Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/98208d12-8dda-3270-ba39-a60f1eeb3fdc.roa
File:                     98208d12-8dda-3270-ba39-a60f1eeb3fdc.roa (raw, json)
Hash identifier:          QunZVsFW/ucFETBJS8RpkDquO4qvdhqIifVp29AfK9Q=
Subject key identifier:   50:F3:2C:0B:6F:70:BB:14:CB:2C:89:C2:66:BB:CE:54:95:C1:6E:32
Certificate issuer:       /CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
Certificate serial:       010D0C9F43285847CA3F790B1C800F6CB65F67FC
Authority key identifier: 38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/98208d12-8dda-3270-ba39-a60f1eeb3fdc.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     7752
IP address blocks:        209.189.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:79:0b:1c:80:0f:6c:b6:5f:67:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd098f-9e01-4c26-9395-e5b63399acaf
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=cae84c8d-fcf0-4f1e-98c4-fb4f30fc8b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6f:30:46:8e:3e:ce:52:2d:80:fa:93:3b:f5:
                    36:99:f3:ad:8b:5f:56:11:99:e9:cc:44:40:93:2c:
                    af:3e:be:46:15:4c:c5:5e:63:05:02:e5:8c:0a:38:
                    f5:94:e2:8c:39:af:7d:d1:fb:62:e0:bf:54:20:5b:
                    2a:ad:40:16:3b:b5:b6:66:e3:71:35:1c:37:a8:ba:
                    02:ff:50:23:22:51:76:3d:f3:ea:5c:29:14:68:bf:
                    b4:66:52:54:f3:40:3e:b2:d2:86:dc:19:da:9e:fe:
                    36:fa:e0:43:ae:8b:f1:f0:4e:38:c6:cc:8b:58:3a:
                    ca:0b:d4:ed:ef:88:18:e3:b2:3e:b2:71:d2:1d:39:
                    34:4c:ed:e8:d9:13:bb:74:86:88:f7:75:8a:ba:68:
                    e6:af:1b:52:75:50:cb:f2:dd:10:5a:f8:a7:f0:03:
                    41:4a:af:2d:1f:e3:53:55:d5:6a:be:84:f9:e7:4a:
                    b9:e2:b4:71:67:04:39:91:23:97:aa:e1:03:5e:90:
                    fe:45:09:0a:1f:41:84:52:9b:55:a7:37:1a:9e:92:
                    8e:79:bd:76:8c:23:ec:65:f5:37:b7:b2:8a:ad:bc:
                    cc:d3:e7:75:f1:1d:fd:d7:2f:aa:77:c5:86:db:29:
                    10:72:35:83:ad:fe:90:22:4e:74:f8:31:44:bf:1c:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F3:2C:0B:6F:70:BB:14:CB:2C:89:C2:66:BB:CE:54:95:C1:6E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/98208d12-8dda-3270-ba39-a60f1eeb3fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf/9fbd098f-9e01-4c26-9395-e5b63399acaf.crl

            X509v3 Authority Key Identifier:
                keyid:38:52:68:1E:F9:A1:C1:15:72:67:A3:05:E1:1A:68:FC:23:8B:73:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9fbd098f-9e01-4c26-9395-e5b63399acaf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.189.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:13:76:89:3e:8f:f9:77:14:f2:69:25:f2:33:06:03:4f:
         f4:3b:62:49:75:35:2b:56:d2:bc:2b:c9:ff:73:5a:39:04:36:
         57:a5:b3:fc:68:a4:ac:5d:32:30:fb:1d:07:33:ea:da:1a:d4:
         3f:da:2c:7b:74:3e:5e:c9:42:b3:b5:e7:b2:5c:11:2d:43:b8:
         d6:43:b4:50:e1:4f:5e:64:58:e9:cf:3c:05:c9:98:01:28:cb:
         1f:a8:ce:0f:78:83:ef:bd:e6:15:74:0f:78:5a:f1:01:37:62:
         54:bf:2a:c8:b8:13:b6:07:45:b0:3c:ba:2d:10:3e:0e:1c:f3:
         9d:c6:40:52:a0:ea:2d:4d:15:eb:02:c5:78:8a:77:c3:91:20:
         9f:f0:c4:f8:17:4a:30:e6:c1:fa:98:6f:40:1b:87:27:1a:ea:
         21:32:1a:5e:49:64:41:ef:91:57:cb:18:b8:59:a7:5b:24:7c:
         d1:36:27:85:d4:de:07:20:61:d0:4a:85:8e:03:d7:3f:9d:37:
         f1:ca:f2:87:40:6b:46:57:d7:b0:cd:0b:04:ea:9e:2b:f5:9e:
         e2:6b:d0:97:4b:66:d6:a1:f7:ff:5a:c7:34:29:36:4b:d5:6c:
         82:a8:fa:8f:c6:6e:d4:87:87:dd:01:d5:05:91:cd:78:e5:6c:
         88:ec:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:14 2024 by rpki-client on console-ams.rpki-client.org