Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
File:                     4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa (raw, json)
Hash identifier:          5ond1GjaEU6UO2/ZZfqf43+Nz7v/qLWQlCYqQd9wQJ4=
Subject key identifier:   8D:2E:66:31:B4:51:5A:AF:0A:0E:85:59:84:FB:F0:89:9C:65:C5:B2
Certificate issuer:       /CN=e6e72b41-233c-402b-b910-1acb71542338
Certificate serial:       010D0C9F4328584787212513573DBB6A135CF780
Authority key identifier: EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     394049
IP address blocks:        192.250.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:25:13:57:3d:bb:6a:13:5c:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e72b41-233c-402b-b910-1acb71542338
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=fc4bdb7b-d976-439d-b345-284ff0cc1e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:2b:46:dd:c5:38:4b:42:90:e2:4b:88:8b:
                    e9:8b:8c:c7:7d:ed:45:d5:a9:0b:e3:e7:cf:45:b7:
                    71:62:97:0e:f7:5a:7a:a4:a8:b4:cd:93:60:fb:33:
                    a9:d6:77:82:af:c9:98:dd:0e:05:ab:21:d8:cc:0b:
                    55:63:5c:a3:7e:43:df:bc:e0:96:4b:81:2d:a1:9a:
                    ac:99:a6:d0:8f:ba:50:e4:f5:bc:3b:5a:0f:46:2a:
                    47:a8:dd:5c:9a:12:27:33:22:59:d8:cc:81:d4:92:
                    bf:5b:8a:c7:3d:fd:ec:f3:09:95:b0:56:d1:a1:b1:
                    09:27:7e:da:88:e3:43:6e:99:b8:c1:34:52:fc:55:
                    7e:c1:fa:a4:91:2f:cb:c8:cc:cc:0e:2f:28:95:ec:
                    2b:ac:6f:8e:50:d4:7d:c0:5a:06:a3:5e:5b:64:04:
                    3e:2a:4b:98:3c:59:a8:d5:97:d8:7b:7a:41:46:72:
                    1e:a9:44:26:e3:12:0d:1c:05:13:88:69:79:c5:7c:
                    4d:98:c9:84:74:f2:dc:ab:90:36:20:0d:c0:67:b0:
                    1a:32:f6:ca:f4:7c:e3:2d:0d:b7:85:cc:ae:eb:b0:
                    12:80:c3:3d:7b:26:d9:9c:17:0f:e3:a0:f2:31:85:
                    6b:18:42:7a:e6:48:ef:5a:58:47:71:d6:24:a1:0f:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2E:66:31:B4:51:5A:AF:0A:0E:85:59:84:FB:F0:89:9C:65:C5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/4eb2587f-0f39-37f8-9e34-fc5695ce1299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338/e6e72b41-233c-402b-b910-1acb71542338.crl

            X509v3 Authority Key Identifier:
                keyid:EF:83:88:C9:37:AC:D2:74:26:58:ED:FD:A2:A0:43:E9:E9:49:B3:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6e72b41-233c-402b-b910-1acb71542338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:dc:28:6c:7a:ac:8e:c2:64:62:a6:7d:68:b3:3d:2b:5d:
         09:4f:40:e2:30:34:d5:0b:a9:88:78:d8:f4:7f:43:e7:42:79:
         b9:4d:e6:4d:19:0b:38:a7:91:8e:0b:b4:7c:d5:5c:ea:99:dd:
         24:fa:d5:65:7f:96:e6:14:9d:d7:57:e7:93:39:6c:1f:a5:7f:
         eb:3c:d8:bb:10:9b:03:d0:77:fe:19:27:aa:06:80:ca:90:66:
         bf:fe:30:82:0b:85:5e:8e:54:82:1b:47:a8:ad:0b:0b:dd:a6:
         60:6f:db:f6:d9:d2:5b:5b:c9:1d:f3:8a:1a:a3:2d:f2:7e:be:
         59:d5:eb:d5:ab:68:ed:bd:23:51:7b:c9:23:20:f1:8b:f7:08:
         64:61:3c:d2:d9:b5:ca:14:39:2f:37:78:f9:b6:5f:03:e5:ae:
         38:8a:81:f6:c3:55:30:9a:23:d0:5f:14:63:ea:2c:56:eb:34:
         ed:7b:c5:f8:1c:7a:e5:6c:2c:6d:c9:20:e0:dc:9c:23:33:f2:
         6a:5f:fd:ab:9a:43:e3:74:8b:b5:e3:7a:d1:37:d0:0b:6a:96:
         05:0c:2c:60:9c:6a:37:5d:f2:d9:8e:c8:24:4e:fb:3c:ff:1e:
         9b:19:f5:06:cb:f5:5e:c9:21:28:6a:1e:9a:bf:27:69:1a:68:
         a4:f4:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:15 2024 by rpki-client on console-ams.rpki-client.org