Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae19bc8-43cf-3204-b0eb-a50958af7114.roa
File:                     4ae19bc8-43cf-3204-b0eb-a50958af7114.roa (raw, json)
Hash identifier:          qWKgseDZJGF1JyY45smcOn27JTnef+AFe21q/DOWXW0=
Subject key identifier:   C0:82:B1:8F:6C:9F:8A:BB:26:8F:65:8C:DF:D9:A1:72:B9:EF:69:61
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858472B0FB9437EE76419D439A080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae19bc8-43cf-3204-b0eb-a50958af7114.roa
Signing time:             Mon 09 Sep 2024 12:00:00 +0000
ROA not before:           Mon 09 Sep 2024 12:00:00 +0000
ROA not after:            Tue 10 Dec 2024 05:00:00 +0000
asID:                     12132
IP address blocks:        199.243.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:0f:b9:43:7e:e7:64:19:d4:39:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  9 12:00:00 2024 GMT
            Not After : Dec 10 05:00:00 2024 GMT
        Subject: CN=2a363e3d-690c-4ae3-b16b-ced9ec5d0918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:2d:d3:b8:3c:9b:6f:7b:cb:6d:07:e0:23:
                    35:f5:12:0b:91:f6:0e:43:7b:58:e0:aa:2a:de:69:
                    67:38:d7:87:be:08:27:27:3c:24:e0:78:e5:93:99:
                    6c:9e:88:a3:c5:d0:98:61:4e:b3:4d:9d:9a:d4:bd:
                    2f:1e:16:1b:4f:56:29:81:25:e7:60:09:50:24:33:
                    19:e7:f9:53:0b:3a:e9:ea:79:29:fe:b0:5f:40:7a:
                    6b:53:00:80:ff:21:4f:fc:76:d3:2c:23:3d:31:d8:
                    f3:db:1b:34:74:98:fe:f6:84:d3:08:50:79:5e:e3:
                    1e:75:62:0a:83:fc:85:bb:ad:bc:2c:6c:36:fa:82:
                    5d:a7:a2:35:12:a9:4f:50:5d:bb:41:1e:2e:57:a0:
                    64:a2:9a:43:c5:51:91:3b:4d:b0:f6:29:f7:fe:a5:
                    3d:e3:8d:d2:79:32:47:aa:e2:70:ef:26:8a:b1:53:
                    6e:ca:e7:b0:26:61:0e:e3:7d:fe:1a:e9:21:8a:7c:
                    5c:f7:4e:7a:50:6d:98:10:7c:73:77:4b:75:ca:b6:
                    4f:c6:af:ea:f5:33:e4:c6:d8:db:0a:20:59:e8:d1:
                    cc:cc:79:d1:d3:0d:28:02:2d:1e:7d:51:e3:be:ec:
                    e1:cc:67:21:29:af:9b:13:e8:8e:0e:b5:d5:0d:30:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:82:B1:8F:6C:9F:8A:BB:26:8F:65:8C:DF:D9:A1:72:B9:EF:69:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/4ae19bc8-43cf-3204-b0eb-a50958af7114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f8:de:8c:27:74:67:bb:46:4d:cf:0e:93:61:a3:b0:4b:3c:
         dd:1e:50:26:8c:00:81:0a:c7:b9:e2:2a:4b:b6:37:58:f3:fb:
         65:75:7e:f7:4b:8e:95:9b:1f:f4:25:d3:74:bd:7d:0e:ff:19:
         41:b2:a8:3a:ba:2e:87:1c:16:9a:1e:6f:a3:eb:02:c1:20:86:
         5e:f2:2d:80:36:e0:93:64:ec:04:ab:7b:8c:52:be:4d:df:99:
         57:6f:10:e0:a7:d8:b9:3b:fb:46:7c:6c:2b:75:e3:43:9c:b7:
         01:6a:b9:15:b9:76:ec:c0:26:2c:bf:32:d5:af:4f:15:0d:9d:
         84:bb:0d:a9:8f:2d:1a:9d:0f:7d:b8:52:ef:77:77:29:0b:cd:
         2b:b2:17:54:09:f2:1e:f3:ce:88:2b:bc:5b:74:30:84:d2:09:
         ed:fd:7b:01:6e:53:73:70:02:50:1f:68:d7:91:65:7f:24:7c:
         ec:18:fc:c6:6c:96:f8:3d:b0:13:12:cc:c8:23:c2:5a:b0:16:
         d4:e0:31:49:b6:2b:e7:2e:91:d9:51:40:9c:6f:d9:a1:6d:be:
         85:35:a5:a0:5c:e6:61:4e:96:f9:94:ba:9f:34:25:bb:74:c5:
         53:c5:d3:15:47:29:d7:54:8b:e4:46:6f:d9:56:28:e1:91:7c:
         0e:2c:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:10 2024 by rpki-client on console-ams.rpki-client.org