Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa
File:                     541632ed-4124-362f-8edd-c6a63bea2883.roa (raw, json)
Hash identifier:          mVP9/ACCuAX5+RZkIf6LZSY6XuxkDzz8QKSDVM2xd0U=
Subject key identifier:   EE:8D:D1:FF:2C:10:49:3D:EB:49:56:35:B1:96:8A:46:99:02:3D:8C
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F43285847A73BE3963CAEC65424E2A180
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa
Signing time:             Fri 25 Oct 2024 01:00:31 +0000
ROA not before:           Fri 25 Oct 2024 01:00:31 +0000
ROA not after:            Thu 23 Jan 2025 02:00:31 +0000
asID:                     46841
IP address blocks:        209.222.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a7:3b:e3:96:3c:ae:c6:54:24:e2:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Oct 25 01:00:31 2024 GMT
            Not After : Jan 23 02:00:31 2025 GMT
        Subject: CN=0b0bb054-237e-42d1-b51f-82fc59a35ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:bd:f1:df:4b:e1:cc:ee:a9:fb:4b:91:09:
                    22:47:1d:9d:b1:cf:ad:e8:69:13:1b:ad:32:61:1d:
                    b7:67:1d:2e:f1:cd:7a:4b:ff:13:44:ba:7f:09:2c:
                    22:f5:62:c0:a4:f4:dd:21:4d:41:2f:fc:35:b2:8d:
                    ea:68:a9:86:b0:ff:ad:40:d2:05:b3:ec:07:8f:77:
                    a4:46:44:7f:d5:01:9b:f2:0a:89:c1:e8:30:65:bb:
                    de:33:5c:11:17:d4:35:7b:80:da:c2:98:0f:b5:ca:
                    59:86:cb:0a:6c:09:0f:2e:ce:1f:54:41:f2:93:84:
                    9f:8f:d0:63:e0:0d:b3:99:57:9f:42:71:d9:f3:bf:
                    d2:e8:39:b3:68:9a:49:26:ef:be:d8:6a:73:bf:0f:
                    4a:fb:e5:4e:04:e8:2a:3e:6c:ee:0b:33:ca:d2:55:
                    53:2f:1c:e5:20:4e:5e:59:29:f3:49:0f:bd:a0:3a:
                    5f:cb:5d:67:bd:72:bb:cb:4c:42:e6:f5:cf:c3:9e:
                    cb:db:86:3c:e1:1a:dd:4e:3c:97:f5:bb:17:8d:8f:
                    f3:b9:cf:39:1e:d5:b6:17:9d:b1:87:38:6b:49:2b:
                    53:88:e3:5c:be:fe:a4:28:c6:c9:fb:94:56:6c:62:
                    3f:3d:a3:67:81:8e:f3:dd:5f:18:b6:b5:04:66:9b:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:D1:FF:2C:10:49:3D:EB:49:56:35:B1:96:8A:46:99:02:3D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:3f:20:00:c8:da:b1:9f:9a:2d:24:f4:83:d1:04:6b:8b:
         e3:44:2f:7b:38:4b:4a:83:66:5d:84:57:3f:7f:0d:78:98:26:
         fb:8c:9b:ed:bf:bb:00:46:6b:ca:26:27:f7:a4:3a:67:fd:f0:
         dd:20:ba:aa:4f:50:48:bc:8b:3a:a8:96:26:57:62:19:9e:5b:
         a1:90:e9:9c:9e:09:2e:97:0d:63:fe:ef:2f:df:71:ba:17:05:
         d5:48:f7:54:9b:c6:fe:8a:27:3a:1f:c3:89:86:f2:82:2c:90:
         0d:67:b2:e6:70:88:31:80:5f:8c:90:65:9b:21:20:42:e6:87:
         b2:9b:c1:f7:2d:50:d0:c8:e5:5e:f6:4b:05:06:80:19:88:b0:
         46:52:c1:49:58:88:f3:33:50:07:a1:9b:2a:c0:3f:69:12:4f:
         2b:db:c8:c8:04:c7:f6:3b:60:ad:38:6d:0e:af:d4:5e:db:4d:
         4a:09:be:11:cc:05:81:d8:8c:77:36:db:6d:5b:50:4b:79:19:
         ad:03:d6:61:b4:df:44:e3:be:4e:d7:15:3e:4f:72:86:67:71:
         ca:30:99:1d:55:22:92:d1:f4:90:c8:c8:1a:b2:4d:b0:16:68:
         d7:ee:7e:57:a8:73:94:1a:97:be:eb:f4:f7:ef:cd:ad:ed:37:
         9c:ef:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:22 2024 by rpki-client on console-ams.rpki-client.org