Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e897fed4-847d-3574-9b40-e03117c3c58b.roa
File:                     e897fed4-847d-3574-9b40-e03117c3c58b.roa (raw, json)
Hash identifier:          JWUjChzdHxZ0axeINRy5wK9RWSaHyErQeYv3RGSx/FQ=
Subject key identifier:   81:0C:A3:C1:8E:1D:C0:D8:C0:1A:E0:F5:19:40:E7:E9:26:F5:7C:9D
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285847AE36C0F42FB2D758478F8CE0
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e897fed4-847d-3574-9b40-e03117c3c58b.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     3754
IP address blocks:        199.109.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c0:f4:2f:b2:d7:58:47:8f:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=8c763dc9-31b2-4fb5-8b0c-8b9aef371e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:e8:8c:a7:a3:15:b2:de:8c:70:78:ea:4b:
                    e0:3f:a6:51:df:27:14:7e:7c:f6:71:ea:a3:ce:c5:
                    13:7e:09:f9:28:48:3b:0f:21:2f:0b:30:11:bd:5b:
                    72:d3:0a:86:aa:bb:56:d8:a4:e4:d6:1d:cc:37:0c:
                    20:c5:37:4e:ed:68:eb:f4:4d:96:79:dc:95:ea:36:
                    7b:24:7d:14:26:7b:9e:04:e0:86:2d:99:9f:23:f4:
                    ba:c2:92:81:2e:40:49:76:f7:42:c1:77:e8:6a:50:
                    6e:69:7d:fe:a0:16:9f:9b:9b:5d:06:b3:85:65:05:
                    2d:3d:39:be:c6:72:4b:fe:89:7e:4b:c3:87:a7:10:
                    27:b1:69:fe:fa:e5:3c:4a:0d:74:44:c3:66:87:aa:
                    6f:da:bc:5f:9e:b4:c6:9f:65:77:41:74:17:99:44:
                    d3:c8:03:79:59:6e:cd:fe:d8:ac:50:59:fb:bb:d9:
                    8c:c3:5d:38:6a:08:e1:fc:0c:7d:7c:d2:81:0a:3f:
                    1d:5a:2d:1a:19:01:d6:11:e8:02:4e:00:90:d8:6e:
                    1a:8d:90:f4:0f:1f:3f:2e:a2:c6:58:1f:fa:56:8a:
                    9a:52:9a:ab:a2:3e:cf:b5:28:79:77:39:d0:12:cb:
                    d2:65:b8:b3:cc:0d:bc:38:8a:c8:41:14:ed:03:7e:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0C:A3:C1:8E:1D:C0:D8:C0:1A:E0:F5:19:40:E7:E9:26:F5:7C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/e897fed4-847d-3574-9b40-e03117c3c58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:b2:69:94:dc:4f:09:e0:4f:bd:cb:2f:8c:1e:be:80:13:
         c5:75:87:64:a7:91:f4:c6:28:d1:01:04:ec:64:39:f4:c3:68:
         25:91:e8:43:fd:da:2b:db:c4:cf:3d:c6:84:7e:e6:79:1a:14:
         dd:d7:35:07:79:67:21:ba:79:71:cb:1e:67:3e:39:d0:2c:59:
         55:7b:7a:96:44:6d:26:1c:a5:b7:d6:cf:47:6e:c4:96:4b:52:
         10:a4:b2:b0:93:5e:c9:a2:a3:87:6a:bc:f1:e3:78:e2:c4:95:
         d3:16:8d:4d:e8:0b:2c:e9:11:d9:11:69:ac:68:50:6c:6c:82:
         28:6a:63:38:04:00:8a:51:26:9b:0d:25:f5:4b:cf:9a:4d:f7:
         63:f4:a4:2e:f3:46:50:4a:0b:7e:41:2f:1c:98:4f:51:2b:59:
         fa:0e:2d:84:b6:98:8f:c4:36:0c:65:83:63:6d:73:71:f7:41:
         ee:f5:19:94:c4:b7:56:23:7e:ff:58:cc:25:69:3c:44:2c:f2:
         93:46:c5:3b:52:16:13:12:a8:46:6d:1b:58:86:5f:e6:bf:0b:
         a6:5d:a1:dd:a3:37:5a:32:d4:a8:91:83:52:cb:74:7a:b2:c0:
         f5:cc:f5:54:89:d4:20:f9:87:8e:28:92:85:7e:56:d0:96:ea:
         e0:f3:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:58 2024 by rpki-client on console-fra.rpki-client.org