Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa
File:                     8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa (raw, json)
Hash identifier:          jPgrgO3FWNfwZCDoif9PYCoQyrdcfd2AocVMf0KpbJo=
Subject key identifier:   9E:1E:6F:96:27:95:D0:B3:F5:00:C4:B1:29:A9:AD:7A:51:55:B7:67
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285847537B7BA6741F90B9A24FEB00
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     3630
IP address blocks:        199.109.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7b:a6:74:1f:90:b9:a2:4f:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=7f25c966-d9f8-4fb5-9ba9-585d25df30e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2c:d2:26:d9:d1:c7:ec:56:5a:8d:1d:7c:b5:
                    49:c8:ec:37:8b:61:8b:d3:b9:35:2b:c0:65:fc:e2:
                    2b:ed:6b:80:ab:bc:3a:af:1d:a3:b0:1a:e0:43:fd:
                    98:ba:dc:13:4b:f1:2d:d8:f9:c8:b5:a6:e1:7f:32:
                    0d:1b:fc:f6:f5:e0:7e:13:6b:14:7b:1c:8e:be:7a:
                    23:dd:fd:68:e7:31:71:82:5b:0f:44:28:e5:2b:25:
                    a3:50:a4:43:8d:98:05:a1:bf:d1:ba:e1:eb:12:9f:
                    ea:0c:d6:b4:45:58:ba:d2:13:97:02:13:57:aa:21:
                    88:27:bc:4c:4d:88:94:ba:f0:86:83:aa:90:80:1b:
                    d1:b0:c6:33:4d:54:40:ba:05:5b:51:35:fe:02:67:
                    f7:45:ff:df:88:cc:17:e8:bc:80:b2:a1:df:00:c7:
                    f0:ef:97:75:1e:9d:a4:87:5f:88:b5:12:69:fa:9f:
                    eb:b7:10:89:64:25:c7:65:1a:cb:b1:72:42:58:c2:
                    41:6e:29:66:e8:67:c4:bb:5e:c7:0a:88:45:eb:76:
                    03:78:ec:e3:70:93:ff:ef:2d:45:3e:b8:bb:31:51:
                    64:ff:95:86:2a:da:54:24:32:fe:10:83:e7:07:86:
                    02:9d:94:11:8c:0b:f5:98:88:ad:fe:90:a3:ed:a7:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1E:6F:96:27:95:D0:B3:F5:00:C4:B1:29:A9:AD:7A:51:55:B7:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/8ac03529-fe7a-30a8-aa88-b3809f13d75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:fb:90:ff:23:d2:51:4b:ee:23:60:15:0c:dd:12:1f:a8:
         50:d0:2c:a5:44:45:fb:08:e3:00:49:09:a8:0a:ee:49:1a:a3:
         61:3a:21:0e:62:9c:05:49:1d:e8:11:e7:05:41:b8:e7:7e:bf:
         77:06:d1:a5:b9:3b:bd:7b:e6:71:f7:23:26:25:af:b9:e2:e4:
         41:0e:d2:84:7c:8d:f0:d8:fe:87:e4:e9:83:d6:5a:e3:c8:db:
         2e:4b:62:8a:c1:df:d3:06:33:cf:11:4b:ec:ca:64:e6:5a:c5:
         52:51:8e:d9:7b:a6:b0:b9:6e:3e:40:00:ac:71:57:be:5d:09:
         56:5c:fa:84:95:af:d2:45:cf:3b:19:d0:1d:a6:fd:e8:76:23:
         a8:56:c1:d0:47:99:33:f4:eb:ad:9c:90:b0:58:ef:73:65:21:
         15:7e:a9:da:01:1a:5c:f5:66:ec:56:2a:64:66:28:38:a7:77:
         4f:09:22:63:c2:6c:8b:f6:df:fa:fe:88:b7:40:52:62:d8:32:
         f1:b4:64:d4:0b:bf:47:1d:04:78:14:f0:6b:08:52:75:6a:f4:
         e1:e3:df:15:db:f0:a3:39:84:18:ed:30:44:17:c2:1f:52:22:
         74:e1:45:e3:f0:f0:ab:e1:f7:8d:17:55:f2:b8:43:4e:af:be:
         71:85:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:58 2024 by rpki-client on console-fra.rpki-client.org