Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa
File:                     436bb959-c752-3693-8050-3b420f947125.roa (raw, json)
Hash identifier:          3tGs6J39yIdtX3Badvpk/1qMTO1Jccv2JYrNtB4zxpY=
Subject key identifier:   57:0F:2B:F8:84:EA:D6:EE:98:B2:40:27:BD:2B:1F:36:5B:90:38:2E
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285847AB6C16A237C0B939BC762D80
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        141.193.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:16:a2:37:c0:b9:39:bc:76:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=0149b7f9-8c20-4de3-9471-ac38423e10d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:13:7c:83:44:59:86:2b:e6:16:2c:4e:d3:ce:
                    f2:86:82:a5:de:d7:3d:07:2c:a7:51:1e:9b:88:43:
                    3a:6c:9f:0f:43:b1:24:98:6c:ec:36:f1:0f:7b:62:
                    8c:db:20:8f:b1:87:79:f2:20:cf:ae:ad:93:18:26:
                    43:29:c6:bd:5e:63:b6:15:2a:b8:ff:c5:c6:96:dc:
                    ee:32:1b:74:96:d9:14:a5:ae:b2:7c:10:f1:27:94:
                    44:2a:97:ce:ee:c5:0d:1f:6a:55:d3:13:09:7a:5a:
                    84:7c:c1:72:4c:e7:76:f4:bf:3a:94:69:bb:c8:af:
                    1b:75:87:cc:fb:61:ed:f6:50:b7:b8:54:c4:1f:c3:
                    e8:4a:d8:9f:7f:94:4f:bb:06:f1:23:c9:67:59:5c:
                    81:e9:a2:ab:40:27:d0:88:64:7c:2c:b5:80:e3:15:
                    ae:ba:b8:bb:11:e6:9c:c9:2d:1c:73:9c:3f:fb:15:
                    01:b3:17:55:e5:de:40:1a:c8:5e:44:8c:87:ea:f0:
                    07:98:95:d7:7d:e2:dd:ea:d9:7f:47:56:e8:1d:f8:
                    25:78:15:06:da:ff:db:cb:bf:58:f2:f1:1e:ff:73:
                    37:5b:b4:db:df:36:ab:8d:8f:0e:6f:84:83:e5:c4:
                    ba:bb:df:8b:ea:25:79:e8:93:bf:a8:4d:08:7e:42:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0F:2B:F8:84:EA:D6:EE:98:B2:40:27:BD:2B:1F:36:5B:90:38:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/436bb959-c752-3693-8050-3b420f947125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:a6:83:f6:14:6a:e1:34:91:0b:24:46:40:57:3b:5f:77:
         c9:00:3f:4a:54:5d:4d:d0:3f:f2:3e:32:a0:fb:34:5f:ff:c8:
         c9:3d:4b:0f:5c:9f:e5:ca:8c:73:fb:a5:d1:03:de:f7:7a:0c:
         ee:0c:08:8b:30:ad:d9:b0:c9:31:8c:7a:60:13:b6:87:d6:4c:
         8c:3f:2b:18:d6:2f:7e:e7:26:68:22:a5:f2:a2:d0:b6:aa:be:
         d2:a1:52:bd:a4:ee:e4:df:e5:20:c3:3b:a0:8c:06:05:85:51:
         c4:15:68:e4:e2:f6:06:98:ed:c2:4d:e9:8d:fd:a0:b2:bf:7c:
         42:76:b5:fd:4a:38:62:17:2e:a2:8e:aa:59:5a:5a:7d:dd:91:
         a5:84:6f:10:c1:fd:15:57:52:45:5e:b8:64:29:6b:35:61:1b:
         19:c7:b0:27:64:c8:cc:25:e7:55:91:47:38:3e:75:a9:29:97:
         2d:c8:22:45:97:5f:94:26:ce:75:ab:e0:44:87:9e:62:e7:7c:
         06:6c:ca:3b:1e:51:22:21:b5:69:8a:26:89:be:a6:eb:b4:75:
         81:ca:47:cb:2f:4b:4b:eb:81:8c:1f:6f:c7:86:e3:14:4e:cc:
         ce:25:6d:75:44:9a:8a:66:cc:72:cc:e8:bb:48:c4:a8:9a:11:
         5b:92:49:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:26:36 2024 by rpki-client on console-ams.rpki-client.org