1:0a:30:cf:5c:d3:ad:a3:1b:03:
                    8a:89:f7:2e:af:c9:4d:5c:4e:b5:18:68:63:61:45:
                    7d:0a:70:bd:04:6b:e1:cb:98:21:84:d5:40:33:8f:
                    42:29:93:2e:6d:14:96:40:65:82:fc:3e:24:d8:d6:
                    ea:b1:6f:24:d4:10:61:cb:11:b5:5d:ed:a1:42:85:
                    90:f2:83:b4:6f:5d:9d:ae:f9:79:f1:eb:06:36:d8:
                    a8:65:46:d4:c1:1d:5c:4e:b2:10:d6:3b:3e:3b:7b:
                    de:86:6e:29:7d:05:2e:a7:8a:97:6b:c8:a4:92:a4:
                    bd:fd:83:d0:34:ee:f1:5e:00:02:7d:4d:a3:97:e0:
                    45:e9:04:e5:8b:a9:0a:98:e3:33:75:cf:36:47:44:
                    8a:47:2b:7f:7b:de:24:1f:ed:79:07:41:8f:66:bf:
                    40:5d:ca:15:d4:a3:7f:81:02:3e:e0:0d:ce:db:a5:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:29:4B:C2:B0:AD:5F:EE:5E:F6:87:E3:13:7C:3D:9D:FC:51:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17640055-4cd4-3a3e-ad32-1fae10acd549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:1b:9c:d0:4b:95:0d:a9:ab:45:cd:d5:a8:4d:78:03:bd:
         26:2b:ec:a0:68:fe:d2:de:4d:a4:ae:66:b9:14:21:c6:d4:e6:
         45:ff:b9:7d:6e:da:f3:a2:19:10:e2:ba:31:65:c5:8c:46:e0:
         51:6f:be:ed:c4:07:2f:ca:fe:c7:ea:9c:53:9c:55:dc:d2:15:
         a9:98:10:81:e9:f3:3f:cb:76:3e:55:f8:0f:fd:ba:81:30:48:
         10:ae:4d:14:db:f9:0d:bb:e7:5e:52:13:7a:b2:27:58:fd:7f:
         8e:f7:2b:6f:1d:29:42:72:c3:dc:c1:70:f2:a1:f0:94:ce:58:
         5e:24:29:00:60:f1:13:9f:92:8c:b6:ef:89:5e:4d:f4:d0:ee:
         cf:57:4f:36:81:29:27:f9:8a:12:30:07:1a:99:23:b2:72:a7:
         42:b9:ab:0b:0b:ab:e3:57:f8:de:46:62:31:9c:09:67:70:27:
         1f:bf:a1:e1:c0:f5:ee:c5:6f:b1:91:16:ab:8b:70:1a:d2:7b:
         b8:47:de:45:b0:fd:74:47:8c:04:68:aa:1e:23:ac:74:78:db:
         8a:b3:0c:7c:cb:8f:1f:7b:2b:d6:df:ed:11:de:73:95:cd:65:
         e9:d2:6d:f6:04:da:b6:03:c4:d4:61:59:58:84:f0:3c:cd:5b:
         5f:bd:f1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:08 2024 by rpki-client on console-fra.rpki-client.org