Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa
File:                     e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa (raw, json)
Hash identifier:          umUUQLigqK6ITiWYz28y/40aCnCF4hERTcIp7OMJLaQ=
Subject key identifier:   DA:40:11:24:9B:98:E9:9C:E1:4D:63:68:EB:F4:48:DA:BA:C3:96:F5
Certificate issuer:       /CN=99cd086f-b993-42d9-8f47-c65df74d693b
Certificate serial:       010D0C9F43285847B696C03358F803FE1EA7CB40
Authority key identifier: C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     34689
IP address blocks:        162.254.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:c0:33:58:f8:03:fe:1e:a7:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99cd086f-b993-42d9-8f47-c65df74d693b
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=6cedb321-315a-4858-a5a2-d54586bfb8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:65:50:f7:a3:50:8b:17:f1:17:48:5c:6e:
                    ea:2f:0a:0c:c5:bd:81:47:da:b9:1b:f0:bf:4b:17:
                    86:22:00:73:a5:ff:c1:a9:ea:fc:57:85:6c:ed:51:
                    42:96:f2:1f:e2:34:ae:56:f6:9c:bf:37:21:c7:6b:
                    a3:7f:c3:e2:da:c1:31:13:9c:68:1b:cc:59:57:40:
                    95:98:9d:46:a0:27:5b:1b:2d:57:04:df:0d:49:f4:
                    a5:cf:35:57:6e:9e:d4:c7:a9:a8:03:90:63:c1:e5:
                    8a:cd:2e:b1:2d:5f:54:61:ba:c3:28:56:67:04:3f:
                    c8:07:81:e2:a0:b0:b7:a3:e3:f6:4f:3a:c8:3e:1f:
                    49:d5:97:b4:47:bf:5d:16:a6:bf:77:1b:38:3f:73:
                    e1:6d:7d:09:8b:1c:a5:19:ec:88:da:e0:7b:d3:eb:
                    9c:6d:e7:68:3d:ae:7d:09:b7:e9:4d:7a:59:6f:b2:
                    97:16:7d:03:72:94:f9:8d:05:9f:d5:05:92:07:1d:
                    59:7f:5c:05:ca:16:e7:6a:c5:e4:e9:fc:5d:f1:1e:
                    4d:57:8d:3a:37:67:8e:bc:4c:cb:9a:ac:db:9b:05:
                    2b:15:ab:da:91:31:de:bb:b0:09:36:e5:94:94:16:
                    ca:58:d0:ce:b7:a1:3d:bf:75:f1:7c:de:e9:d2:bd:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:40:11:24:9B:98:E9:9C:E1:4D:63:68:EB:F4:48:DA:BA:C3:96:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/e8d39bbe-cf52-3e2d-91c0-2b3b40420843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b/99cd086f-b993-42d9-8f47-c65df74d693b.crl

            X509v3 Authority Key Identifier:
                keyid:C3:7C:6E:74:65:2F:44:92:72:76:3A:6D:8C:36:51:7C:69:F5:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/99cd086f-b993-42d9-8f47-c65df74d693b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:92:0e:d5:a6:1f:f8:4b:08:7b:53:4a:62:4b:8d:60:c7:ab:
         7b:af:3a:94:4f:39:1f:e4:21:d9:64:67:8d:f6:c4:eb:87:1a:
         87:93:ff:1c:1a:69:83:f4:5c:d2:a9:32:02:f3:b9:b4:64:89:
         9a:2e:57:63:77:39:ae:9c:f2:e8:57:43:3d:fe:0b:65:0b:36:
         fc:ec:12:18:2e:0b:ff:76:66:3f:dc:c2:74:c8:30:2b:fe:d9:
         b6:48:5c:46:c3:ec:50:dc:1c:57:8d:ad:13:2b:f8:4a:ee:8b:
         f4:08:d6:96:d3:24:3e:60:d2:c6:6a:b4:a6:74:93:dd:0c:2d:
         3d:c7:72:f8:fa:0a:ae:f2:d1:30:66:ce:33:a5:db:44:53:c2:
         fc:eb:e2:a9:60:b4:76:37:03:5b:98:92:4f:92:75:c6:44:9b:
         fa:42:df:f3:6a:21:fb:ec:c6:d2:e4:04:90:f7:9a:88:7f:87:
         ac:00:4e:5f:f0:47:bf:a2:0b:08:13:51:a3:32:2e:38:aa:a3:
         3c:e5:11:41:53:e6:4b:bb:22:9f:e4:32:61:13:56:7d:f2:14:
         d5:ba:b0:5e:59:dd:79:4d:8a:0c:96:bd:85:7d:28:cd:c2:2a:
         bb:b3:20:a3:44:1b:6d:df:0d:b1:63:9c:98:d1:37:24:11:05:
         8d:e4:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:21 2024 by rpki-client on console-fra.rpki-client.org