Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
File:                     e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa (raw, json)
Hash identifier:          4N6Gkwt0mJdB+iot8p5vfNpOoH91It59Dqe82wEzv+o=
Subject key identifier:   6D:A0:62:A1:0E:93:39:91:E9:F9:BD:C5:01:4C:05:7C:73:21:AE:F0
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F43285847E78F62B0B379976A6845DE40
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     22885
IP address blocks:        199.0.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:62:b0:b3:79:97:6a:68:45:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=9451a514-ca16-4045-a7eb-119218c2ac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:23:e1:6e:59:38:47:a9:8f:ac:16:88:f3:
                    66:e1:b4:af:c2:31:95:76:ab:8a:5e:ba:04:73:ba:
                    48:c6:46:24:9e:f7:5e:e2:ac:94:a6:50:10:7f:81:
                    d8:28:99:c4:76:2f:d3:e5:72:31:4d:f1:e4:00:f6:
                    ee:e9:6c:74:42:f8:4d:fa:de:8f:ba:dd:dd:a3:9c:
                    fc:61:40:82:78:11:48:42:c2:88:8c:42:08:cf:5f:
                    7f:75:17:d3:4c:64:c6:71:66:05:19:49:12:e7:c3:
                    6e:a5:65:07:99:b7:b0:25:6d:2b:97:45:6b:85:7f:
                    e9:5e:ea:23:04:78:1c:70:75:15:dc:35:4e:7e:5d:
                    9f:62:49:1b:66:b3:b2:3b:c3:db:9d:f2:77:da:74:
                    3f:0f:7e:a5:b0:fc:3e:08:0f:e7:c9:f2:19:68:47:
                    a9:46:06:c0:de:fa:f0:e8:5e:b9:73:91:4e:5f:87:
                    36:a2:ad:88:58:14:d6:5d:1b:2d:37:4a:f2:c4:32:
                    4c:8e:9f:53:d1:cc:e6:86:10:19:ff:c1:02:b3:98:
                    b5:3b:3e:43:4a:f1:fc:81:16:30:8f:b3:3a:2b:b9:
                    9e:56:7a:98:ec:de:e5:06:ac:51:5f:38:cf:dd:55:
                    fd:07:7e:e2:89:a3:b2:03:df:b5:6c:59:26:95:25:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A0:62:A1:0E:93:39:91:E9:F9:BD:C5:01:4C:05:7C:73:21:AE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e1e79ce3-3afa-3dd4-857c-50c7ccee5572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.0.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:86:08:da:a4:82:71:0c:28:b0:71:d3:69:7b:da:0c:ce:93:
         77:c0:b6:df:f5:9f:39:1b:dc:1c:e1:7f:6d:65:ec:05:8d:bf:
         8d:f4:92:ee:a1:7c:9d:df:5a:da:ef:3d:bf:d4:f6:36:d3:b6:
         42:71:51:d2:94:56:40:91:72:c5:41:bb:29:9f:64:81:54:f0:
         29:2b:1b:0f:b2:3b:9a:d0:0a:ac:f5:1f:66:c8:a7:4f:4c:dc:
         0c:3b:df:c7:06:7c:6a:cd:90:43:78:75:09:c9:06:d0:ed:f5:
         fb:45:35:d6:6a:09:c7:2f:82:ea:90:cb:16:54:8e:a4:af:50:
         c1:47:cb:6e:90:cb:39:7a:e1:a7:6a:5a:a1:e4:44:2f:95:e7:
         8b:7c:48:9f:f0:18:63:a0:ba:2b:1d:14:61:81:09:b1:4a:8a:
         e3:40:f7:1e:36:9d:0e:05:af:55:b7:75:e2:79:d7:31:2f:6b:
         cd:4b:5e:3e:03:db:db:5b:58:1f:d0:e8:43:4e:7e:9a:f5:a7:
         58:8f:57:09:3a:44:11:71:2c:35:e1:b5:cd:2a:7d:ea:40:77:
         ff:40:97:1a:a0:79:18:3d:cc:d0:9c:c2:3b:1d:5b:da:7e:9f:
         6d:e3:d1:31:aa:10:15:20:94:e4:77:3b:b3:6d:28:9e:2b:9d:
         fc:c1:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:03:25 2024 by rpki-client on console-ams.rpki-client.org