Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/d91ed351-1302-3b60-b9f3-06afdcfb8dec.roa
File:                     d91ed351-1302-3b60-b9f3-06afdcfb8dec.roa (raw, json)
Hash identifier:          IS5AoUrPGJR4abhVjRztiqSouP/wZYwzI8xJM3mmg20=
Subject key identifier:   FD:41:D5:02:96:F0:87:F3:89:94:F4:C0:01:9C:2F:78:64:D4:C4:91
Certificate issuer:       /CN=fd15faf8-0954-4a4f-92ca-a92808ef263c
Certificate serial:       010D0C9F432858479C112061E354FFBCF2E1A200
Authority key identifier: 79:3F:4B:AA:41:CC:3E:C2:04:A7:3A:7C:4A:09:62:37:ED:CE:43:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/d91ed351-1302-3b60-b9f3-06afdcfb8dec.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     15158
IP address blocks:        199.212.54.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:20:61:e3:54:ff:bc:f2:e1:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd15faf8-0954-4a4f-92ca-a92808ef263c
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=a3c78591-895f-464b-a429-659018cc7edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:80:50:82:2c:b2:8f:79:9f:9b:e8:0e:47:
                    c7:9c:2c:c5:16:9d:94:5f:5b:39:77:e0:b7:fe:99:
                    d9:20:d8:bc:ed:e9:59:99:e7:c1:a0:29:0d:cc:2a:
                    be:75:ac:9c:5e:ad:9a:2d:1f:6f:9a:3f:31:e1:34:
                    c2:84:18:2b:b0:41:0f:6d:fa:9d:e2:bd:77:19:c8:
                    b7:e3:91:46:45:10:56:c6:40:81:9a:45:7a:ec:0e:
                    63:ff:96:50:e6:97:95:9a:97:a5:60:25:41:4e:f1:
                    a2:8d:99:14:23:2e:ca:bc:32:36:ab:24:3d:4f:ab:
                    e4:15:23:61:be:8a:24:e1:c9:f0:d4:2e:37:2b:de:
                    79:f2:19:94:e6:4d:dc:58:1d:18:fe:18:b2:17:f4:
                    ae:09:7b:b3:ed:a6:63:94:93:d6:f4:ff:dd:91:65:
                    0c:fe:e9:ce:33:db:02:60:ee:ad:2a:93:53:18:11:
                    16:f9:19:d8:69:d7:8b:f1:29:cb:84:99:c2:54:ef:
                    f8:03:2d:35:5b:4d:3c:b9:1b:41:e7:fc:78:ad:14:
                    0d:37:80:b0:da:64:e4:9b:1f:c0:7b:6c:08:ad:05:
                    84:96:87:36:be:10:69:d0:db:55:e1:5d:ca:f3:65:
                    8e:bb:8a:4c:5d:45:51:68:18:e4:92:bb:32:3a:ae:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:D5:02:96:F0:87:F3:89:94:F4:C0:01:9C:2F:78:64:D4:C4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/d91ed351-1302-3b60-b9f3-06afdcfb8dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c/fd15faf8-0954-4a4f-92ca-a92808ef263c.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:4B:AA:41:CC:3E:C2:04:A7:3A:7C:4A:09:62:37:ED:CE:43:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fd15faf8-0954-4a4f-92ca-a92808ef263c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.212.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:25:13:45:5c:92:bf:70:b9:57:56:98:15:3b:18:18:4c:59:
         f8:ff:68:8a:42:06:62:df:9f:5d:fd:0e:9a:74:fd:7f:f1:50:
         c3:f1:b7:b1:6a:67:33:2b:88:ca:92:4f:8d:e8:e0:61:d7:af:
         97:dc:5d:61:58:61:9a:33:20:0b:e3:18:05:0c:b6:0d:f7:8d:
         93:d2:76:0e:c7:ea:a3:13:9f:cb:ca:0c:3c:1c:07:b3:04:bb:
         33:8b:c3:44:95:e5:12:b5:a5:12:d7:2d:b8:8a:56:9e:43:2a:
         a5:85:32:e4:fa:cb:44:7a:61:30:da:55:f9:50:e1:bd:10:82:
         75:a1:bc:b1:15:6b:83:fe:cf:e7:90:8d:14:92:03:57:2d:9c:
         79:bd:a1:6a:94:c4:27:59:c1:fd:8e:aa:7a:69:4f:22:f0:47:
         76:7f:d8:12:d5:d8:d1:fd:0e:dc:75:b6:e4:bb:be:ea:de:1f:
         6f:10:03:32:94:c1:e8:7b:99:98:44:6f:c7:c2:76:6f:6c:ee:
         37:c6:d6:65:84:ad:b2:bd:2a:3f:81:4f:1a:b4:ac:66:58:5f:
         3e:7a:22:2f:d2:90:9e:be:42:dc:4c:46:85:d1:66:8b:3b:64:
         f1:a1:f0:8c:91:a6:04:21:a5:06:88:d9:d0:b3:b1:6f:57:cd:
         df:1a:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:43 2024 by rpki-client on console-fra.rpki-client.org