Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
File:                     dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa (raw, json)
Hash identifier:          X+KQx+H5EtbU+XbM7Z0EtKXeD5ki825jH72wfY17yaU=
Subject key identifier:   02:28:CA:8E:E3:7F:BE:6A:D6:E4:CE:13:71:23:F6:FD:06:BD:54:65
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584762D64BA4A77FE6E6696E3280
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     17055
IP address blocks:        204.99.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:4b:a4:a7:7f:e6:e6:69:6e:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7929acb0-2a86-427e-9990-4982ad3da628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:65:71:30:66:9e:e7:84:7a:34:28:51:52:e6:
                    dd:79:0d:a0:70:a5:de:85:b5:2e:6d:ae:26:7d:f1:
                    cd:a7:40:79:db:2c:6e:74:67:70:dc:68:11:39:52:
                    6c:79:23:f0:1e:00:5d:68:3f:7b:59:80:4b:7d:4f:
                    a2:72:74:bd:cd:26:c4:dc:9a:20:4f:57:cb:88:ca:
                    f1:f0:02:98:94:84:f1:27:e1:5b:2e:3c:34:3f:c6:
                    a4:77:8f:dc:04:4b:3c:9e:3c:ec:c3:fc:37:70:4b:
                    e0:ec:e9:33:83:7c:57:02:f4:76:f0:f8:40:3e:40:
                    3b:3c:95:ed:fd:b4:71:c4:95:e4:31:67:38:af:7b:
                    e6:c0:18:a3:41:a5:b0:93:65:b2:d7:4d:fd:95:8e:
                    52:67:73:df:a2:3d:6b:00:c0:9b:bb:10:8a:31:c6:
                    4a:44:1b:b4:84:1f:a3:e4:89:95:44:f8:2b:67:f5:
                    ea:30:d0:92:56:70:4d:4e:41:c1:d1:a1:ec:aa:07:
                    6b:eb:61:cc:56:67:a3:e1:5b:48:79:21:ef:db:d1:
                    7b:c0:d1:e0:df:61:e5:42:cc:0b:ec:d1:ae:e8:a2:
                    f7:65:f6:22:ec:2c:1f:08:7b:05:04:ed:37:27:e2:
                    23:1b:d7:06:af:29:b6:21:fa:69:f3:ca:80:68:b0:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:CA:8E:E3:7F:BE:6A:D6:E4:CE:13:71:23:F6:FD:06:BD:54:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/dfb89d36-e831-3fce-aae0-cff3842a1ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.99.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:18:61:55:f7:97:c2:95:b3:77:ef:4b:1e:37:9a:a0:40:
         35:b8:c2:09:d3:95:d5:d7:26:7a:9e:4f:c2:44:39:eb:ef:d6:
         22:86:72:9b:0b:89:1e:26:f7:13:1f:84:b8:47:c1:7f:0a:b1:
         e5:23:d3:c3:c3:a6:13:aa:da:9b:6d:91:58:a8:dc:f0:6d:ce:
         e0:96:b3:f7:b1:a3:8f:56:26:fe:0d:e6:cf:49:d7:ba:06:b0:
         91:da:d0:e2:2c:21:4e:ff:a2:95:d9:32:3a:4c:27:52:bd:bb:
         e9:7a:e9:c8:92:d3:15:e7:5c:61:5e:cb:ba:5d:7a:95:99:5d:
         f0:0a:24:db:e2:cb:bb:32:15:48:25:f2:c6:79:c6:f8:5d:17:
         2c:bf:25:84:17:c8:47:b3:eb:64:bf:e2:38:9f:d3:f7:cc:49:
         e4:ee:81:43:ff:70:76:9d:43:3c:09:60:09:52:fd:8b:b0:8c:
         9c:db:eb:6b:2b:3c:df:56:b7:cc:21:8a:6e:d2:5f:64:2f:de:
         86:01:0d:3e:ac:48:ce:94:52:df:91:23:4b:96:22:cf:74:c9:
         a5:e4:6a:cc:6b:43:44:a7:ef:0d:a5:8d:be:43:b2:b4:0d:6e:
         5f:28:cb:94:42:e3:12:5c:0f:49:c1:15:93:92:49:12:ee:15:
         7e:ab:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:36 2024 by rpki-client on console-ams.rpki-client.org