Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa
File:                     69935949-26cb-3a1a-85e7-7b6948013483.roa (raw, json)
Hash identifier:          d8gVmxXTId6fC7V8UhSH3C8P2KGxAqrfdVvknmyDGQw=
Subject key identifier:   52:B6:AF:50:5D:A9:D5:9D:E2:CE:A3:3B:99:B6:26:9B:3E:66:C9:AE
Certificate issuer:       /CN=8c1e504b-f881-4524-a98f-2a623e4a476d
Certificate serial:       010D0C9F432858471EEC2289E781ACFD5ACADC40
Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa
Signing time:             Fri 06 Sep 2024 05:09:59 +0000
ROA not before:           Fri 06 Sep 2024 05:09:59 +0000
ROA not after:            Thu 05 Dec 2024 06:09:59 +0000
asID:                     396952
IP address blocks:        199.36.252.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1e:ec:22:89:e7:81:ac:fd:5a:ca:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d
        Validity
            Not Before: Sep  6 05:09:59 2024 GMT
            Not After : Dec  5 06:09:59 2024 GMT
        Subject: CN=80508bb4-4f8a-43d9-ac59-bf6a649dd077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:29:90:96:68:9f:c2:79:29:8d:b4:39:0a:f4:
                    57:91:1e:9b:17:1f:48:0b:fd:bd:09:f3:88:64:ce:
                    c6:51:6e:44:6e:8f:1b:d8:45:f4:31:79:8e:f7:36:
                    28:6a:65:43:ae:cc:5c:dc:50:a0:46:af:43:21:41:
                    f0:6b:2c:37:1d:b5:88:b9:6f:39:b5:95:61:99:a9:
                    1a:be:37:a9:49:fa:90:30:1c:c4:ec:d6:8b:5e:78:
                    aa:21:7f:79:d8:0c:21:bb:62:9f:03:3d:e7:26:5f:
                    90:11:76:04:a7:e1:82:fb:ee:41:9e:21:12:ba:00:
                    2e:a5:6f:b1:11:0d:cc:bd:50:dd:fe:70:fd:34:c4:
                    25:18:f7:19:fa:1e:6a:9d:32:86:05:0e:41:8b:a5:
                    f0:19:05:81:c8:3a:68:19:e3:eb:9c:6d:ce:07:64:
                    b2:13:3e:65:63:9e:20:6c:e8:56:15:fd:63:86:26:
                    9e:88:66:05:4e:25:33:cf:a0:89:3a:06:fb:ff:87:
                    73:b0:c7:c9:dc:49:34:e9:c7:2f:02:77:03:69:84:
                    4e:7f:d8:c7:03:70:4f:42:d0:2b:9c:07:0d:10:12:
                    6b:f5:36:b1:21:7a:2c:e3:fe:18:be:0b:79:aa:65:
                    fc:5b:9a:b3:7a:c8:d0:19:d9:eb:d8:28:8f:9f:07:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B6:AF:50:5D:A9:D5:9D:E2:CE:A3:3B:99:B6:26:9B:3E:66:C9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/69935949-26cb-3a1a-85e7-7b6948013483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:03:66:7c:c6:f8:53:d0:13:da:54:3f:d1:f2:af:f2:2c:
         ed:0d:d0:20:f9:b5:69:e2:8e:e0:e3:bd:be:11:c1:15:24:6e:
         a0:26:dd:48:c3:bf:c4:64:e1:1a:e9:41:e5:46:de:4f:0a:c9:
         8b:af:5a:18:c1:48:c3:44:5a:74:7c:38:a6:3c:ec:0f:9f:cc:
         d6:a3:3c:3b:51:30:14:70:78:71:a3:44:b2:96:01:e1:6f:19:
         00:4d:8a:21:46:6e:7a:3d:a2:64:ca:bf:f5:96:d9:b2:c1:23:
         1d:38:30:e0:80:cd:83:eb:85:a5:99:d9:d8:db:ca:c7:6d:2e:
         7a:8c:66:4d:8b:fe:af:39:cd:3f:2a:f3:e3:36:05:bc:8f:ed:
         14:c9:3f:65:9e:a1:39:68:da:76:e6:fc:a1:96:bb:20:2d:48:
         e7:9f:a6:20:4e:9a:29:3d:14:53:14:d0:c7:f3:0c:63:27:83:
         ac:80:98:87:52:c6:e1:83:bc:f2:31:8e:58:6c:0f:95:56:9f:
         a4:99:ba:04:e5:0c:6f:30:89:34:5f:1c:9b:ea:50:72:68:23:
         01:70:42:3a:de:43:85:f4:91:8b:18:70:dc:64:5b:d4:87:8d:
         07:89:0e:79:71:48:bd:30:f1:08:35:e5:e5:ca:c9:1b:2c:c4:
         7b:34:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:28 2024 by rpki-client on console-ams.rpki-client.org