Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa
File:                     ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (raw, json)
Hash identifier:          RGhSVOosKsmsutRKW/aJk4wl1EXfWA4/Br+3k4A4Raw=
Subject key identifier:   EC:22:0C:D3:F2:D7:12:A3:44:26:F2:C4:ED:39:15:7B:21:A5:05:7B
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F432858475A7632458BF939DEF7E1B1B0
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     53589
IP address blocks:        199.59.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:32:45:8b:f9:39:de:f7:e1:b1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=8808ec33-cff1-4d52-962b-d3b867d290df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:80:68:10:06:11:1d:cb:d9:4b:dc:21:4c:
                    6f:58:31:6b:75:78:c6:81:ea:15:eb:76:27:e7:c4:
                    bc:53:36:3d:ad:a7:57:ea:a1:b3:a2:30:0c:79:6c:
                    2b:f9:28:87:46:c5:f6:b1:62:ac:53:2d:96:ac:36:
                    86:7b:e6:9d:9c:8c:7d:bb:99:92:43:ce:b0:b5:cc:
                    fd:d5:ab:39:01:a8:eb:d0:24:17:db:16:9e:11:c3:
                    9b:2f:09:df:24:76:61:37:36:74:b3:57:6b:55:53:
                    5a:b2:98:89:0e:16:9b:9d:75:a3:5e:3d:ad:a5:0b:
                    57:f0:9e:e7:8a:96:d9:e8:8e:f4:82:fe:22:50:0d:
                    dd:c0:e6:ba:b2:5f:11:b0:18:62:6b:88:e8:62:f6:
                    31:10:f9:c5:00:a2:69:23:fe:04:58:7c:dd:b9:14:
                    06:73:7b:7e:17:a7:04:b8:2e:58:3d:0c:42:bc:6a:
                    63:8b:ff:42:80:e1:d2:dd:b3:50:f4:d3:63:56:54:
                    96:23:43:59:f1:7e:23:a5:98:77:01:af:f0:bd:e8:
                    5a:6e:db:bb:d4:e8:fb:96:c8:67:eb:7d:11:e5:a9:
                    1a:df:6c:84:f1:e2:eb:24:29:5a:12:6c:e7:cb:be:
                    e9:2e:6b:12:dd:b3:9e:ef:8b:22:bc:03:59:d0:a3:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:0C:D3:F2:D7:12:A3:44:26:F2:C4:ED:39:15:7B:21:A5:05:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/ba0578d9-926a-35fa-a460-8eae2d199b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:07:6a:08:83:19:a2:a2:80:fb:95:ae:c7:00:fe:f3:87:
         df:36:d3:99:cc:1e:61:64:1d:c9:8a:91:c5:ae:fb:29:39:8b:
         e1:93:45:8f:9d:42:2c:e8:77:23:2e:9d:58:d0:6b:7b:77:3c:
         60:bf:71:a5:d5:34:7a:33:27:ff:8f:f8:ea:a5:0c:28:e5:b0:
         1a:ca:b6:f8:2a:f7:46:63:3b:64:14:f3:f4:6c:c0:c3:e5:f6:
         17:9d:9c:56:06:29:c3:07:e5:fb:cd:02:a7:20:68:7e:ee:70:
         85:85:a7:36:67:5d:e7:e5:44:13:2f:62:f6:a5:91:f5:94:69:
         80:d0:60:82:6c:49:b0:4f:cf:cc:65:16:6b:94:90:84:42:de:
         e7:2c:b1:fa:55:ec:97:1c:3e:a1:38:36:20:66:e7:7a:1c:17:
         e6:24:14:d5:5b:15:ec:4e:62:f5:e2:56:da:48:4d:43:76:2d:
         05:2f:c5:15:4e:49:ee:bf:f7:a3:9c:ac:a4:64:a9:22:e9:50:
         d6:46:67:f4:6c:eb:48:3b:c6:45:2b:da:b1:22:46:68:2f:bb:
         55:68:06:8a:ff:ff:73:cd:bd:0b:a5:79:3b:5c:e6:c1:c3:1f:
         4a:34:49:4d:df:6c:7e:9b:cd:6c:25:7f:d5:80:c2:f2:96:e9:
         0d:ab:99:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org