Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa
File:                     541ed1ae-2bff-3005-bbed-7f7339841cf5.roa (raw, json)
Hash identifier:          llF1cJF1VqOl2tlWdqO9TLSXj2qeYFLGrvlGmq2osH4=
Subject key identifier:   88:9B:72:A1:5D:56:33:16:3E:FC:3D:08:AA:5E:8A:0F:09:63:18:8D
Certificate issuer:       /CN=a32aa006-ef22-4905-8c82-2651c19859b9
Certificate serial:       010D0C9F43285847A088C8A271A2D46BD5437000
Authority key identifier: 1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa
Signing time:             Tue 22 Oct 2024 15:24:53 +0000
ROA not before:           Tue 22 Oct 2024 15:24:53 +0000
ROA not after:            Mon 20 Jan 2025 16:24:53 +0000
asID:                     19350
IP address blocks:        199.212.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a0:88:c8:a2:71:a2:d4:6b:d5:43:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32aa006-ef22-4905-8c82-2651c19859b9
        Validity
            Not Before: Oct 22 15:24:53 2024 GMT
            Not After : Jan 20 16:24:53 2025 GMT
        Subject: CN=99716ae0-29d2-4af4-8a64-beb8f01b399c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fe:0e:25:e8:92:18:8d:51:6d:f5:7e:01:d3:
                    d3:dd:86:be:a0:3d:e7:62:6d:dc:4f:a8:f1:7e:59:
                    79:19:cb:ca:f1:b6:32:92:8d:75:8d:4a:4a:48:2d:
                    f3:78:40:c0:6d:9a:71:b2:e1:24:88:5b:2e:b7:8c:
                    29:06:5d:4d:55:47:a3:e1:ef:d5:84:76:b6:15:5e:
                    04:10:46:39:65:71:3c:fb:35:59:2d:7c:65:ff:12:
                    31:95:31:6f:29:bb:c3:2d:ed:8a:ca:45:82:f2:a6:
                    99:25:51:92:80:f2:4e:f5:8e:d4:af:41:09:05:b4:
                    66:65:d1:b5:25:9c:0e:bc:19:dc:0f:c4:2d:4a:f0:
                    92:f0:f5:d5:32:64:b9:23:5a:2a:e8:6e:0f:06:88:
                    9d:52:41:95:f8:58:67:38:96:12:da:0f:3d:7a:7b:
                    36:5f:76:62:c3:f2:a0:89:2e:4d:07:3e:cc:d6:50:
                    ab:b3:27:c9:ce:e2:69:f1:e0:ad:93:0a:35:97:eb:
                    85:d5:dd:d4:0f:ba:d0:0a:02:d8:7f:09:0b:9b:e4:
                    cb:8c:44:60:32:70:e9:e3:b4:96:3d:67:37:1a:ec:
                    a5:24:69:14:86:d4:49:4c:d3:b1:d1:81:6e:b5:8c:
                    43:7a:38:72:5a:32:5b:f1:69:a7:30:81:d8:cf:04:
                    86:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9B:72:A1:5D:56:33:16:3E:FC:3D:08:AA:5E:8A:0F:09:63:18:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/541ed1ae-2bff-3005-bbed-7f7339841cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9/a32aa006-ef22-4905-8c82-2651c19859b9.crl

            X509v3 Authority Key Identifier:
                keyid:1A:B1:46:D6:89:C8:93:13:18:72:E5:8C:D6:A1:A8:99:AC:BA:9E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a32aa006-ef22-4905-8c82-2651c19859b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:49:dd:6b:9d:75:74:7f:4b:ed:38:b1:2e:aa:dd:55:e8:
         ba:a6:a7:1d:7b:94:4c:12:19:75:03:a6:9d:af:50:f6:8c:d1:
         67:39:26:9d:8d:8e:41:4e:5e:74:1e:0f:c1:37:36:bb:53:b6:
         29:cf:3c:fe:9f:4e:b0:31:df:83:e7:9a:f5:c5:1b:fe:34:4d:
         d6:05:72:0e:24:c8:f1:e0:5e:76:3f:c0:b5:2c:d0:34:91:a9:
         bb:9b:3d:b1:15:4f:6b:b7:6f:c3:af:cd:d3:11:ae:23:ad:55:
         a9:7a:7f:0c:87:81:df:36:2c:6f:ab:ca:08:03:35:7d:48:e3:
         aa:b2:17:d0:7d:32:c5:60:8d:bd:7d:43:b7:8c:02:3d:24:54:
         71:df:b7:48:9d:0c:b5:ed:8b:48:7b:7f:c3:cb:fe:dc:51:bc:
         5a:3a:d7:42:84:22:c9:bc:a9:fb:3f:8d:d5:b5:25:6f:92:25:
         1d:2f:73:56:2c:fb:52:78:b6:6c:bb:cb:57:9c:eb:8f:d2:43:
         79:28:50:6e:8c:8c:18:20:0e:c7:96:f9:7c:87:0a:0f:5d:5d:
         89:74:9e:ea:8a:0b:6c:71:4e:70:0d:9e:b4:38:7c:e1:9d:33:
         88:54:7e:45:cd:6b:7e:0f:84:03:06:5a:2f:e2:3c:38:dd:68:
         60:03:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:24 2024 by rpki-client on console-ams.rpki-client.org