Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa
File:                     f1c559fd-c240-3620-885a-002951ebf9d3.roa (raw, json)
Hash identifier:          1UGUqbZ67otxH83aBRr0RkKQlUzIbO3LspcP8P/pLRQ=
Subject key identifier:   6A:42:EF:6C:AE:BE:F0:F8:67:D7:1F:45:17:82:67:CE:1A:64:50:9F
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F43285847AB6C087A4168B89EC5BBE120
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa
Signing time:             Sat 26 Oct 2024 13:00:42 +0000
ROA not before:           Sat 26 Oct 2024 13:00:42 +0000
ROA not after:            Fri 24 Jan 2025 14:00:42 +0000
asID:                     3754
IP address blocks:        199.109.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ab:6c:08:7a:41:68:b8:9e:c5:bb:e1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Oct 26 13:00:42 2024 GMT
            Not After : Jan 24 14:00:42 2025 GMT
        Subject: CN=f0c3f453-3520-4c83-9a45-b3318a282dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:90:37:89:ae:0e:03:b2:cf:a2:4a:9f:73:
                    52:3c:84:f9:c5:cb:38:21:91:7e:0a:4e:1f:27:bb:
                    cd:00:29:d7:68:1a:a2:f2:26:82:75:dd:d3:26:6f:
                    da:cb:a6:45:77:cd:de:c0:2b:52:7a:78:52:02:60:
                    33:1d:89:06:41:21:e9:d4:b6:cc:61:a1:21:9a:d0:
                    30:98:47:bc:f1:d3:aa:1e:39:2a:12:ef:6f:9d:ab:
                    a0:01:53:05:09:47:a0:3e:3f:de:cc:da:51:e3:ba:
                    e5:67:3b:ec:51:b3:cd:f7:ac:a8:0d:89:0f:bf:0f:
                    73:a1:32:14:71:6b:03:03:6f:88:71:ff:b4:37:d0:
                    ad:e6:45:1b:5f:a1:80:9d:e4:91:9e:62:31:65:7e:
                    4a:07:ec:d7:a7:f1:fe:48:56:5a:a6:a9:8b:ce:85:
                    09:d9:d8:66:91:fd:88:ed:31:33:5b:bb:0e:50:bc:
                    f3:2f:88:ec:46:02:f8:50:c5:11:16:21:43:98:37:
                    5d:54:94:25:6f:90:99:6d:e9:8c:f1:41:59:98:74:
                    f6:59:fc:cb:b1:4e:ef:99:a5:58:03:c6:b8:d1:fd:
                    36:f6:ba:da:f6:bb:e6:34:25:ea:68:24:f5:84:2c:
                    3b:90:2a:45:13:06:08:4a:bd:83:2c:2a:43:e3:8a:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:42:EF:6C:AE:BE:F0:F8:67:D7:1F:45:17:82:67:CE:1A:64:50:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/f1c559fd-c240-3620-885a-002951ebf9d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:b2:28:62:32:06:88:8a:2b:5a:d5:b6:2d:94:b3:60:f4:
         38:7f:ac:86:18:90:65:aa:e5:12:a6:2f:d7:8b:65:5f:56:f1:
         ab:5c:9a:3d:5a:61:88:58:26:cb:01:26:b7:c0:a5:1b:cd:a5:
         88:3a:a6:f6:18:51:ff:ef:71:d9:cc:eb:ee:f7:de:95:ed:8c:
         e4:ff:51:a4:82:17:3a:4e:9c:93:e5:57:67:60:fc:b7:d6:e0:
         6c:63:d8:14:3d:63:6b:74:cd:f6:1c:03:c0:e9:f1:60:1e:08:
         bc:f0:6b:20:91:25:f1:d0:f5:0a:e1:cc:93:7a:26:6b:5d:42:
         bb:a9:7b:77:5e:02:9c:38:9f:41:94:76:c5:50:3e:49:17:8a:
         c1:c2:99:b6:63:f8:20:b5:c1:3a:dd:48:a0:bc:cc:44:21:85:
         97:68:26:6d:0c:48:72:df:b7:3c:90:c8:97:a1:29:73:1e:45:
         05:ea:45:bd:70:e6:c8:82:00:5e:9b:ef:cf:a2:e9:ff:13:4b:
         bb:66:74:f6:6e:30:db:86:9c:7a:9f:04:f4:3c:b9:df:ba:85:
         bc:1c:dd:85:e3:c2:bb:bb:6f:43:69:46:dc:33:46:9f:c6:c0:
         95:91:58:35:21:9d:88:0c:9f:4d:e8:37:83:42:cc:f3:8d:13:
         e0:02:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:22:58 2024 by rpki-client on console-fra.rpki-client.org