Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa
File:                     19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa (raw, json)
Hash identifier:          ebe60GulUHKNIdyChdc2GzMdrfwhj5qgLUqNiodFU0k=
Subject key identifier:   CF:90:B5:98:B9:DF:F8:DC:45:89:F7:55:49:EA:9E:36:0A:79:99:F4
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F43285847D999F37569F239853ACB5700
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa
Signing time:             Tue 12 Nov 2024 02:00:27 +0000
ROA not before:           Tue 12 Nov 2024 02:00:27 +0000
ROA not after:            Mon 10 Feb 2025 02:00:27 +0000
asID:                     125
IP address blocks:        199.64.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d9:99:f3:75:69:f2:39:85:3a:cb:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: Nov 12 02:00:27 2024 GMT
            Not After : Feb 10 02:00:27 2025 GMT
        Subject: CN=af46696c-14dd-498c-b9b1-6a4fd51b1e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:9e:13:10:07:4d:a3:d4:72:cf:97:e6:bd:
                    2c:39:7a:0d:10:88:7e:0c:15:3b:c8:a3:33:41:22:
                    e5:44:f7:08:50:ac:ab:59:1b:9c:7b:89:59:ca:b9:
                    25:ab:da:a7:ef:95:35:af:d1:02:80:39:d8:79:e6:
                    f9:66:94:64:69:0e:a9:8b:c7:65:62:76:df:57:18:
                    b2:67:d3:89:92:c8:05:37:fb:0f:75:6e:4c:8e:3f:
                    fa:3e:9d:88:be:13:37:70:8f:2d:5b:2c:72:f2:e5:
                    d7:94:f8:cd:33:3a:dd:5b:c2:3b:5a:2e:7e:39:45:
                    ec:90:72:6b:bb:96:c5:dc:f5:c3:7d:0e:c7:8e:10:
                    f9:97:b4:31:5f:22:f2:30:f0:88:7c:51:dd:1a:e3:
                    4c:22:f3:69:13:cf:97:7c:9c:c0:f0:07:f2:3e:b2:
                    f9:76:05:6f:71:7d:08:2e:98:6f:64:83:03:33:01:
                    5b:aa:eb:b0:52:2f:75:80:85:11:7e:18:a4:21:43:
                    49:f2:0b:30:1a:1e:ce:22:0e:ae:2d:6a:37:bf:f1:
                    5a:9e:ad:af:35:ca:3b:aa:49:3a:f6:cb:96:d8:52:
                    b9:e9:df:07:10:3b:a9:3a:11:a5:47:8a:6c:38:63:
                    c4:a3:03:1d:3a:20:4e:30:40:51:ec:df:ff:dd:80:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:90:B5:98:B9:DF:F8:DC:45:89:F7:55:49:EA:9E:36:0A:79:99:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/19bcb3da-cb9f-31b8-b29e-b1c010e07c08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:4b:68:bb:0d:ef:5d:90:1c:c5:72:01:b5:5e:3a:ee:24:
         1c:63:82:d5:f3:6d:ea:52:1a:c9:a0:f0:13:57:2a:d8:c4:f9:
         62:80:5e:1a:14:49:b1:5c:14:71:19:da:4a:d0:4f:ac:0f:f8:
         47:08:3b:96:63:14:5f:59:8a:3d:50:63:6a:5d:61:20:39:fd:
         5b:32:46:f4:85:dc:eb:35:f6:c0:cc:28:c1:73:57:48:60:72:
         83:28:46:93:4e:c8:a3:48:0d:be:22:36:1d:64:69:32:1f:0b:
         3d:17:cd:f0:4b:2d:92:77:52:5b:20:95:41:66:bd:88:96:42:
         3b:e3:26:18:73:df:6d:10:60:38:61:a0:4a:8e:6a:ef:f8:47:
         fe:06:58:9a:c9:3a:f7:e9:a3:24:9e:7b:93:45:e0:77:9f:35:
         ce:b9:bd:1c:6e:a6:09:eb:1b:b3:1d:7c:43:75:bb:f7:e7:ca:
         84:9e:64:90:23:22:cd:86:65:90:17:83:30:05:28:4a:07:bc:
         79:13:1d:24:ee:d2:c7:21:4f:09:9c:63:a3:4b:83:cf:5e:ba:
         79:97:77:d5:36:df:04:1d:48:73:d0:44:7e:1a:4d:85:d1:f6:
         35:f4:9a:a5:90:3b:33:8e:4a:ac:e4:6c:48:41:60:9f:78:f8:
         c8:19:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:46:12 2024 by rpki-client on console-ams.rpki-client.org