Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa
File:                     0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (raw, json)
Hash identifier:          9aW0X+gb6W9q1YyfqxSxSQO7ZBCBqLM2LwST806zJ9U=
Subject key identifier:   B0:33:AA:82:C3:F6:90:67:04:DE:FC:35:73:43:F9:46:37:B2:24:6D
Certificate issuer:       /CN=3b72c968-d673-4a7a-bfec-4071a7be5317
Certificate serial:       010D0C9F432858472F3074301483E7E7DFC6CB00
Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     27229
IP address blocks:        199.241.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:74:30:14:83:e7:e7:df:c6:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=2875b5d2-49b4-464d-967d-36607b153ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:03:22:57:1c:43:a2:e2:d5:c3:08:23:e8:0c:
                    aa:a0:96:2d:47:3b:ef:06:38:1c:b5:1a:b6:6c:ee:
                    1c:35:ee:b5:5e:db:d2:d8:24:12:23:06:e7:96:9e:
                    b3:17:ba:73:a0:0f:d3:c8:4d:ef:19:ab:a6:8c:4b:
                    64:3a:44:e1:25:94:a4:e7:a0:b3:1e:8a:75:0e:ee:
                    ce:00:fd:4f:4e:32:92:45:ea:a2:09:59:60:c9:07:
                    da:0a:68:fb:b4:67:01:c9:b5:56:8f:c6:a7:3a:e0:
                    b6:e4:e1:30:f9:c2:12:d5:07:3e:49:7b:84:6e:dd:
                    14:56:7f:21:c1:e2:6a:c4:b2:e2:4a:62:5e:5b:06:
                    47:db:38:8c:54:0b:3d:28:4a:b0:7d:35:84:40:d0:
                    1e:75:9b:76:36:7e:be:1e:9d:1d:5e:8e:1a:54:53:
                    da:ba:7b:bf:81:4d:e6:27:54:f2:1d:ac:4a:5d:8d:
                    f4:92:36:d3:a9:04:9c:6a:24:3b:35:7d:c7:61:f1:
                    c2:76:c0:70:44:7a:d2:fd:f3:0f:a7:33:c4:37:3c:
                    18:73:cc:8d:3c:38:79:3d:17:41:dd:a1:55:aa:d6:
                    57:ab:c5:b4:23:f5:5d:33:12:a7:f4:d7:89:d4:f1:
                    da:b2:75:fc:62:13:0e:3b:80:fb:12:fe:5d:d2:7f:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:33:AA:82:C3:F6:90:67:04:DE:FC:35:73:43:F9:46:37:B2:24:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:56:eb:a5:bf:b6:cc:fd:e6:83:9a:75:22:30:a2:9d:dc:11:
         ff:d4:c8:3b:66:f0:35:bb:96:a9:03:ef:87:fe:fd:11:be:e3:
         45:ef:3b:c1:e8:6b:41:71:96:bb:2d:64:96:27:95:a6:ec:dd:
         7c:9b:3a:07:ec:1d:3c:64:5e:2b:24:16:c6:46:76:9d:4e:21:
         fe:53:a2:dc:da:ac:81:25:b3:71:ae:9a:59:ba:d9:a6:75:bd:
         b3:78:55:49:3b:7f:78:f8:95:27:c9:c3:f6:17:ce:31:e2:a7:
         76:c9:25:9f:0d:a8:e6:cf:3c:73:7f:22:9f:9f:c9:2d:17:16:
         56:08:6b:97:05:dc:83:53:a2:f9:3a:72:b3:c7:17:fd:ff:6c:
         71:af:b8:c3:31:50:0c:b9:1f:d6:86:66:44:80:06:ae:39:ab:
         ba:71:4c:7f:1a:43:0c:34:e3:ad:9f:80:13:ec:e7:b9:87:f2:
         25:7d:3f:00:da:e2:5b:9c:fd:a9:d7:93:59:ec:cc:88:88:d6:
         a5:27:8d:41:0b:76:56:3c:65:c0:82:61:89:24:14:e9:89:e9:
         2a:63:7c:4a:70:a9:0f:a8:3c:e4:22:f9:b5:3c:8f:9e:f6:0d:
         0d:8e:b3:eb:28:41:61:90:88:3c:36:22:97:b7:83:14:d5:49:
         21:0a:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:26 2024 by rpki-client on console-ams.rpki-client.org