Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa
File:                     0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa (raw, json)
Hash identifier:          6KEVjuKTH8Jtyndkl1VylxeU0epcS9dSdtlWADtyYj4=
Subject key identifier:   39:6B:52:AE:59:9E:B2:BD:CB:A0:BD:0C:E4:9C:32:D0:B4:9B:CF:38
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858474850C2E3B06B3F8D71299360
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     400731
IP address blocks:        199.115.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:c2:e3:b0:6b:3f:8d:71:29:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=486305c3-7f82-4a29-98d9-b56d8d2890f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e4:66:dd:4d:a8:bf:21:b6:e8:35:f4:5c:8a:
                    62:d8:18:54:f7:40:e0:78:b3:2e:d0:87:4f:54:ad:
                    ed:2a:04:e9:b1:50:b1:72:2e:19:f6:90:80:3c:95:
                    b9:19:9d:bb:29:8a:54:b2:91:d2:a9:46:52:ac:e9:
                    84:70:41:e6:5d:ed:80:66:b8:f1:c0:1e:63:f7:0a:
                    d4:33:c1:16:7a:3f:76:bd:78:72:98:51:f9:af:e8:
                    fa:56:a3:b8:ce:26:49:ce:ec:3f:56:2b:7c:f1:f5:
                    74:17:de:31:2d:ad:aa:83:1b:a4:76:78:97:ca:8e:
                    df:c0:71:51:22:a2:61:92:ba:2b:e9:df:08:d8:db:
                    16:8d:26:fc:77:48:c8:97:ce:60:2a:41:22:cd:80:
                    e0:aa:a3:bd:0c:e7:17:f8:f2:d9:83:cc:85:fb:4b:
                    3f:f2:be:95:2f:bb:47:8b:81:af:7e:c1:04:1c:8d:
                    c9:d3:4d:f6:4d:3c:eb:34:22:81:47:49:9f:96:89:
                    22:d3:e5:4e:bd:b0:64:37:8d:b0:43:43:2b:7e:4b:
                    7e:f4:16:f7:79:ff:32:78:8a:0e:c5:a7:00:81:67:
                    64:75:0a:bd:f2:7f:c3:94:ee:4c:6b:d4:ca:2d:b1:
                    64:f7:0e:fe:e9:69:31:b3:d9:c1:53:d0:e4:1a:16:
                    9f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:52:AE:59:9E:B2:BD:CB:A0:BD:0C:E4:9C:32:D0:B4:9B:CF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/0f8e6bfe-2832-3d8b-9b5e-29c911b77ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:fb:76:ba:7e:56:d6:ee:a5:f9:0a:0b:bd:67:ea:03:cf:
         4c:78:0d:08:62:dc:b7:43:91:77:94:99:69:c9:ac:52:34:2d:
         82:5d:6f:5c:a5:44:82:06:9e:21:f8:ff:02:df:c8:8d:d2:4f:
         d2:cb:62:be:ba:55:66:3e:df:12:bd:59:f7:6f:87:5d:34:51:
         a8:47:ef:36:02:33:d1:d8:f3:b5:f1:76:b8:5f:ba:19:f2:8a:
         71:c2:ae:c7:ea:e5:95:62:e9:cd:bf:2e:f6:0b:7b:f9:51:85:
         ae:dc:e6:7b:ee:eb:0c:77:64:fa:d5:36:b8:24:9a:9f:64:df:
         cc:fd:f0:0e:e0:f3:91:6e:93:ed:31:98:91:7b:4e:e5:4a:06:
         ee:87:16:7b:f3:35:15:f5:38:24:01:44:a0:3f:27:f6:fd:dd:
         4e:df:99:5a:39:80:5c:62:8f:b7:14:75:bd:a9:66:b5:8f:f9:
         f7:0d:bf:61:80:9c:3b:e7:fb:6a:12:89:a7:7b:b3:66:47:d0:
         0f:9f:be:db:0e:5b:c6:a1:39:ce:5b:7e:d1:a7:1f:48:af:cd:
         78:4e:e8:b0:fc:1a:be:d3:e7:2e:59:17:21:ac:03:47:ae:a4:
         fb:1c:b6:4e:cc:06:66:9e:6f:4d:19:16:6d:ab:60:41:d8:fd:
         f5:1b:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:37 2024 by rpki-client on console-ams.rpki-client.org