Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
File:                     0d363d93-28e0-3322-8517-a1ebec3877d8.roa (raw, json)
Hash identifier:          wz3A9zIvvrdlVfcPDIHgtFHhzEahzgy0v8Qzs3MDL08=
Subject key identifier:   A3:D9:B3:62:22:11:AF:B4:47:71:27:9C:9B:69:6F:25:38:A2:CA:2E
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F4328584742BB58DA52B0B6FF4DDA8260
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     209
IP address blocks:        199.191.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:58:da:52:b0:b6:ff:4d:da:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=8ecead76-4fa2-4967-b2b7-2d3f9cf93476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:b7:c6:eb:b1:71:fe:68:64:24:51:22:ad:
                    21:67:18:b0:55:ce:ac:e4:df:21:86:4e:6e:5d:e3:
                    0e:41:8e:eb:b7:81:89:6d:ef:8c:29:5d:2e:fa:8e:
                    54:8e:77:7b:34:46:27:31:a2:22:36:32:6e:8d:0f:
                    1a:cd:32:01:6c:ee:fd:f5:0a:ff:ae:46:07:0a:c1:
                    63:17:57:6b:93:4f:74:9c:b7:55:14:10:5f:d1:e0:
                    95:6f:d9:d5:ba:e9:cf:63:5f:ed:49:bd:c2:b6:82:
                    31:0a:ae:70:2b:ad:d6:eb:82:ad:37:99:95:19:52:
                    b4:4a:0b:d2:67:a1:40:bf:2f:91:4b:d9:e1:15:cb:
                    09:6c:1b:4b:4e:b3:45:a7:64:38:4f:f1:22:d1:78:
                    76:4f:9d:0e:76:a5:e0:54:7e:c0:e9:6e:c4:27:7f:
                    6a:29:86:f3:a5:08:8e:b7:ff:43:1e:79:e7:85:6e:
                    99:fc:c9:63:49:db:be:7c:27:da:df:1a:06:5f:63:
                    33:90:c1:47:ae:9d:04:2f:55:d3:21:55:40:a2:42:
                    db:32:9f:a7:ee:36:4a:12:98:2c:5e:46:45:52:c9:
                    e3:f6:c4:0c:b4:cc:5e:d3:a0:b2:67:4b:ea:1a:a0:
                    5b:58:8d:ce:d7:8a:dd:5c:20:43:59:4d:ec:af:c7:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:B3:62:22:11:AF:B4:47:71:27:9C:9B:69:6F:25:38:A2:CA:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/0d363d93-28e0-3322-8517-a1ebec3877d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.191.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:5e:ae:48:ab:57:97:73:fc:85:80:a4:fa:98:97:56:2e:
         b8:76:6d:ec:ca:c6:91:d3:92:be:09:e5:dd:80:1d:ac:4b:73:
         fd:6c:e9:d7:ae:8e:89:80:eb:7c:60:89:c4:8d:4d:b7:dd:ff:
         74:2b:0f:f6:eb:c5:1d:51:be:42:74:fb:b4:b1:b7:2a:78:e6:
         90:c6:5a:38:da:7d:51:c5:90:46:58:1e:b4:f7:7b:13:28:db:
         f1:ea:ca:1b:26:83:52:7a:bb:e1:9c:f5:e3:80:82:9c:f0:04:
         e3:11:11:ba:eb:ce:81:7a:f8:0c:12:90:17:50:a9:f2:72:24:
         d6:11:49:f9:ab:ea:93:a1:9e:97:05:11:21:42:79:5c:4e:13:
         47:2e:1c:0a:d2:1a:d3:57:7c:cc:cd:08:4a:b0:c0:ca:d7:64:
         9a:88:d9:ad:0e:a5:20:e7:a3:09:8a:e1:4a:d3:e7:d8:76:64:
         9f:ea:74:63:6f:72:59:dd:ec:1b:fc:c4:b1:bc:87:54:eb:1a:
         37:a0:1d:28:57:c3:59:d2:d9:e8:1b:d9:7f:c1:ac:bf:c3:c4:
         f0:2d:5d:07:87:e1:5a:61:ac:14:a9:8c:e0:ec:34:0c:aa:5e:
         4a:0b:dd:d6:d4:ee:4b:9a:5b:bb:07:c0:d0:be:b5:16:9c:95:
         1a:8e:7f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:00 2024 by rpki-client on console-ams.rpki-client.org