Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa
File:                     3df446ef-8f84-35ef-9354-563bf5792560.roa (raw, json)
Hash identifier:          oiw20gozm2+bpwDJXOlE+TN9Ex6q4+VOjFXk5T5g6NA=
Subject key identifier:   E3:B3:27:43:53:C5:A7:10:A8:87:D4:EA:49:C4:03:B2:3C:9A:35:0A
Certificate issuer:       /CN=3b72c968-d673-4a7a-bfec-4071a7be5317
Certificate serial:       010D0C9F432858456128655008711512A1FA8300
Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     42567
IP address blocks:        199.59.94.0/24 maxlen: 24
                          99.192.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:65:50:08:71:15:12:a1:fa:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=22830b10-b9ff-4859-875b-cdd75af74450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:f0:33:fa:5e:a7:3e:8f:4b:57:0d:3e:1b:
                    2c:1b:35:5b:9a:39:39:ae:cf:1e:cc:9c:24:1d:a8:
                    8e:35:d3:90:fd:77:0e:f3:8a:38:89:16:cc:c9:9c:
                    9b:0c:c4:66:81:40:b9:11:16:de:fb:d6:95:70:cb:
                    9a:5c:38:00:da:95:5f:a5:0e:4a:00:6d:84:77:f0:
                    0a:e2:14:cc:48:19:9e:71:f8:51:2b:dd:66:d7:91:
                    77:50:f3:9d:21:4c:fa:ef:dd:5e:1d:4b:16:9b:f1:
                    a3:ce:e8:22:e0:3e:c1:4a:b3:84:c4:7e:de:9a:38:
                    ad:eb:a9:a9:04:ca:a1:04:87:cd:b4:5b:da:f7:d0:
                    47:60:1c:41:f4:45:fd:18:6e:3c:3d:c7:84:28:20:
                    c1:9f:4d:8b:84:5e:f6:21:e7:ac:22:1c:88:c4:dc:
                    23:cf:8e:d8:c1:67:b9:2b:83:1b:19:03:eb:aa:b0:
                    a9:50:d2:bd:92:4c:74:e5:19:ce:09:80:47:67:1c:
                    a4:b9:81:68:89:cd:ce:0a:1f:b2:ed:48:aa:16:81:
                    10:23:28:05:35:96:5e:ad:25:c7:28:9c:ca:cc:6b:
                    e4:98:fe:0a:68:6e:40:69:dc:17:60:f7:2c:5b:aa:
                    7d:c2:32:13:75:71:a5:e3:d2:6b:4f:30:25:ce:0d:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:27:43:53:C5:A7:10:A8:87:D4:EA:49:C4:03:B2:3C:9A:35:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.192.207.0/24
                  199.59.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:55:19:d2:16:4b:ac:aa:84:7d:d2:44:1f:0a:cb:d2:c4:b1:
         89:7a:e1:03:ad:4e:e0:f7:db:86:06:5b:45:40:0d:97:1d:b0:
         40:77:f6:c7:7f:11:33:cb:fc:bb:c4:7a:4b:3e:5e:42:db:fb:
         c8:61:19:96:2e:43:0d:f6:8e:5e:28:77:ee:98:76:56:0d:02:
         61:16:a3:88:2a:c7:6a:74:90:64:77:85:c0:f9:37:22:bc:84:
         82:f4:b6:97:0d:5e:f3:fb:00:0f:1e:b6:41:d2:74:be:56:d0:
         68:6a:7e:5c:bd:1b:98:69:09:84:d8:65:2c:a1:c3:a1:49:04:
         4f:29:7c:1b:b4:e3:64:29:c0:23:f7:cf:db:92:28:cc:38:98:
         8f:df:df:c2:e3:cf:10:b1:f4:e7:5e:32:f0:92:d9:1b:3e:b0:
         69:c2:55:00:28:aa:46:c0:2d:c7:a2:89:e3:71:a4:be:c6:51:
         db:40:9a:88:3f:f3:f2:cd:ca:2d:86:46:c8:7c:7f:18:c8:e3:
         b6:ae:40:c1:89:53:dc:b8:d5:64:9e:8c:55:a2:d9:ce:7f:c0:
         bb:97:e7:06:d2:81:98:4f:4a:4a:88:2f:73:0d:9e:f1:8e:a2:
         2c:e1:52:b6:d0:bb:28:20:6c:72:f6:18:ed:d4:7f:2c:b3:5b:
         f2:12:4a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:51:11 2024 by rpki-client on console-fra.rpki-client.org