Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa
File:                     d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa (raw, json)
Hash identifier:          FXGCplKa9OZlVrDx509YSlKC5NCcmNORHz4KDkxP2M0=
Subject key identifier:   83:5F:BF:75:96:99:6B:7F:98:BF:79:94:EB:B3:D5:E0:DC:73:EB:20
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858472016AF53D14917C2772D9D80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa
Signing time:             Fri 06 Sep 2024 15:11:31 +0000
ROA not before:           Fri 06 Sep 2024 15:11:31 +0000
ROA not after:            Thu 05 Dec 2024 16:11:31 +0000
asID:                     396982
IP address blocks:        169.224.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:20:16:af:53:d1:49:17:c2:77:2d:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Sep  6 15:11:31 2024 GMT
            Not After : Dec  5 16:11:31 2024 GMT
        Subject: CN=3f9460c1-8db4-47f0-9a33-07e074a9ab61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:af:1a:78:4e:b9:33:d4:ad:44:4c:f2:18:
                    36:f7:40:92:8f:fd:c1:55:b7:48:4f:dd:e5:df:cd:
                    13:25:74:d7:68:01:fb:18:ce:01:ec:87:3d:e5:ba:
                    4f:05:f8:b1:d0:73:6a:82:27:72:2e:f3:d0:cf:73:
                    80:ad:24:37:f5:67:82:97:cf:f2:95:63:d0:a2:ea:
                    e4:c9:7a:d0:65:c6:c0:b7:85:17:67:10:2f:84:2b:
                    5e:9d:47:f0:9c:6b:33:2e:8f:54:f7:28:0f:c6:e3:
                    0f:96:79:08:fb:ae:6a:e6:41:18:fd:bb:4d:12:6d:
                    da:b8:e7:0e:e9:32:1f:48:6b:88:19:2f:8a:f2:9a:
                    93:59:88:df:12:00:d8:b5:0d:d3:fe:9b:97:68:5b:
                    9b:4b:bf:55:43:c5:36:79:1b:ea:2d:a5:9a:ad:6a:
                    c8:50:87:2f:ed:21:a3:f8:36:1b:a2:c3:d2:a0:c6:
                    05:93:92:93:e5:61:aa:45:d4:b7:1f:3e:57:df:13:
                    86:89:25:ad:af:ea:90:6a:54:98:a3:c7:36:eb:59:
                    d0:18:6d:84:18:34:18:75:4e:98:56:7a:f3:c7:01:
                    38:31:37:f2:5f:a1:91:44:c6:9b:bf:55:a5:e2:bb:
                    32:9b:2a:be:83:b3:e2:95:b8:f7:bc:3a:0d:e8:e3:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:BF:75:96:99:6B:7F:98:BF:79:94:EB:B3:D5:E0:DC:73:EB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d32d7af4-53ca-37a8-be70-cb3e353be5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:25:e3:4f:16:45:ff:20:5e:4f:32:5b:15:fd:8d:b8:ce:
         b5:83:22:bf:a6:2e:07:ee:df:02:ed:21:32:0e:60:88:b1:85:
         dd:1d:33:51:92:b8:5b:9c:f4:0b:5a:35:fc:1e:63:cc:b4:b4:
         fe:b9:b4:75:44:4f:91:d8:26:08:69:31:43:b5:6f:74:6f:c5:
         5f:e8:49:2e:b9:f0:01:8c:91:17:eb:5a:cd:f3:4b:9f:f3:6f:
         9c:87:ae:a9:d5:bf:eb:dc:82:2b:4a:3e:aa:fc:e2:1f:b7:a5:
         75:ad:0c:5d:fa:29:22:7d:80:2e:5e:68:9c:63:d4:64:05:44:
         23:ca:11:ac:60:ff:bc:30:85:36:12:f7:b3:42:b0:76:fb:76:
         4d:05:80:31:23:82:f2:2c:e9:2f:c2:b9:cb:fd:96:a4:20:63:
         be:59:94:7c:8a:1b:1d:a5:84:47:88:f4:bb:ee:8e:d6:83:30:
         c1:91:b8:3b:05:06:95:fd:42:19:db:8c:c0:1c:8a:cd:28:56:
         d6:f0:71:7d:09:8d:f7:df:6f:84:68:37:e0:5b:ae:df:62:51:
         a4:30:50:cc:ae:25:74:8b:8c:de:1b:3f:4a:a7:ad:06:5a:3b:
         0b:9d:92:cc:52:61:8a:07:2a:01:cf:fc:8e:19:6d:2f:58:a1:
         83:65:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:58 2024 by rpki-client on console-ams.rpki-client.org