Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/41f60fee-f3ca-33b6-a722-713f42ed4f65.roa
File:                     41f60fee-f3ca-33b6-a722-713f42ed4f65.roa (raw, json)
Hash identifier:          h2ZfH8cRj91cTJaAUTWjRk1+1o6laB1INptHEzfooXc=
Subject key identifier:   1F:E3:74:97:98:B9:59:AD:2B:44:F8:3B:CF:19:F9:5F:FF:2F:D8:05
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584750B0A5601331F34FDA929A00
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/41f60fee-f3ca-33b6-a722-713f42ed4f65.roa
Signing time:             Tue 24 Sep 2024 01:00:31 +0000
ROA not before:           Tue 24 Sep 2024 01:00:31 +0000
ROA not after:            Mon 23 Dec 2024 02:00:31 +0000
asID:                     54363
IP address blocks:        199.193.18.0/24 maxlen: 24
                          199.193.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:b0:a5:60:13:31:f3:4f:da:92:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Sep 24 01:00:31 2024 GMT
            Not After : Dec 23 02:00:31 2024 GMT
        Subject: CN=d925f5e1-5e2b-487c-b49d-5e0ae56bc1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:df:72:e5:1d:e9:8c:ed:6f:26:37:85:28:
                    cc:fd:ab:72:0c:24:0b:61:da:6e:5f:cb:26:bc:50:
                    b7:37:e9:7f:31:4d:37:f2:54:6f:89:2f:5c:16:b1:
                    47:a8:b2:7c:60:5d:37:e1:70:2c:de:99:df:7c:2a:
                    da:f7:6a:b8:f8:48:93:22:28:73:f9:94:9e:13:76:
                    7b:36:9b:f9:72:4b:5d:96:8e:f9:72:30:4f:bc:ae:
                    3f:6f:8b:a2:51:97:fe:d4:bd:dd:43:6e:3e:b5:61:
                    9b:ba:43:09:9e:97:7d:a2:74:6c:3c:58:70:65:eb:
                    d8:28:f0:ce:4b:c4:40:53:a9:9a:72:18:8d:d6:d5:
                    b7:17:5b:38:33:01:33:4a:bb:bb:94:94:12:f7:ed:
                    3d:8b:24:e4:95:1d:3c:9f:fc:20:16:f6:48:85:b4:
                    f9:4e:7f:3b:ff:01:97:ad:9d:1f:76:d5:ae:5c:a6:
                    0a:84:cc:8e:fd:81:85:63:fd:ce:c4:ae:ba:b7:55:
                    13:00:be:23:81:80:d4:06:f6:5a:80:67:67:bf:07:
                    60:32:04:90:5a:0d:2a:68:a3:fc:2e:3a:7a:d1:3e:
                    f7:3f:6f:37:82:82:d5:df:fd:0b:d0:5c:f4:06:5e:
                    9e:af:a7:02:73:48:62:45:7c:5b:9f:36:ae:9b:2b:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E3:74:97:98:B9:59:AD:2B:44:F8:3B:CF:19:F9:5F:FF:2F:D8:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/41f60fee-f3ca-33b6-a722-713f42ed4f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a3:ff:68:68:6e:c3:6f:cb:6c:c0:e4:97:d4:ef:30:a3:3e:
         4b:1a:ef:ce:60:ca:03:03:1e:7c:52:97:7d:f9:14:26:ca:09:
         38:bd:de:87:0b:13:d9:d1:7d:e4:f4:a1:01:b7:59:6c:a5:72:
         f4:fa:b0:bd:97:57:e8:ca:4c:5b:2c:6b:c4:fa:61:81:22:cf:
         19:56:b3:7c:b2:0b:d2:c8:76:2f:45:ec:e5:65:7d:67:cc:65:
         3f:9a:2d:7d:15:7b:ec:2c:77:03:ca:7f:b9:4e:48:f4:9f:1b:
         4e:8f:7f:61:58:1a:8a:06:4a:d2:c6:7c:3b:f9:80:07:d0:96:
         b6:72:46:a9:c6:80:8e:db:be:9f:1a:60:a3:7d:e5:24:0f:fb:
         72:d9:5d:e1:78:c4:49:98:ac:bb:6c:d1:58:02:8e:c6:bd:80:
         6e:37:75:d9:fe:ad:3a:7a:91:38:d1:17:51:71:d5:c3:2b:bf:
         c8:f8:0b:35:9e:63:43:c5:57:8f:39:66:a1:ac:4a:9f:82:89:
         ff:68:ea:f6:64:13:d5:67:dd:18:7c:41:d1:59:ff:a2:2b:4e:
         67:91:6c:6e:64:15:24:7f:a3:52:c9:41:f0:6a:f6:47:fe:ce:
         6c:48:fd:0f:ab:a4:66:3a:b0:6c:a7:95:4e:c8:60:67:2a:aa:
         37:3d:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:54:35 2024 by rpki-client on console-ams.rpki-client.org