Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa
File:                     f304bfed-6aa3-3d7a-a7df-324800baf33c.roa (raw, json)
Hash identifier:          vDctFYUMqFzEDKnPtM07rwjGoaVKcSccsSweRFHXqws=
Subject key identifier:   A7:0A:06:94:6A:63:02:39:1E:CC:8C:5F:67:D7:EF:9C:2C:0B:4C:D7
Certificate issuer:       /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial:       010D0C9F432858478AD623B9512D33212443F640
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa
Signing time:             Mon 14 Oct 2024 20:52:58 +0000
ROA not before:           Mon 14 Oct 2024 20:52:58 +0000
ROA not after:            Sun 12 Jan 2025 21:52:58 +0000
asID:                     198949
IP address blocks:        192.200.128.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:d6:23:b9:51:2d:33:21:24:43:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
        Validity
            Not Before: Oct 14 20:52:58 2024 GMT
            Not After : Jan 12 21:52:58 2025 GMT
        Subject: CN=34487ad8-ebdf-46de-9ed9-06ea2acee406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:e9:47:49:32:22:44:7e:44:4c:86:4c:c3:
                    3f:a2:05:98:66:04:16:d8:18:c9:1a:61:5c:04:fc:
                    94:bc:3c:cb:c6:7c:61:01:ae:24:9d:50:3a:9b:d5:
                    e3:6b:01:ca:77:8b:29:93:d4:d3:42:28:f7:e6:55:
                    94:f1:e5:28:6b:4d:03:05:27:3d:9f:95:b5:09:c8:
                    ff:32:53:73:34:99:91:bc:22:3a:76:35:ea:0d:3e:
                    6b:97:cf:65:5b:ec:e2:3e:60:f3:81:87:74:b0:49:
                    28:cd:ff:94:f9:37:1a:c6:35:b9:7d:09:ec:15:3f:
                    25:d0:66:91:31:1a:b6:0a:d1:ac:bb:ce:bf:98:52:
                    0a:3e:e2:5f:92:9f:63:fa:06:3f:49:2e:bd:f6:f6:
                    5f:89:17:73:9c:08:12:05:89:fc:77:be:66:fd:f8:
                    15:05:cf:db:bd:37:5b:c8:b3:8d:75:31:da:2d:fd:
                    11:de:04:0a:01:30:2e:03:77:5b:a8:d3:02:58:aa:
                    a6:56:8f:e8:24:20:24:5b:52:42:d0:8f:9e:7a:a8:
                    93:85:fa:a2:53:a2:e0:32:21:93:99:2a:f3:66:5e:
                    96:63:16:01:c7:34:86:66:98:5d:94:9b:e4:aa:a8:
                    a6:37:16:f9:29:01:62:ef:6d:60:4a:45:50:1b:85:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0A:06:94:6A:63:02:39:1E:CC:8C:5F:67:D7:EF:9C:2C:0B:4C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/f304bfed-6aa3-3d7a-a7df-324800baf33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl

            X509v3 Authority Key Identifier:
                keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:a1:0d:9e:57:1f:6c:76:5a:35:a6:e3:df:6e:ac:45:67:
         ed:a7:40:fd:4e:9c:ee:e9:dd:78:6b:bb:a9:7c:3c:92:72:27:
         ef:9d:8e:07:ce:cc:9f:d2:67:4d:27:7d:4f:27:0b:13:6b:78:
         5f:62:95:ed:36:c6:4b:22:da:23:e5:30:06:fe:6c:3c:34:2a:
         34:fb:a7:d7:ec:d5:75:0a:8e:b0:91:75:af:3e:c1:37:1b:52:
         06:e8:10:8e:a8:db:46:fd:ac:5e:ad:7a:3d:85:26:f1:74:4c:
         0e:c0:d8:b1:94:9c:46:c6:e4:25:7d:f6:5d:5d:8a:7b:23:ca:
         75:65:93:15:f4:bc:22:39:b2:76:1e:44:fb:32:ac:4c:42:15:
         a6:e1:02:ff:b4:49:54:61:9e:7c:6a:50:48:49:5f:01:7f:a8:
         ee:7e:98:1c:14:e1:cd:de:a1:69:e8:83:5c:d9:5e:38:c4:87:
         05:bf:52:d1:24:e4:9e:86:c9:b1:ab:4f:a6:ff:7c:eb:47:9e:
         8a:d7:b5:2e:ca:bc:90:34:cd:96:e5:ab:e9:db:2f:42:6b:20:
         e0:fc:7d:fd:89:97:12:ea:4e:90:5d:a1:17:f5:58:63:f4:2f:
         21:6b:bc:5f:95:47:0a:5d:ef:e2:7a:c8:20:8f:fd:74:52:bc:
         78:70:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:19 2024 by rpki-client on console-ams.rpki-client.org