Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa
File:                     d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json)
Hash identifier:          T6t0UsXr/AdwZt47FIKmxTA9SrYyovq1Lp1lfg29kxU=
Subject key identifier:   45:0A:84:27:16:09:42:F0:55:1B:7A:59:E4:06:B7:35:5F:CD:75:8A
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F432858471D0B19D5D49D0BB1DF4ABC00
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa
Signing time:             Thu 05 Sep 2024 13:00:41 +0000
ROA not before:           Thu 05 Sep 2024 13:00:41 +0000
ROA not after:            Wed 04 Dec 2024 14:00:41 +0000
asID:                     8075
IP address blocks:        199.21.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1d:0b:19:d5:d4:9d:0b:b1:df:4a:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Sep  5 13:00:41 2024 GMT
            Not After : Dec  4 14:00:41 2024 GMT
        Subject: CN=73efc0ba-bceb-45d3-9f29-1be2956d6536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:68:8a:7c:93:68:f5:87:80:18:f2:eb:e1:
                    40:ea:ca:9c:60:b7:bb:82:47:e4:8a:3c:b7:dc:d5:
                    17:0f:96:3b:02:d3:00:eb:f4:99:f7:ba:92:3e:2f:
                    62:3b:0c:b7:01:c4:7f:c8:7b:7b:81:cd:cd:6c:2b:
                    a0:3a:78:f9:e3:a0:53:28:ee:f5:40:f9:81:8c:c1:
                    05:d1:26:f3:34:b4:bf:73:34:30:00:16:a5:6f:e8:
                    ea:04:0e:39:f0:c2:50:8f:6a:e8:89:f7:d8:b5:6b:
                    d8:8f:8e:92:65:af:99:fa:ff:b8:76:e5:cc:01:51:
                    b4:f2:35:a9:54:06:d0:69:1e:0c:c2:48:0c:bb:74:
                    f8:8b:1e:c6:bf:2f:fb:85:62:54:60:64:23:18:f9:
                    41:e3:76:3e:77:28:4c:7c:09:eb:a2:2e:22:37:88:
                    e9:38:4f:e8:1b:88:9a:b9:7e:00:46:c9:ae:79:01:
                    63:b9:26:29:21:f8:75:43:97:8c:e1:9a:f2:0d:18:
                    08:d5:7e:00:62:0d:31:af:6d:1e:58:08:8e:88:30:
                    ce:44:fa:08:a2:f0:da:39:eb:88:4f:d9:e7:37:67:
                    bf:e6:7a:69:6e:aa:3e:98:1f:f1:e0:b1:76:96:53:
                    4b:a2:ee:9a:0a:e3:23:b4:9e:f8:3d:27:a4:21:fa:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0A:84:27:16:09:42:F0:55:1B:7A:59:E4:06:B7:35:5F:CD:75:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:2a:75:25:71:cd:09:f4:66:01:c2:a4:dd:80:15:44:43:
         13:cf:ff:a7:8e:8f:f7:97:7d:ee:6b:7f:f3:53:28:01:96:4c:
         ca:6a:da:88:21:72:7e:37:07:1b:20:74:bc:30:d5:73:7e:e5:
         5b:49:6e:e3:2f:0e:ae:ee:d8:22:2e:25:43:91:aa:a9:bf:a2:
         c6:f1:9d:26:f7:4c:15:ed:10:8e:83:65:63:d3:f1:2d:b6:fa:
         6d:3e:d8:08:78:48:86:10:39:f4:73:c2:90:38:eb:31:87:17:
         67:5a:8c:6e:6b:20:5b:4c:a9:c8:f6:b4:f8:08:73:f8:71:da:
         fb:ad:82:a1:13:8d:ee:28:a2:96:ab:98:a9:18:79:90:2b:b4:
         f0:0a:6a:d5:88:88:2b:db:c4:45:ef:37:5c:77:db:89:cc:a0:
         38:4a:21:db:63:e6:c8:a3:8d:51:b3:f4:ee:6e:e9:b8:13:84:
         5a:70:c7:92:8f:10:ee:f7:bc:04:65:62:ea:e5:d2:29:f0:e4:
         2b:77:d3:af:ea:2e:bf:1c:8a:df:fd:45:de:7b:33:6b:22:fc:
         27:cf:0f:7b:ad:30:04:69:ce:a6:6d:ce:fc:57:3f:06:28:fe:
         c8:6f:53:be:c0:f7:9a:a9:fd:a4:d0:0c:d1:e0:df:82:32:58:
         e1:d9:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:29:04 2024 by rpki-client on console-ams.rpki-client.org