Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa
File:                     04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa (raw, json)
Hash identifier:          VMGiA4sHa9zpT5ho3riSLb49UOohS8gTLjmTo5FeMRk=
Subject key identifier:   81:1F:AB:2F:1F:11:25:F4:96:C6:34:65:BD:98:00:6E:39:39:53:CF
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F432858476F662DC68C5A1E9311E37000
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     400400
IP address blocks:        199.250.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:2d:c6:8c:5a:1e:93:11:e3:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=5270585c-0ade-4c9a-9a35-2fba4ff56043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:df:2d:c9:71:c7:1e:af:66:3f:96:b8:11:
                    7c:63:45:03:27:22:51:c4:8e:36:3f:1c:0a:60:43:
                    3c:55:5c:57:7d:3b:2e:9f:10:43:bc:5b:93:27:a4:
                    06:f4:aa:25:ca:24:3c:cf:dc:ba:c4:38:9b:8d:8c:
                    7f:75:19:9a:e0:3d:8d:49:ad:ff:69:6e:2c:c1:0c:
                    28:31:9e:59:5d:fc:88:f8:22:56:07:e2:55:51:58:
                    38:7c:97:73:04:56:ee:39:9d:0a:da:74:2d:cb:4d:
                    06:4c:e8:d6:be:87:8e:8c:ab:f4:a9:91:4d:a6:60:
                    d7:a2:0a:14:80:21:ea:2f:fb:a1:68:a5:1f:87:02:
                    29:db:04:40:fd:0b:26:db:b5:1e:11:e6:f9:30:4f:
                    93:d8:ed:3b:4d:9d:d4:5f:32:3e:2e:a1:d1:af:29:
                    bf:6b:7f:cb:83:5a:4f:c8:c5:22:fc:62:43:95:ae:
                    54:09:72:82:70:dc:15:e9:94:7e:d4:0b:49:01:f6:
                    54:c1:91:a5:c7:4a:5a:e5:7d:93:29:4e:73:98:8e:
                    17:bd:8b:54:70:f5:ce:19:a5:65:61:d3:2b:62:5b:
                    19:d2:9b:b7:87:f8:90:95:46:2b:4d:67:f8:0b:c7:
                    61:39:0d:d8:34:71:2d:5b:30:fc:f5:9b:b9:71:f9:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:AB:2F:1F:11:25:F4:96:C6:34:65:BD:98:00:6E:39:39:53:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/04b2c7af-e188-3fdd-81f2-ac0ed18551da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:65:5b:96:02:1b:10:2b:04:35:78:54:43:9d:17:cf:7d:
         a8:65:84:69:37:5e:d9:93:d3:ec:c4:b9:23:23:ab:f4:76:f8:
         9b:18:0b:e7:6e:7c:56:12:f9:44:1b:78:c9:ec:f4:e2:b7:f0:
         cc:01:af:97:9e:77:07:4e:79:d0:b0:5e:fa:d0:6b:ae:52:4e:
         1d:79:7f:d4:af:ac:f7:73:82:9b:f9:d6:9e:16:de:5e:93:a3:
         98:a0:a3:2c:bc:03:e9:b9:f2:d2:6f:3c:91:b4:f5:fe:bb:b7:
         1d:b0:d2:14:63:56:5c:ec:7e:de:90:8a:90:5c:16:6c:94:cb:
         0f:01:ee:df:64:ee:42:5c:23:fb:3e:f8:3b:93:06:12:ff:a7:
         29:e8:fd:9f:27:da:a5:4b:f2:01:54:e7:df:fe:47:4f:72:93:
         c8:c3:46:82:61:b6:aa:bc:1e:b5:eb:42:c4:ce:43:4a:aa:b7:
         b7:63:f4:f4:20:ed:10:da:f7:5a:5c:76:5a:71:bd:62:1d:f9:
         d3:a3:3c:05:86:60:ab:46:b5:94:8b:9d:00:9d:12:e4:85:34:
         ee:63:83:d3:d2:a4:ab:13:1f:0d:72:6c:2b:18:5e:60:a4:24:
         62:a1:13:cb:3a:72:08:7d:21:82:50:01:d3:78:2b:88:5d:12:
         a3:38:d0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:45 2024 by rpki-client on console-fra.rpki-client.org