Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa
File:                     19223d8a-7d6e-3928-9795-22ccf759ddb5.roa (raw, json)
Hash identifier:          vTsd6uSQv4/N2V7oE2s9FDMkzdGxUeGX4QFKKyXw+Lo=
Subject key identifier:   BA:4B:42:19:80:ED:67:F2:61:EC:10:0A:0D:8F:1F:5D:10:3E:2D:46
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F432858477396591F653E2F44AEF6A200
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     21949
IP address blocks:        104.192.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:59:1f:65:3e:2f:44:ae:f6:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=2f2c2b0d-ae95-4068-a55f-59de3d580a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:ba:bc:35:cc:a3:e1:b6:24:ec:a3:96:2b:
                    29:04:01:19:16:51:88:4e:17:4b:81:ee:f3:c7:7a:
                    d6:3a:34:f8:1d:6c:0b:61:1d:b5:3b:72:4d:ef:27:
                    e6:cc:cb:ca:f8:c7:7c:33:b1:98:61:37:8e:da:00:
                    13:78:31:3f:a6:cd:28:ec:ad:9c:c1:df:8d:ab:d9:
                    09:13:96:75:a1:89:c7:92:db:dc:87:8d:dc:04:00:
                    32:08:77:93:39:f2:9a:4f:99:c6:18:cf:87:52:94:
                    f2:ad:c2:ea:c9:14:e2:07:47:4a:8e:34:cb:56:e0:
                    c4:c1:dd:8e:9f:ef:4f:43:35:d8:62:8a:24:64:fd:
                    aa:aa:c4:dc:32:dd:5d:85:8e:64:e1:9f:85:85:40:
                    b7:e0:3c:60:61:55:3e:51:23:0f:56:1a:31:98:0d:
                    9c:52:ce:79:ad:01:71:44:9c:c7:ad:df:be:73:7c:
                    05:30:0e:13:ed:5c:b6:60:27:fa:1e:e0:5e:0b:8a:
                    8c:9e:2d:21:a9:57:5f:2e:6b:0c:ae:4a:aa:17:97:
                    95:3e:e3:b2:1e:10:63:14:a5:73:28:31:c8:ca:80:
                    b2:f1:a2:e6:37:9d:03:30:38:a6:3a:a3:31:cc:2e:
                    3d:de:08:03:7a:35:d0:f6:09:c3:d8:91:d8:43:0e:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:42:19:80:ED:67:F2:61:EC:10:0A:0D:8F:1F:5D:10:3E:2D:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/19223d8a-7d6e-3928-9795-22ccf759ddb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:1e:e3:1c:a6:22:a2:eb:a8:2a:72:f2:4f:5f:2e:3b:f3:
         44:96:31:fc:8d:2e:06:3e:c3:78:34:35:97:cd:42:48:34:9a:
         4e:d7:0d:9b:6b:6c:29:d9:5a:4e:3e:3a:4d:a3:60:02:66:5a:
         ba:90:3a:3e:24:94:67:ff:30:94:28:fe:1f:0d:c6:1a:35:04:
         02:1d:d8:f8:62:bc:24:47:c5:6b:6d:24:a8:a5:5a:3f:88:a5:
         12:7f:85:0d:1e:f0:14:12:4e:62:d1:9b:b7:b7:f2:b7:1a:4e:
         fb:30:24:51:8b:28:64:70:3c:79:cf:90:90:6b:2a:f3:d7:66:
         5b:0a:8d:e9:3d:f7:b9:52:73:71:73:bd:40:36:79:a5:8d:16:
         18:46:7c:b3:5b:d3:10:ca:20:40:95:05:0e:e7:fd:f8:51:ca:
         5d:4f:7c:35:17:15:30:7b:63:a7:3a:3a:bb:99:95:d2:67:ac:
         f7:f1:f6:aa:b3:45:80:a8:78:d4:5d:bf:e5:d0:f2:95:35:0a:
         0b:d9:1a:7f:2a:71:14:c3:57:37:89:17:87:51:08:a0:95:1b:
         22:40:2e:81:67:da:2c:cc:32:7b:a6:00:63:96:36:cc:95:c2:
         b9:cb:db:4d:c4:ca:a3:7a:c1:f6:ef:36:74:fc:46:9d:cb:a6:
         25:de:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:23 2024 by rpki-client on console-ams.rpki-client.org