Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
File:                     f10cc6f2-a28f-3c55-96fd-806192f823f0.roa (raw, json)
Hash identifier:          0qo02P4X/y98cREBbFlUTtl0yTLlz87Q4sv4nion6v0=
Subject key identifier:   84:87:9B:F3:74:DB:25:4E:FE:4C:D1:B6:C9:C1:E7:17:D3:2D:6F:9E
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285847600BA1C361935CFAC6F5FB40
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     16839
IP address blocks:        199.91.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:a1:c3:61:93:5c:fa:c6:f5:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=ec3f8fc9-3321-41f7-b32f-2b443eca5d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:d2:0b:fc:39:a1:29:df:9a:1c:3f:46:8b:
                    10:4e:57:5b:bf:ff:5a:fe:fd:d4:23:e7:49:12:e6:
                    00:1b:0e:7c:0c:32:60:6a:0c:c5:c5:ca:bd:ef:02:
                    22:c4:0e:4f:42:3a:87:93:59:f8:11:e9:8c:bd:5d:
                    ac:82:5e:9f:00:89:5c:fc:27:d9:a6:d3:43:67:4c:
                    48:dc:2d:68:98:b7:8f:c4:09:54:ad:8c:c1:39:30:
                    6d:c2:33:63:e4:a0:0c:f7:ba:71:2e:fa:f2:d4:81:
                    b5:fc:88:f7:32:7b:67:75:f7:86:b2:e1:20:48:f0:
                    47:d2:8d:4b:18:71:99:e3:16:bf:87:a3:94:f8:fa:
                    be:c0:5c:eb:68:d1:03:16:1e:7c:50:8f:ad:63:94:
                    31:53:24:51:bd:66:07:ce:19:fe:78:0e:ea:84:5f:
                    82:b4:7a:19:92:6c:87:a2:ad:87:61:91:8e:85:e1:
                    e1:a8:39:3e:fe:30:c0:56:b0:8e:e2:98:31:05:6b:
                    a3:e3:aa:8f:ec:f7:9b:e4:f0:6e:23:82:30:a3:79:
                    4b:c0:57:82:41:24:11:73:a0:02:43:0e:20:ea:9f:
                    19:de:74:56:73:3c:c6:b2:c9:46:89:9a:f0:cf:d4:
                    46:d2:97:47:21:5f:c1:0b:75:9a:36:11:c5:75:3e:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:9B:F3:74:DB:25:4E:FE:4C:D1:B6:C9:C1:E7:17:D3:2D:6F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/f10cc6f2-a28f-3c55-96fd-806192f823f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b2:77:db:ec:a9:0e:63:62:58:d6:ef:61:26:7e:1d:4f:8f:
         51:55:10:45:1f:74:4b:42:7d:06:12:9d:98:91:bf:dd:c3:85:
         db:ab:e8:36:a0:b4:54:b4:e3:f7:f5:4e:29:cd:df:0a:2d:90:
         03:ff:35:24:db:64:56:67:55:ff:12:bc:55:f0:be:36:58:60:
         6f:fd:ea:ae:68:59:db:56:06:15:12:70:b8:93:4b:63:0f:dd:
         67:84:68:2b:d5:c0:7d:70:12:07:e5:fd:07:f3:c0:32:54:e9:
         f8:57:bd:48:02:b6:b3:f2:d7:08:06:a3:3b:fc:96:87:56:52:
         df:b5:ef:73:55:81:d2:0a:ed:0f:67:5e:9a:f7:8b:e5:f5:9e:
         65:17:4a:56:d9:c5:8c:5d:98:41:fd:f5:b5:b8:5d:a2:28:98:
         3f:aa:f3:0c:bb:03:f4:80:22:b4:6e:95:eb:5d:08:1b:65:3c:
         c9:93:90:a3:22:53:2e:31:e7:de:4f:d9:86:74:4d:0f:03:50:
         06:a9:16:78:c7:a3:d8:88:24:1a:e8:c8:37:ba:d2:4e:c3:22:
         96:f0:d5:e2:8d:f9:7b:ca:ea:2f:69:59:fc:33:e0:7e:23:3b:
         33:ad:8f:a6:7a:67:5a:81:6e:0d:2c:52:08:ff:52:55:cc:21:
         e8:6c:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:07 2024 by rpki-client on console-fra.rpki-client.org