Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa
File:                     be02e7ab-883b-3563-9872-b421c4cde5ee.roa (raw, json)
Hash identifier:          Z4z2u01uGSJPXSRt11KZ8MYQN/rxy19yfqxxDLN6Ui0=
Subject key identifier:   B2:D4:14:A3:90:4C:00:8D:1A:C1:DA:6F:6F:B9:DD:FA:43:6E:C4:DA
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285847213B19D32E09965DC2ADEC00
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     55247
IP address blocks:        162.211.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:19:d3:2e:09:96:5d:c2:ad:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=4d7bfcd2-1898-48e0-9ce8-a3c6baa5ca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:60:4d:60:84:92:49:d5:e6:1a:8f:f2:c2:
                    58:33:74:ef:2f:1a:f3:fe:bf:90:81:2a:33:bc:4c:
                    42:93:90:75:30:75:46:e3:a3:ad:b8:b1:44:41:ba:
                    52:97:65:1e:d9:0c:f6:b9:47:be:87:7b:43:f2:6c:
                    81:bf:40:d8:d8:dd:cc:d5:98:29:a0:68:d4:57:8d:
                    08:3a:4a:1e:4c:72:a0:0e:4f:fe:f2:f8:15:ef:69:
                    c6:57:cf:7f:f0:0f:0a:b4:86:ea:3d:c1:37:93:84:
                    84:d5:2a:e1:b6:3a:68:43:81:35:ad:9f:ff:d8:ee:
                    0b:1f:b7:f7:87:19:a5:b3:a1:75:35:1a:e9:1f:61:
                    fd:53:0c:99:23:65:34:c6:3a:b8:e3:a0:2f:78:b0:
                    fb:d9:dd:c9:a5:2a:4f:83:d2:4c:f6:a2:56:8b:e2:
                    af:72:e7:1d:f6:9a:e1:66:07:f4:dd:2f:d9:36:26:
                    8c:af:5a:ae:e3:64:fa:59:ae:15:d8:ba:2d:a8:92:
                    dc:29:b7:ca:c1:de:f7:6f:af:c3:f3:0e:d5:73:24:
                    c3:0d:64:a4:d2:ea:7c:e8:95:2a:60:83:25:c6:2b:
                    62:23:71:ad:4a:54:ad:73:6c:33:6d:91:4f:87:cc:
                    66:17:19:16:e7:6c:05:e8:64:84:0f:ea:a7:ec:ff:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:14:A3:90:4C:00:8D:1A:C1:DA:6F:6F:B9:DD:FA:43:6E:C4:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/be02e7ab-883b-3563-9872-b421c4cde5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d0:72:1f:f9:a5:cb:dc:10:44:6e:aa:92:59:fa:e8:6e:84:
         c2:08:b6:a7:7b:43:6d:2b:87:f8:ff:dd:0b:c9:bf:25:1c:14:
         c4:ba:18:d2:d2:6b:c0:31:58:72:83:fe:2a:96:d8:59:f0:83:
         00:91:42:dd:65:80:86:a7:53:57:99:e8:1b:15:a5:b4:f5:dc:
         bd:27:0e:40:ef:98:d1:8f:83:bd:da:a5:f9:9e:af:6a:1b:29:
         4d:23:80:75:e8:85:e9:d6:e6:20:28:6c:6e:1e:f8:68:fc:e4:
         1d:03:88:e8:76:6d:89:b9:09:68:55:09:a0:da:7f:73:72:4d:
         24:2d:1f:f6:f5:24:be:2e:ec:37:36:84:d5:0d:7c:13:ec:13:
         47:c4:71:60:fa:0b:b6:a2:be:f7:3a:8c:fa:9c:c5:e1:9b:01:
         ff:a4:78:79:cd:e8:1b:7a:0b:bf:ac:bf:46:2a:7f:2d:b0:6d:
         13:f4:07:19:d1:a5:35:34:07:92:52:38:dc:27:22:e1:67:5f:
         94:b6:a5:6e:af:71:15:52:ca:f4:c2:1c:e5:eb:5c:81:1f:a9:
         5c:dc:85:31:72:04:b1:45:cd:02:9a:45:75:61:f2:66:20:59:
         62:af:bb:eb:5d:99:ee:94:f5:d9:5b:c6:66:01:c3:32:41:ea:
         ef:14:66:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:50 2024 by rpki-client on console-fra.rpki-client.org