Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa
File:                     88284c80-4080-3740-a1d6-8df786cec5f4.roa (raw, json)
Hash identifier:          mKfZUedzjU3zfugj6PzeE8aE/gTKrI4NYBms/HQ16Cs=
Subject key identifier:   0C:23:B8:F4:39:44:E7:E0:62:2C:D4:96:8F:5B:12:E9:92:AA:E2:BC
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F432858472C65C457C40BD93F0297C380
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     715
IP address blocks:        199.120.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:c4:57:c4:0b:d9:3f:02:97:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=8dce9497-228a-4641-a1a9-4fbee81c6e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:b9:03:12:cf:d8:72:7b:17:e0:a7:51:92:
                    73:4b:8e:24:2b:f3:30:a7:2e:75:a6:2b:ce:63:57:
                    bb:a8:f3:3b:d5:51:aa:ad:52:cf:81:fd:fa:df:f0:
                    c4:91:f7:af:a2:8b:ed:f5:e4:e2:1c:66:75:8f:33:
                    c6:09:f6:ac:ef:e8:44:d6:8b:32:4d:d0:2d:67:d9:
                    10:7f:52:70:e1:4a:eb:b1:62:1f:8c:c1:82:1b:0c:
                    dd:d7:4a:c0:01:4e:ce:9d:2b:bd:f3:06:a1:ca:38:
                    18:27:f4:0d:55:89:72:90:ce:85:12:6d:4f:ee:25:
                    28:d1:5e:a7:87:fc:2c:16:6c:4c:ba:ad:99:56:aa:
                    7a:46:1c:93:7d:9d:e4:60:18:49:bb:bc:0f:08:65:
                    45:2c:db:9e:f1:88:20:9d:1b:9b:f4:8c:2f:07:64:
                    bc:08:e2:1f:aa:3c:af:3e:81:73:5a:36:fe:5f:91:
                    97:b0:c7:6e:d2:ae:c2:52:4d:8d:b2:66:16:5a:f0:
                    75:b0:ec:42:f6:08:fc:a6:40:5d:06:c3:81:b2:10:
                    df:f3:ab:5f:a2:cc:d0:06:30:43:d4:87:50:61:01:
                    74:0b:81:b6:ec:93:39:18:f1:34:57:24:40:6e:74:
                    fd:e5:62:41:50:6a:fe:12:0c:68:48:42:8d:d2:7c:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:23:B8:F4:39:44:E7:E0:62:2C:D4:96:8F:5B:12:E9:92:AA:E2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/88284c80-4080-3740-a1d6-8df786cec5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:66:c8:64:01:98:c8:88:78:41:e1:4d:fc:de:1c:ef:fc:fa:
         cc:57:41:cb:bd:a2:9a:c9:79:2d:cc:7b:ae:0c:92:ef:97:33:
         fe:c3:0d:6a:de:ba:52:b3:db:bd:e3:43:83:82:67:09:f9:27:
         3d:3e:5c:58:d5:fa:36:3c:af:17:60:01:b7:de:5c:83:01:8f:
         74:50:70:7a:c2:85:c2:74:df:03:e5:13:4c:67:79:6d:3b:9d:
         67:87:c3:ed:5c:cf:cf:f2:fc:8c:54:24:e6:eb:19:3f:bf:83:
         2c:7b:d9:80:de:b4:de:bc:e4:fa:b9:76:b8:f6:bd:70:c8:b6:
         57:75:d5:f1:21:ca:3f:0f:c5:20:f9:3a:3d:6b:9c:af:15:9e:
         51:5f:f5:a4:45:76:bd:0f:fc:e0:b3:8a:dd:b9:e9:13:27:d7:
         56:0d:9c:56:87:60:5e:5f:4f:31:01:33:6e:43:9f:fb:cf:f9:
         44:25:d9:65:90:4a:4e:bd:64:df:89:58:83:24:71:4d:73:ec:
         86:d3:72:38:86:8a:d8:8a:9b:90:10:0c:0f:70:8c:38:d9:72:
         8b:a9:47:ca:6c:90:35:5e:85:22:0b:7f:1e:37:85:15:7f:69:
         da:90:e3:a9:94:9d:2a:02:71:e1:d6:e9:a8:a5:c6:c6:0a:50:
         89:d1:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:31 2024 by rpki-client on console-ams.rpki-client.org