Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa
File:                     394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa (raw, json)
Hash identifier:          mkziS0PIxIveK8uauq4oLDJl6VWupO6CaFR51nzzo3c=
Subject key identifier:   99:B9:91:CA:A0:AF:67:F5:5F:2D:C4:78:05:6D:56:D2:4F:CC:E2:2F
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F432858476E00FFF6980832B37E40FC80
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     14007
IP address blocks:        199.101.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:ff:f6:98:08:32:b3:7e:40:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=b62c7a4a-5da9-4ac0-9b6d-64fb9e3b8e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:2c:99:c3:4b:35:90:f1:74:98:1d:02:d5:
                    c6:db:4a:d4:2f:5c:9a:3e:0a:c6:d0:c4:3e:21:4c:
                    4a:ec:d8:74:f7:03:ad:4d:59:e7:99:b0:ba:24:b2:
                    7b:c5:df:ff:41:d5:74:b6:e2:c0:5a:e9:cb:39:78:
                    55:e1:07:e0:08:33:c4:ac:ed:06:6e:b4:88:19:d6:
                    ae:b7:9f:98:91:45:1e:7e:22:b1:93:4b:79:2a:7d:
                    2b:36:c0:4b:ed:c2:c2:23:69:c9:fc:36:50:7c:b4:
                    be:80:44:19:9d:ef:cf:bc:7b:40:d8:ed:6a:05:72:
                    d4:dd:68:40:33:53:ca:67:4f:0f:74:bf:c8:e2:26:
                    ea:90:e3:fc:5b:4f:5d:56:19:01:51:14:99:70:ec:
                    eb:8b:75:34:ce:75:3f:78:43:6f:ab:a3:de:49:0f:
                    3f:80:6b:85:03:72:5c:d8:2b:f8:ba:a8:49:9b:be:
                    8f:20:4e:0a:8a:6e:61:61:f6:61:27:d8:46:e2:f2:
                    c7:fc:71:66:44:c8:8c:0d:2e:56:f7:c8:e4:ff:c8:
                    ff:08:bf:38:41:3f:fd:1c:79:0c:0c:23:4f:ba:d7:
                    ed:a6:e0:4d:20:57:f8:62:14:6c:41:de:e5:8a:47:
                    52:83:6d:eb:c4:85:fc:1f:d6:3a:9c:cd:d7:68:6d:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B9:91:CA:A0:AF:67:F5:5F:2D:C4:78:05:6D:56:D2:4F:CC:E2:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/394a0ab7-d263-3a7c-9e17-7f75f4095acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:fc:da:c2:e0:69:14:ee:e3:a9:62:17:43:af:6a:ad:a6:5b:
         c8:11:59:93:96:33:12:fb:d2:93:b2:4c:44:80:82:f9:d3:cf:
         34:c5:4d:d0:bd:85:61:08:8b:b9:5f:03:38:44:55:21:07:a4:
         16:59:0f:94:e5:0a:95:99:27:ff:a4:7b:28:40:10:e8:f9:ce:
         6a:c8:4f:48:89:65:07:2e:dd:b7:c8:f9:e8:30:75:81:68:d3:
         2d:7b:8b:06:73:a0:2d:ee:59:4b:a1:07:34:14:f4:c6:e6:76:
         9c:c2:87:29:7e:db:1b:e2:02:d0:38:c0:6e:05:90:34:9a:2e:
         a4:1a:0c:b7:99:b3:83:90:35:36:87:02:f6:29:66:1a:c2:60:
         e0:47:5f:da:2e:90:5b:17:90:cd:16:62:ba:29:2a:6b:f4:31:
         92:f0:87:1d:92:4b:73:1c:0d:69:b0:39:be:5e:f9:0f:a6:40:
         6d:5a:15:68:fb:9e:04:99:5c:f9:38:7b:1c:18:2e:e1:38:ea:
         27:c4:d0:0b:97:43:1f:df:76:56:9b:a3:08:a4:37:8d:9d:e1:
         41:94:6e:b8:a3:02:c5:81:46:04:e1:3e:d5:2b:f8:54:d8:8c:
         89:d5:38:19:d8:2a:70:05:4b:8a:fb:b4:54:89:25:40:48:2e:
         01:fd:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:56:58 2024 by rpki-client on console-fra.rpki-client.org