Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa
File:                     f1647871-729e-3bdb-bc99-6773110329fd.roa (raw, json)
Hash identifier:          vH18MXHnTEYhRI4c54wiTboR+HxOAENEzu7p42dMxnM=
Subject key identifier:   7D:2F:8E:79:62:77:85:43:6C:79:58:8A:01:AA:10:F6:CB:10:36:63
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F432858477EC10EAE7B9C314035781900
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     29802
IP address blocks:        91.191.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:0e:ae:7b:9c:31:40:35:78:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=0eca0296-589d-42bb-a92b-e4844d479828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:5e:6d:93:81:b4:28:41:3f:0c:c2:da:1a:
                    fa:d1:1d:14:87:c1:7a:a5:88:a7:cf:85:6c:79:17:
                    6c:56:36:65:83:19:c3:34:3c:79:35:05:77:45:96:
                    36:b0:0c:d8:f2:7d:42:37:34:a2:7e:c2:fc:23:46:
                    8e:50:59:fd:78:45:7f:46:99:fa:48:c0:88:c4:b3:
                    a5:06:72:b1:57:b2:8d:01:66:0f:12:ca:31:7d:46:
                    79:ea:fb:17:4f:0b:51:0a:3c:82:b1:ed:7b:21:90:
                    45:09:2d:d9:e6:80:ee:36:a1:5a:f4:d9:c2:df:55:
                    93:cf:c2:22:80:e2:13:7f:95:a8:b7:ae:af:ba:82:
                    db:3a:36:6e:4c:27:bc:20:28:9b:fa:74:22:16:a7:
                    3a:b8:0c:c4:e8:83:fd:98:04:3c:91:75:89:d2:ca:
                    a4:f9:fd:a1:d8:0e:b4:db:a0:1f:81:d9:71:87:5f:
                    90:4f:19:7b:fe:a3:10:66:25:1d:e4:5d:ee:24:31:
                    e5:c8:3c:16:58:bd:8c:5f:ae:65:9d:a4:a1:a0:b0:
                    e0:ed:1c:6d:f0:44:ee:89:82:62:6f:17:da:18:45:
                    54:61:52:be:58:da:df:8c:9a:5d:d5:7f:b3:40:de:
                    01:41:fc:f4:3e:40:9d:7d:0f:4a:82:47:fb:6e:13:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2F:8E:79:62:77:85:43:6C:79:58:8A:01:AA:10:F6:CB:10:36:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:c9:11:e8:bd:a8:5a:0c:f3:c8:09:dc:47:4e:04:64:f5:
         1b:7d:0f:c0:32:d3:76:2b:b3:d1:4c:cb:36:ea:f4:68:ca:e3:
         91:ee:d0:25:ef:ba:f8:b2:5b:01:87:05:ce:d9:57:5c:3c:66:
         5f:42:49:df:e0:97:da:22:41:20:46:2b:a8:7f:ec:c2:dd:22:
         6e:be:6c:25:25:a2:3d:a3:dc:2f:53:4d:66:e1:d6:3d:fd:e9:
         f2:b0:f1:cb:c6:5f:42:68:84:d8:d2:aa:9e:7e:6b:30:5f:27:
         f9:03:44:a3:a2:69:f1:ef:2a:bd:37:01:88:b2:ce:ae:49:0a:
         71:f9:2b:48:56:7a:e7:53:96:29:04:d3:45:f5:1f:c8:8f:5d:
         1c:94:88:3f:46:7d:74:dd:32:64:e1:9b:3d:25:5e:01:52:fe:
         14:1d:6c:54:00:cc:94:b9:54:0c:1c:ad:f5:2d:2c:ac:d8:27:
         59:46:c8:92:3f:1f:af:01:54:01:a8:5f:d5:d2:22:77:64:4a:
         af:7d:e5:33:ab:46:c7:fb:d7:06:0b:be:69:71:cb:03:13:df:
         8b:93:52:70:fa:d7:05:eb:92:99:b5:3f:98:22:c7:46:d3:ea:
         2f:5c:75:96:9d:34:77:bc:eb:1d:61:25:6c:65:5f:c7:5b:e3:
         bc:7c:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:40 2024 by rpki-client on console-ams.rpki-client.org