Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
File:                     ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json)
Hash identifier:          QTU3uWkkXnXQ+EY9/xBOGu4oJHmArTmrU0cK5rqPw80=
Subject key identifier:   7A:2A:F9:15:5A:E9:7E:46:D9:67:1E:D7:BA:B3:E7:83:EE:EE:18:50
Certificate issuer:       /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial:       010D0C9F43285847362B5B9D9019867F51C3F880
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     7029
IP address blocks:        81.199.64.0/20 maxlen: 24
                          121.91.208.0/20 maxlen: 24
                          121.91.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5b:9d:90:19:86:7f:51:c3:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=6351b8cd-d713-4acd-a041-e318940ab977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:92:57:82:33:4f:56:95:04:a6:61:47:fa:
                    b1:e6:98:99:d3:60:ab:0e:67:55:af:f9:79:61:aa:
                    67:f4:de:2d:74:d7:fc:6b:82:20:7d:1c:e8:3b:5c:
                    1b:ed:43:49:20:6a:72:85:3c:b8:d4:99:f4:06:4f:
                    bc:72:04:0c:6c:be:2a:6a:0f:cb:03:2d:75:d2:4d:
                    d9:16:76:11:22:eb:89:e1:3e:84:0c:80:7f:6b:2e:
                    cb:57:fb:05:83:f6:9e:6b:83:a7:63:90:9f:2b:93:
                    4e:b4:8a:f9:fb:aa:04:26:da:94:9e:55:84:1b:c8:
                    23:4d:2d:27:27:63:8a:36:fe:f8:85:55:87:6a:83:
                    05:69:c3:76:c9:e7:6a:c7:9f:f8:16:28:5e:b7:87:
                    fc:91:df:b6:6a:cf:c7:62:60:96:3d:fc:3f:e0:ec:
                    20:01:70:90:88:09:66:82:bf:d7:bd:49:eb:29:65:
                    ba:b7:e2:ac:24:7c:2b:c3:c5:37:ca:db:31:c1:ec:
                    ee:e2:af:d6:fb:60:1e:21:59:2c:45:65:ea:14:dc:
                    ad:c7:aa:5e:6b:e8:8b:7e:16:be:64:5d:d7:66:70:
                    e2:42:92:ac:9c:45:46:66:40:68:75:cc:92:52:ad:
                    2a:14:71:c5:b5:40:cc:7c:3f:85:49:44:48:67:49:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:F9:15:5A:E9:7E:46:D9:67:1E:D7:BA:B3:E7:83:EE:EE:18:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl

            X509v3 Authority Key Identifier:
                keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.64.0/20
                  121.91.208.0-121.91.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b2:73:26:d8:40:a6:a6:fd:bb:6b:30:75:23:7d:85:82:3a:
         f9:33:82:91:e7:fc:60:e2:f3:a9:98:65:bf:8c:9b:c8:7c:6f:
         3b:4a:84:b1:d1:77:b8:e3:a3:04:ab:f4:09:18:1b:5e:36:64:
         0d:a3:0f:c3:63:4f:4e:13:cd:9c:bd:eb:cf:dd:38:6c:fc:42:
         7b:2b:17:76:e8:68:17:81:b1:43:1c:2c:59:d0:5e:0f:86:01:
         cc:71:b4:4f:b6:7c:dc:fb:ac:67:77:97:11:7b:9a:0e:15:03:
         d0:05:58:36:5d:dc:35:91:55:93:3d:2c:51:6a:27:19:7d:4d:
         80:90:43:1f:bb:17:3a:34:0c:4f:68:86:c3:05:c0:75:b8:94:
         78:b6:fb:18:0a:3d:e5:2c:0a:bf:52:90:07:d2:13:b5:82:ae:
         55:cd:17:96:12:95:85:5b:b5:8d:1e:08:32:83:fd:d3:8d:a5:
         79:ab:5a:be:81:ac:0a:b7:96:aa:c3:e7:fa:6a:a4:b5:22:f8:
         6d:7a:85:8d:70:4a:3d:39:e6:fb:7c:ea:86:5e:e0:8d:cd:b7:
         df:f4:a8:9e:6b:9e:69:f6:3c:a5:73:28:c7:c5:3c:b4:94:69:
         7d:ae:f8:7d:ee:3c:0c:07:74:c8:49:02:25:c2:b1:0c:d7:b4:
         eb:87:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:33:46 2024 by rpki-client on console-fra.rpki-client.org