Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
File:                     24d84c66-fcc3-3ede-b576-e49b2474e984.roa (raw, json)
Hash identifier:          KtI9NB1A2krYTktvPKjiU5npgJekiUu0R1YI0siDyQc=
Subject key identifier:   D1:98:CA:A6:B8:0E:C2:F5:B8:9C:73:5A:F0:2A:EE:38:7C:C1:74:3D
Certificate issuer:       /CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
Certificate serial:       010D0C9F4328584780264FAE6A1FA29BBB60AF00
Authority key identifier: 72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     22237
IP address blocks:        199.83.248.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:4f:ae:6a:1f:a2:9b:bb:60:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0e0e8026-5f66-40a3-a9f8-95a10234d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:a7:e0:10:b2:ae:d4:ae:8c:fd:e8:79:23:
                    41:6b:e5:77:c6:fa:e3:8b:fe:55:9b:c5:ef:dc:dc:
                    96:4f:67:63:c9:bd:1b:c1:91:4d:4d:85:44:28:dc:
                    46:b5:77:8f:58:10:58:6e:18:5d:c7:f3:01:c8:93:
                    05:a4:86:97:76:c9:e6:7e:0d:7b:f7:e9:4b:f0:86:
                    f3:3a:72:45:ac:f6:cb:ba:36:d2:bc:58:ec:d6:55:
                    33:47:8c:d7:f5:ad:7a:7f:50:a0:7f:c6:99:14:86:
                    82:a4:a8:33:b4:95:06:b5:fb:90:0b:f7:63:ef:b0:
                    d1:e6:04:1d:d9:b7:18:ad:3c:eb:87:b0:27:ef:93:
                    85:2c:8d:c4:87:13:a7:cf:3b:5b:52:db:b4:65:f4:
                    a1:25:76:29:f9:0c:ac:cc:f6:d6:3e:dd:ee:3b:17:
                    36:f5:c0:1b:e2:af:5c:dc:fd:df:3e:bf:17:55:46:
                    01:a1:96:a4:46:86:80:f5:a6:54:35:bc:44:52:3d:
                    84:f1:d8:7b:20:ad:a5:3b:c5:c7:86:0a:ba:8e:69:
                    70:23:e1:be:28:ba:95:03:50:d7:c2:f1:a9:de:2d:
                    f4:2b:8d:7d:37:76:2a:e7:60:8d:02:cd:41:1d:c3:
                    a8:96:da:ee:a6:0d:7c:54:71:dd:0e:8c:45:e8:9d:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:98:CA:A6:B8:0E:C2:F5:B8:9C:73:5A:F0:2A:EE:38:7C:C1:74:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl

            X509v3 Authority Key Identifier:
                keyid:72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:6f:57:3d:6a:ec:e5:d7:8d:da:f9:a8:78:56:e5:b6:53:
         b5:b9:31:2d:5b:36:e8:41:3d:71:fb:79:71:a7:ad:e9:d8:39:
         78:a7:58:11:29:fe:6e:46:0c:d7:64:54:a3:ab:c3:9f:e8:5c:
         f7:f8:d6:6c:9f:8a:0f:b1:fa:1b:f8:b5:f7:18:30:66:a3:cf:
         1e:01:84:4e:22:f8:40:93:57:91:0e:99:ea:08:63:51:7f:ef:
         56:aa:27:41:d0:31:d8:f3:b8:3b:9e:96:09:fc:9f:6f:1b:38:
         2b:92:1d:69:b9:76:be:3f:02:7e:f8:26:de:62:a1:59:62:bf:
         e7:fc:75:93:e4:f9:99:d9:2c:82:5a:fa:40:91:0d:d1:3c:ca:
         47:7d:9f:cc:11:27:7b:bb:77:53:ae:dc:72:f8:96:4d:cb:b2:
         00:b8:d6:ab:ee:5f:17:87:4b:29:ac:f3:f5:d2:ed:1c:79:ea:
         85:eb:9a:0d:c2:73:f1:82:f7:7d:d3:97:90:e0:2d:c1:da:47:
         f0:f1:50:7b:43:cd:78:49:26:91:9a:3a:b3:3e:e0:2f:fb:51:
         6c:89:88:9a:bc:87:86:f7:d7:e2:4e:e3:95:ac:bf:87:46:70:
         34:04:74:4f:fe:3f:a7:c0:f7:67:31:6b:39:50:4a:3a:b4:a0:
         89:a1:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:51:51 2024 by rpki-client on console-ams.rpki-client.org