Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
File:                     cb493c23-9729-390d-a805-e1a7f3db8e26.roa (raw, json)
Hash identifier:          5pU1h9Syp1T4CTZIkkX7170Q9f3/J9mV5v4m3E9uaXY=
Subject key identifier:   AA:0C:40:C8:9A:38:EA:3B:D8:EE:FF:35:5F:E2:C3:DF:EF:5F:04:EA
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858479AABE20EA0E9FFA39098C940
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     397546
IP address blocks:        192.122.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:e2:0e:a0:e9:ff:a3:90:98:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=2e800c71-b751-47f0-9b47-5ed3b8e2ffde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:8f:da:a0:95:f8:19:d4:c7:21:f2:dd:59:
                    7e:47:e8:bc:81:00:be:0d:db:15:68:58:43:d1:55:
                    8e:fd:e1:6d:4c:63:0c:18:3b:c2:d9:c9:f1:c1:7b:
                    23:d1:12:41:50:14:c9:fe:a2:27:84:ba:2b:9a:c4:
                    a5:6e:9e:fb:83:dd:28:c5:62:df:68:7f:43:97:ca:
                    2c:8e:74:57:b4:1d:39:d8:8e:c4:7a:e6:9d:ad:bb:
                    51:bd:d5:20:d9:66:6d:67:22:41:cd:c8:d2:bb:ce:
                    b5:81:40:ea:72:66:2a:fd:25:24:8f:92:53:ba:da:
                    5e:43:6d:6b:d5:46:c5:cd:0d:21:02:34:91:0b:78:
                    74:ec:2b:8a:88:5b:d4:f8:dd:05:4a:bc:c9:d7:9b:
                    75:51:7b:d3:9d:fa:bb:74:b2:6b:1a:05:6b:7d:17:
                    32:f6:01:7a:85:58:a1:e3:4b:37:71:c3:91:bc:d1:
                    ba:5d:f1:06:d2:84:95:fc:25:29:64:d2:3d:4d:77:
                    d7:a0:b1:b9:19:7c:97:99:1d:70:1e:e4:4d:96:55:
                    0a:03:b6:00:1b:dc:5f:4f:cd:f1:6a:0b:1e:8d:13:
                    df:80:29:78:e0:e6:78:72:40:6a:fb:9b:ad:51:e4:
                    98:56:24:54:01:f0:38:6d:02:e3:42:5d:5b:c2:ff:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0C:40:C8:9A:38:EA:3B:D8:EE:FF:35:5F:E2:C3:DF:EF:5F:04:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/cb493c23-9729-390d-a805-e1a7f3db8e26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:86:ce:8f:8d:c6:00:be:3c:c5:53:3e:f9:af:a2:aa:b4:93:
         3f:0e:60:2d:9e:70:bb:f7:3e:2c:c2:35:1a:88:f2:d4:18:45:
         18:39:28:68:95:3d:16:cf:54:dc:99:b8:d0:72:2f:ca:61:49:
         ab:ff:6d:67:fc:73:c4:91:d0:72:89:e3:56:22:e2:9d:85:e2:
         64:4b:ab:45:dd:7d:46:37:54:16:e0:cb:bf:55:2d:98:85:37:
         e2:36:48:f9:11:03:ed:ac:91:b2:03:a2:71:a5:62:06:e9:3c:
         32:a3:0b:10:8b:fb:26:99:0a:dd:5d:09:56:46:56:b3:22:fd:
         89:6e:5b:a1:97:c3:d6:e1:c7:f0:81:7c:1b:b8:c7:c8:0c:6d:
         67:78:6a:30:b0:1c:7b:de:7f:94:fc:62:5b:f6:e2:aa:ca:76:
         7c:e1:f6:bb:8c:e6:64:fe:7a:d0:05:30:80:cc:a7:09:af:bd:
         b2:2c:d6:4c:f9:ce:76:e2:62:55:90:61:8d:b5:ab:1a:38:33:
         8c:7d:1e:9f:8a:e7:97:45:cf:3f:06:65:b2:37:b5:65:a4:3c:
         f1:89:ee:c1:c9:61:54:e4:aa:22:07:68:9f:2a:13:53:7e:89:
         31:4f:bc:ea:1d:80:94:f3:2c:13:6a:bf:18:87:02:e2:e0:ee:
         29:8e:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:49 2024 by rpki-client on console-fra.rpki-client.org