Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa
File:                     4116e98b-72e2-3f3b-9506-948edabc5cb7.roa (raw, json)
Hash identifier:          MM9BgiEVUJUIwPmwq/d8YaadPMyVWNCj4tXYWjFTPNk=
Subject key identifier:   80:2F:45:96:5E:19:3A:04:0A:63:CE:F4:72:C2:36:5C:7C:20:0B:EE
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F432858477EC107E84A2B5BB53918A140
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     393225
IP address blocks:        199.212.0.0/24 maxlen: 24
                          2001:500:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:07:e8:4a:2b:5b:b5:39:18:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=e5578a1d-53ee-4cbc-8916-f95f44e1dbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:0f:28:d9:34:94:0c:92:05:3c:84:de:be:
                    bb:59:c6:1e:60:96:5e:ac:f2:48:f0:bf:61:82:30:
                    93:aa:a7:ad:90:94:df:85:42:93:d2:31:2c:f5:f3:
                    e7:b8:05:8d:d2:d5:37:70:52:e1:89:12:1a:31:c5:
                    a3:34:df:d9:73:b5:80:8a:c5:c5:f4:c4:64:ef:2e:
                    f9:e0:38:12:75:58:28:1a:07:3a:af:61:12:29:b5:
                    31:cc:db:f0:c4:de:85:4c:dc:5f:fb:e7:32:b0:af:
                    e7:bb:56:cf:a3:69:bb:15:47:47:52:50:8a:6b:78:
                    fc:46:ee:65:9f:18:25:27:aa:0e:37:64:c8:8e:87:
                    65:ab:1e:e0:db:6b:78:10:ca:49:a1:c7:23:c3:c1:
                    c3:03:e9:4b:78:5f:e1:68:34:ab:8d:68:3b:b1:a8:
                    85:f3:98:0c:f9:99:17:49:ca:82:f0:0a:a1:ba:4b:
                    1f:3b:4b:4b:3f:40:5c:5e:c7:88:83:da:9e:24:51:
                    18:06:77:54:a5:48:b4:1f:9d:77:b9:d9:fd:67:d4:
                    c0:31:40:37:1e:f7:a6:61:46:0c:8f:77:38:45:3d:
                    c5:d1:c2:71:bf:55:27:21:70:2c:28:0f:03:7b:69:
                    d7:c9:c6:60:77:64:8d:32:23:b9:f4:f8:d0:a5:4d:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:45:96:5E:19:3A:04:0A:63:CE:F4:72:C2:36:5C:7C:20:0B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/4116e98b-72e2-3f3b-9506-948edabc5cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.0.0/24
                IPv6:
                  2001:500:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:a1:fa:f5:b6:56:c5:ea:9a:0c:5a:6f:3d:63:2f:dd:f4:
         27:2a:53:3a:5e:e0:cb:b5:69:32:f1:5f:5f:ea:71:a3:fe:72:
         74:38:3d:17:9a:3c:3c:24:cd:da:f2:4c:ba:dd:ae:a7:56:07:
         6b:bf:20:78:2f:1f:ef:3d:cd:99:fb:41:b9:9c:67:66:39:36:
         06:62:b1:b5:51:e2:af:a3:ac:20:a8:fe:e3:32:ae:db:ee:42:
         6b:e8:39:92:78:a9:53:be:29:3e:8e:0c:60:80:ec:4d:82:4d:
         ab:6b:d7:80:a4:4c:03:89:f2:ab:7f:ca:40:f9:f7:79:a4:15:
         d4:a8:4d:df:b9:e4:57:6a:63:b7:a9:56:46:ec:fc:68:b5:ee:
         8a:fb:aa:92:5c:8b:58:94:dd:03:c7:fb:dc:00:68:af:ea:20:
         e2:2f:33:54:a0:07:a7:87:bd:9f:32:fe:44:01:13:b0:bb:38:
         46:a9:93:ea:fe:b5:0e:68:3a:14:44:cf:ed:32:84:7d:de:1d:
         aa:a3:78:da:a0:16:a2:24:1f:00:18:67:ca:f3:d5:02:51:67:
         08:c5:ad:c6:77:aa:f9:da:a7:a9:53:99:95:fb:e9:4d:03:c1:
         43:bd:1e:d9:0e:a2:7d:59:87:46:8f:41:0a:fd:10:a8:8a:8e:
         e4:16:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:44 2024 by rpki-client on console-fra.rpki-client.org