Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa
File:                     31ea5e48-31b1-303a-9005-188379a2a655.roa (raw, json)
Hash identifier:          kYEF3jauLVT7IFqJ0ZcIHqrLwNRkbCF8IMgXLZVCluA=
Subject key identifier:   6D:A6:2F:1D:95:CD:CE:5F:56:3D:4A:05:AA:2A:04:7B:61:F9:59:08
Certificate issuer:       /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
Certificate serial:       010D0C9F4328584776A82E394E0060522899DC80
Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa
Signing time:             Mon 07 Oct 2024 15:24:12 +0000
ROA not before:           Mon 07 Oct 2024 15:24:12 +0000
ROA not after:            Sun 05 Jan 2025 16:24:12 +0000
asID:                     46757
IP address blocks:        199.241.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:a8:2e:39:4e:00:60:52:28:99:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893
        Validity
            Not Before: Oct  7 15:24:12 2024 GMT
            Not After : Jan  5 16:24:12 2025 GMT
        Subject: CN=ea90ea50-1138-474f-8811-ee4336c9527c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:55:7f:ea:89:c5:6a:99:36:f1:2f:9c:0e:
                    ea:70:35:e7:61:06:34:c6:cd:f1:98:f1:2a:f8:ca:
                    35:dc:30:16:83:69:10:55:09:b6:8d:c9:03:87:86:
                    3e:56:df:11:c5:87:f9:1d:92:fb:64:57:08:49:49:
                    7e:2e:de:71:a9:42:da:33:1e:cf:71:27:c1:85:50:
                    7f:a1:ac:2d:a7:4b:21:1c:df:35:47:37:9c:03:41:
                    17:9a:b3:6e:da:82:f5:29:6b:92:4c:ef:6b:ea:83:
                    96:08:7b:e6:3b:0c:8d:02:6e:98:fe:d8:5e:df:4d:
                    bf:0d:ec:6a:7f:06:90:80:42:88:4d:ba:3a:ad:6a:
                    43:50:da:6e:be:32:7e:21:0c:d9:fd:8d:42:54:ff:
                    20:ae:ed:48:20:83:5a:b0:3a:91:4a:83:61:c6:58:
                    f7:8d:4a:be:53:ea:c3:93:b9:b1:b3:ce:96:fc:52:
                    88:20:c3:c7:fc:42:9c:7f:eb:bf:e3:5a:95:44:30:
                    b9:1c:61:23:ea:ed:58:c6:58:d7:af:a9:fc:15:b2:
                    fd:7f:a3:c4:d1:f1:1c:1c:48:c6:d5:72:be:de:f9:
                    91:37:ed:cc:ed:e9:88:da:81:f3:b0:ad:da:38:48:
                    62:ce:d2:f2:cc:02:81:ef:ce:25:9d:af:33:28:c8:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:2F:1D:95:CD:CE:5F:56:3D:4A:05:AA:2A:04:7B:61:F9:59:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/31ea5e48-31b1-303a-9005-188379a2a655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl

            X509v3 Authority Key Identifier:
                keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9f:b5:26:fc:dd:09:15:b5:2c:3f:c7:24:48:46:5d:60:a7:
         35:26:59:99:68:19:0b:b0:d4:7a:0a:a0:45:d9:8d:20:9c:ea:
         fa:b9:91:19:7d:03:87:d5:42:c0:a3:f0:ee:ec:1b:a0:a0:09:
         89:4b:c0:fe:81:0f:f0:dd:76:40:f6:f2:36:8e:fd:c2:a6:4d:
         5f:be:cf:f6:06:0e:b8:ee:30:c3:dc:c4:79:cb:5c:de:e9:3b:
         c2:27:70:c4:55:28:f2:57:20:47:d0:4e:8f:aa:83:4e:07:54:
         f5:60:23:94:82:36:a8:89:d1:4f:28:f9:4c:eb:e8:d9:aa:f0:
         de:f0:5b:bd:27:16:18:f9:07:76:61:8f:0d:d0:c4:f4:c5:11:
         6d:34:57:4e:f9:4d:a0:1b:0b:18:39:bf:71:84:53:c3:f0:22:
         ec:dd:fd:86:ef:6e:f5:77:b2:3b:48:51:fd:e9:a6:16:e7:b7:
         c4:37:47:31:93:fc:85:50:78:e5:90:db:78:3a:b1:a0:60:db:
         da:0c:11:8c:d7:b5:69:8f:77:b5:1f:1c:13:5c:cb:f2:99:bb:
         f6:a9:f1:a6:3a:2b:f0:6a:ab:ee:60:83:95:f0:dd:b0:9c:66:
         51:f3:94:02:5a:87:b2:a6:44:57:da:25:ee:8e:b9:c6:80:57:
         a6:cd:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:25 2024 by rpki-client on console-ams.rpki-client.org