Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa
File:                     5c71001e-a55c-33db-bcc0-223bccba2b97.roa (raw, json)
Hash identifier:          6cUA/1zxs0oNHUgDmOvv+blKjdjmedMJ5Zstgphpc9o=
Subject key identifier:   C9:8B:F2:C7:1C:00:FB:F4:73:72:B0:C2:0B:7B:4F:F8:52:F5:BB:BF
Certificate issuer:       /CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
Certificate serial:       010D0C9F432858477EC10DE441D62B587263CFA0
Authority key identifier: 5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     393220
IP address blocks:        199.71.0.0/24 maxlen: 24
                          2001:500:31::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0d:e4:41:d6:2b:58:72:63:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6556d7-60a4-4318-9d11-464fb8396d3e
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=8396e125-7c3c-4675-af76-756c716c35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:4f:2f:1f:83:62:98:44:80:f9:10:4c:69:
                    26:2d:15:89:92:9f:64:7a:92:3d:67:35:ce:6c:98:
                    be:ed:88:b4:02:71:9d:4f:34:a6:d4:00:ee:c2:0a:
                    f7:b2:c5:bd:0c:71:8c:39:38:8f:64:89:f4:68:9d:
                    5a:3c:c5:f4:e8:f9:ad:dc:47:ae:5a:c7:3b:72:6d:
                    94:20:03:cd:6e:17:36:4e:67:04:65:2a:c9:9c:bc:
                    6b:10:4e:d6:8d:89:ac:e6:bb:6a:13:62:b0:b1:ac:
                    72:d7:d3:2e:c9:63:ff:3f:78:83:44:d8:fe:c2:a4:
                    c9:09:f2:aa:3f:4d:f1:b3:f2:54:77:0f:6a:ef:f4:
                    34:17:f8:b7:26:60:33:64:1c:ce:d9:6a:9c:a6:88:
                    49:e8:37:86:72:5a:a3:c1:56:4a:08:ee:11:a1:28:
                    b1:9b:43:e4:8f:61:0d:bd:34:77:f4:82:87:f9:b4:
                    27:c9:45:6a:32:9e:08:96:30:10:8f:4e:5a:2a:90:
                    46:9b:cf:a1:4b:1b:65:c5:e4:f6:aa:fb:86:80:49:
                    af:23:1f:98:27:9f:3a:8e:49:be:23:88:15:e2:34:
                    27:bc:fa:46:e7:55:70:21:8e:e3:69:81:82:2a:b6:
                    20:ad:c3:5f:39:e0:f0:35:70:62:b9:70:7c:2a:a1:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8B:F2:C7:1C:00:FB:F4:73:72:B0:C2:0B:7B:4F:F8:52:F5:BB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/5c71001e-a55c-33db-bcc0-223bccba2b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e/ad6556d7-60a4-4318-9d11-464fb8396d3e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:C1:FD:9A:63:85:C1:8F:46:52:4A:B8:C4:62:F5:34:24:BC:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad6556d7-60a4-4318-9d11-464fb8396d3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.0.0/24
                IPv6:
                  2001:500:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:e1:99:60:5b:23:91:10:7b:36:b4:28:90:1c:b3:4a:dc:
         38:6b:a5:c2:33:80:48:ce:f6:eb:e7:51:95:ae:6c:1d:32:75:
         1e:f9:da:fe:f6:be:c2:ff:4e:33:67:22:84:b8:f5:cd:8f:27:
         08:99:77:29:6d:88:7f:55:45:7a:a5:b1:98:ac:9a:ec:ab:27:
         7f:b4:2f:53:23:da:d4:76:c0:c0:9c:ea:57:f7:03:44:ed:ec:
         8f:48:6d:b2:11:d6:5c:4d:89:bc:33:66:78:11:e5:ad:03:a1:
         cf:18:29:98:1d:80:72:43:71:6a:a4:4a:7a:02:7f:da:ef:97:
         47:86:c3:0f:b3:b8:d2:e4:89:a3:dc:4d:72:60:4c:a7:bc:0a:
         82:72:f4:ef:6f:0c:74:4b:86:ab:06:fb:58:f5:c9:b0:30:45:
         c4:d5:93:e3:af:19:8f:e0:16:d1:9a:9b:02:be:61:43:71:c2:
         8a:88:69:70:58:29:b9:90:21:65:64:c4:11:15:13:65:88:5a:
         fe:cc:ac:4e:fc:43:56:72:3a:53:22:cd:83:ee:37:b2:7a:d8:
         ca:72:5b:24:1c:a4:7c:be:5d:05:19:b5:f0:27:30:44:19:19:
         94:78:6f:40:36:e9:3c:f2:f1:49:65:db:3d:07:41:24:49:75:
         3a:55:b2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:18:44 2024 by rpki-client on console-fra.rpki-client.org