Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
File:                     bb5807ed-8deb-3938-bc64-5cc7806d002d.roa (raw, json)
Hash identifier:          Upyl3gbOTcM03+YWgYYVj9SkID4hs5stgYH5uyN8Uv8=
Subject key identifier:   87:D0:3D:43:82:A7:2B:AA:82:9C:B2:3A:5B:13:21:8E:33:A0:8E:8D
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F43285846812E7D8BA4616A402A889EC0
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa
Signing time:             Thu 11 Jul 2024 17:05:58 +0000
ROA not before:           Thu 11 Jul 2024 17:05:58 +0000
ROA not after:            Wed 09 Oct 2024 17:05:58 +0000
asID:                     3356
IP address blocks:        199.249.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:81:2e:7d:8b:a4:61:6a:40:2a:88:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jul 11 17:05:58 2024 GMT
            Not After : Oct  9 17:05:58 2024 GMT
        Subject: CN=791833b0-ffc8-4c54-9d86-b7b04f970d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:2b:b7:93:d5:6f:27:fd:4c:23:15:3e:62:
                    7b:e1:87:93:1e:b2:0c:9a:da:3d:3e:db:48:16:80:
                    99:c1:5b:8d:f5:61:12:37:81:ce:41:ee:0f:7c:ee:
                    20:93:71:c7:63:55:c0:cf:2f:aa:f1:05:b5:01:cb:
                    d4:05:30:60:41:d0:df:9e:21:c3:b1:2a:34:12:ba:
                    b8:ea:dc:92:b2:f9:51:db:8c:14:5e:71:2a:46:7c:
                    34:69:e3:34:4a:4f:58:17:23:d8:8d:31:8a:71:3a:
                    ca:cc:3a:d5:8b:4e:cb:55:a9:81:a7:ec:95:f2:9b:
                    8b:ab:5b:dd:fc:de:91:b2:6e:07:51:2e:f6:e9:02:
                    3d:2a:76:97:07:7d:5b:d6:04:10:d4:44:28:61:85:
                    0c:e7:80:91:34:1d:0f:49:43:f3:83:67:1f:f3:ba:
                    38:c9:43:b5:a9:19:2c:28:7b:b2:bd:b3:7f:79:25:
                    fa:f3:ab:21:dc:27:88:c8:f4:ee:83:5e:5a:e8:01:
                    7e:c9:5a:6a:e6:cf:09:8c:51:80:33:cd:28:e4:97:
                    ce:f6:ed:08:8c:aa:5e:cd:f7:66:e5:2f:c1:95:78:
                    38:cf:a1:66:d8:e7:2d:71:3c:55:8f:db:2d:c1:e3:
                    c0:2b:b4:de:44:c7:15:8c:57:6a:b5:ce:6a:4c:69:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D0:3D:43:82:A7:2B:AA:82:9C:B2:3A:5B:13:21:8E:33:A0:8E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/bb5807ed-8deb-3938-bc64-5cc7806d002d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:07:ba:81:f1:21:ae:0b:69:cb:b0:43:4e:6a:be:a7:57:6b:
         d3:c9:de:f7:ac:71:60:0b:09:16:d8:41:01:b0:0f:6a:6a:a2:
         f2:79:01:6c:81:a3:12:d1:74:e5:36:27:cd:ef:ca:8e:40:3a:
         ad:54:14:e7:89:68:a6:56:b0:fd:f8:56:cc:bf:92:ca:81:9b:
         ce:6f:44:31:19:cd:0a:cc:4a:22:29:e6:15:4b:b8:ac:a8:8f:
         c6:da:e5:86:ef:8d:ec:90:61:d9:8b:ab:22:b0:e2:67:13:b1:
         27:8e:0c:0c:62:1e:aa:a4:07:93:76:d5:7c:b3:8c:e1:9a:fe:
         d5:4f:d4:46:1c:90:43:92:51:88:43:56:71:47:59:58:db:dc:
         2b:40:a9:2a:71:c7:0a:bb:d3:b2:00:be:05:99:e5:54:88:fc:
         bb:5c:06:83:e6:a6:52:96:b5:a5:d1:2d:15:0e:91:5f:a4:9c:
         b9:4f:26:e7:8a:bc:6d:b2:05:a0:50:d2:20:c3:33:ae:c6:8f:
         e6:fe:b9:98:d6:63:18:43:5b:5b:9e:f4:e4:67:e4:ad:0e:66:
         72:cf:80:d7:37:12:f1:2b:25:a2:b8:d9:86:8a:d5:43:af:c0:
         21:ec:1e:40:5e:37:9b:8e:8e:cd:02:93:c2:18:cf:6e:73:ec:
         b6:fa:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:03:44 2024 by rpki-client on console-ams.rpki-client.org