Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
File:                     a24dc796-a354-3534-8807-c7f4b3475218.roa (raw, json)
Hash identifier:          eUXEEYRSqwkQsotgAWJlKm1tO3NFJeg/junVXkIG/WI=
Subject key identifier:   14:40:07:E5:8D:AD:57:CC:95:27:72:F7:D6:3A:FC:95:42:87:1A:0E
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584761716DBC5608664951E36A80
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa
Signing time:             Mon 30 Sep 2024 01:00:31 +0000
ROA not before:           Mon 30 Sep 2024 01:00:31 +0000
ROA not after:            Sun 29 Dec 2024 02:00:31 +0000
asID:                     11052
IP address blocks:        199.249.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:61:71:6d:bc:56:08:66:49:51:e3:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Sep 30 01:00:31 2024 GMT
            Not After : Dec 29 02:00:31 2024 GMT
        Subject: CN=66f25af2-59f8-4988-b373-51806ba118da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:4b:c4:28:3d:00:fc:b8:03:13:d5:b7:bc:
                    a1:0c:57:47:59:71:aa:5d:f1:88:f6:06:d6:f6:ae:
                    de:70:80:f9:79:7b:c2:b5:3d:6f:33:52:2e:03:4a:
                    fb:46:8a:83:38:d2:7c:b8:81:b7:71:2e:a9:7e:48:
                    ff:92:11:03:72:5b:a0:21:07:78:37:76:56:80:f1:
                    54:14:b9:06:ae:03:4c:ca:51:ab:f5:3a:e1:9d:ba:
                    ef:dc:6a:c9:95:bd:81:07:08:51:12:76:75:cf:ce:
                    dc:15:5f:4e:33:7e:23:f1:e5:29:02:38:55:c8:f8:
                    aa:47:8c:c5:85:93:cb:11:ab:8a:a3:52:fb:5f:00:
                    a2:c2:23:09:d2:9c:8c:c5:90:54:35:ad:ac:fa:86:
                    d7:2c:4d:ec:11:35:3d:9b:e0:a6:11:97:39:9e:e6:
                    27:f5:36:72:ff:88:6c:ad:b6:03:6f:08:fd:32:dc:
                    e9:87:e7:d6:64:8a:ea:08:51:c4:25:27:b9:9c:e2:
                    96:44:3a:1e:a5:a4:6e:8f:fb:1b:b1:89:92:d5:d0:
                    82:59:7a:b2:6f:ce:64:59:f5:f8:4c:e0:c2:d2:87:
                    26:61:65:25:f2:03:1a:27:76:e8:77:48:42:ad:eb:
                    92:6d:0c:2d:3d:72:72:41:b8:d8:f9:43:27:de:64:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:07:E5:8D:AD:57:CC:95:27:72:F7:D6:3A:FC:95:42:87:1A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/a24dc796-a354-3534-8807-c7f4b3475218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:98:96:3c:9a:d5:53:e8:6e:d5:52:0e:79:c0:17:8f:d4:
         35:4d:35:85:06:61:ac:54:14:48:cf:01:23:70:ad:67:93:65:
         a6:74:8a:e9:97:1b:04:a9:4c:71:30:f9:a6:a7:7d:6e:91:23:
         6b:28:ef:a2:a5:22:fa:73:1f:c1:2b:16:19:07:40:29:fa:c0:
         76:05:d2:d6:0c:83:9b:3b:c2:20:45:5e:61:0b:b0:5e:83:1c:
         74:67:7b:5c:84:88:91:d7:9a:52:37:63:a4:d2:29:25:6f:a6:
         8b:11:50:10:7e:74:24:c6:71:43:38:e4:ca:84:ac:9e:07:ae:
         bf:be:90:1d:c9:b3:a2:a7:55:4b:33:7c:a3:bd:dc:b5:44:47:
         57:e8:d3:46:6c:81:17:b1:4a:f8:eb:33:71:13:d3:22:65:29:
         6c:d9:14:d5:c5:77:8c:df:ea:b6:c7:13:62:5e:a4:6f:91:8d:
         0e:f5:8d:b4:10:1f:8b:9e:6c:bc:b5:6c:e6:12:24:48:33:80:
         71:bd:fb:32:83:ab:10:81:ba:95:02:e2:5a:53:8d:23:03:36:
         cc:45:1b:9c:e7:63:d1:26:b2:81:2b:5f:40:9a:f2:48:5a:bb:
         8a:fe:5a:6e:f5:4a:2d:3a:d4:36:ac:9e:58:ce:5e:18:c5:b8:
         1f:35:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:23 2024 by rpki-client on console-ams.rpki-client.org