Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
File:                     cbf5d661-caf7-3016-8cfc-b5a540e71195.roa (raw, json)
Hash identifier:          afz6pL2+acgZhY4dVKn33XIloF/CLT0Mvy/anKlNYGs=
Subject key identifier:   E7:E8:C4:AD:EE:8A:84:BD:E4:2B:6E:9E:71:03:90:C4:E1:7C:DD:8D
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847327C7202BA78C2E73DF9D980
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa
Signing time:             Fri 13 Sep 2024 05:21:07 +0000
ROA not before:           Fri 13 Sep 2024 05:21:07 +0000
ROA not after:            Thu 12 Dec 2024 06:21:07 +0000
asID:                     16839
IP address blocks:        199.91.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:32:7c:72:02:ba:78:c2:e7:3d:f9:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 13 05:21:07 2024 GMT
            Not After : Dec 12 06:21:07 2024 GMT
        Subject: CN=3bda0828-cae1-42da-a65c-8264c114636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:8e:a3:d2:d1:d0:19:2c:bf:30:8a:22:c2:
                    55:36:7b:86:c4:f6:4f:0f:fa:92:2c:a1:ce:b4:13:
                    de:c3:1f:f4:a5:02:f2:2c:d9:d2:0f:91:9d:74:1b:
                    81:af:41:f1:ce:f6:af:62:cb:67:9b:f9:0c:7a:ac:
                    34:11:76:5a:52:83:2d:f5:6e:6a:7b:25:46:4d:17:
                    a6:c5:a7:cc:c7:0d:40:14:27:6f:fd:de:47:68:dc:
                    a4:7f:58:50:06:3f:58:90:52:7d:6a:85:07:c9:ae:
                    d8:68:6c:a3:b6:21:bd:2a:fe:b2:b5:b0:2f:ec:71:
                    dc:b6:2b:c0:ce:75:9b:80:c4:40:3a:2a:d3:05:10:
                    6d:ef:a7:90:8c:d1:74:24:55:84:d5:79:4c:7d:84:
                    d2:0b:d7:3b:fd:bf:27:cc:fa:31:56:8d:93:06:ca:
                    e0:af:1c:a8:96:ce:46:8c:92:91:57:02:fd:18:b2:
                    c7:3f:ba:cb:fb:8f:6c:bb:aa:6d:68:53:b1:83:76:
                    bb:09:e7:01:b6:72:af:e7:b6:a8:bc:9d:1d:9e:7d:
                    92:a1:24:6b:2b:13:37:5f:8f:c0:33:15:9d:ef:cd:
                    b0:e8:af:0c:09:6f:27:d6:c3:28:04:e3:7f:33:91:
                    73:b6:3a:96:a4:45:1f:af:5e:e7:80:0d:10:b5:51:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E8:C4:AD:EE:8A:84:BD:E4:2B:6E:9E:71:03:90:C4:E1:7C:DD:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/cbf5d661-caf7-3016-8cfc-b5a540e71195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:77:ff:66:d2:40:d5:8d:ee:b5:b2:b3:31:ed:4f:38:53:
         bd:af:7a:08:e1:83:1d:88:c6:57:5b:1a:c5:10:f3:37:fc:92:
         d2:2a:64:7d:51:25:30:4f:cb:cf:4b:85:08:02:5d:e7:d7:5a:
         10:aa:24:26:14:78:0c:ac:e3:46:48:21:e4:3f:8b:4d:43:c6:
         fc:a1:bb:98:0c:b3:0d:f3:a1:d1:eb:2b:07:d6:d7:df:89:c7:
         92:1b:51:b6:ee:42:f0:56:36:37:fa:6a:37:af:f6:dd:b4:c0:
         f8:51:10:52:49:23:62:e1:f7:be:9b:d8:59:bc:03:98:a2:88:
         c0:54:a9:c3:4d:3c:ef:78:8b:e1:ef:00:ba:6b:7f:61:94:59:
         49:04:09:92:28:ad:ad:37:17:64:61:2e:6d:2b:9b:3f:51:87:
         b0:49:b5:bb:4b:5d:85:ad:58:61:9c:d8:d6:28:fd:e0:65:4d:
         98:23:17:80:10:11:7e:61:e7:90:7e:2d:7f:27:16:81:e6:22:
         57:47:77:b9:9b:83:06:17:03:3e:4d:6e:98:56:25:24:f6:66:
         10:2b:85:0d:e9:28:b8:43:42:bf:ea:f8:9b:e0:e8:ee:eb:06:
         2b:de:c8:09:13:55:a3:8d:bd:69:15:d1:0a:ac:e7:cd:e8:32:
         f4:5f:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org