Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa
File:                     2bea448a-3656-329d-a5eb-f84a494089cb.roa (raw, json)
Hash identifier:          oiNiV/1J6tARI6yxW1XgahT/p4bL/jdn8vA9EQGgrck=
Subject key identifier:   10:43:3D:88:1C:AF:45:28:C2:D9:B3:F2:BD:A3:D4:1A:F3:AE:AD:A3
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847643B7734E1438F18F1B99480
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     7018
IP address blocks:        199.250.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:77:34:e1:43:8f:18:f1:b9:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=655114e6-e58e-4ed8-aa4e-8fc58aa96876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:f4:37:7f:78:35:f4:3e:ab:90:a1:02:b0:
                    5a:4a:62:92:43:14:65:dd:d6:32:13:fe:25:19:b5:
                    ca:91:b9:c6:9c:e2:93:f3:ae:85:f0:74:26:79:43:
                    9b:c6:c4:65:44:18:46:8c:36:eb:70:fa:70:c4:14:
                    92:32:74:b3:4b:05:46:2c:fd:33:4a:78:60:fc:f2:
                    05:82:44:70:d7:48:0d:82:4d:92:68:45:3d:47:49:
                    6b:73:91:29:ad:57:ee:8a:72:3c:66:f1:1b:5b:4a:
                    ff:a5:e0:e2:11:2b:4e:1c:c9:41:b2:d8:e7:c5:65:
                    28:3c:87:4d:8c:d0:75:f5:da:18:0f:e1:44:d5:fc:
                    84:d8:cb:8f:4c:cb:07:d9:bc:62:a2:ec:cf:cd:73:
                    dc:34:1a:5a:9c:53:f2:4d:cb:33:86:2e:7f:af:b8:
                    39:c8:3d:7f:e8:e6:01:c5:de:16:09:f7:0e:ac:63:
                    af:8d:36:8d:28:22:d5:f3:c5:95:df:42:74:13:e8:
                    7f:95:87:a2:74:19:01:9f:b7:84:10:b9:c6:d0:3b:
                    92:6e:7b:1b:98:b2:2b:6a:b3:c3:68:4c:40:af:ae:
                    e0:ac:9b:0c:c9:9b:d5:7e:84:b4:e9:82:51:64:00:
                    1d:cf:ec:8a:58:51:53:86:27:2d:72:fc:4b:7e:e8:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:3D:88:1C:AF:45:28:C2:D9:B3:F2:BD:A3:D4:1A:F3:AE:AD:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2bea448a-3656-329d-a5eb-f84a494089cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:f7:3e:b3:9b:ef:33:63:1e:59:1c:14:d5:e5:16:ca:60:
         59:78:d9:3f:a1:24:44:25:80:b1:f0:03:5f:51:c1:03:be:7b:
         f2:8b:00:d9:37:4d:6a:ca:94:a6:7b:73:f6:e3:f5:1f:80:db:
         96:e7:72:2e:29:9b:aa:d6:96:89:a2:13:45:ae:2d:df:ea:ce:
         aa:f0:10:aa:dd:72:b9:50:c8:72:e0:a2:d9:c6:26:01:cb:b7:
         8f:29:06:e0:50:a4:90:ea:22:5b:0e:fb:76:1e:90:8a:24:8e:
         52:d8:24:94:0a:02:38:03:ae:9d:49:8e:29:3c:b7:0b:c6:4a:
         5f:dd:43:4c:f1:63:ed:02:b4:66:5c:c7:6c:f6:cc:3f:ca:90:
         eb:c6:44:85:ad:ee:dd:53:43:65:78:c6:7e:d0:77:b4:15:c3:
         9a:a6:ec:ea:a0:4b:3d:22:fe:06:ef:f8:dd:a1:95:52:18:53:
         f3:df:44:0e:bd:64:53:9d:2d:ca:0d:b7:e7:f6:58:5e:2d:dc:
         c8:f2:07:70:33:d3:37:e0:37:60:2d:c5:05:c5:e7:8a:b2:c8:
         95:1d:f9:bd:f4:48:90:64:fe:2f:64:58:77:b3:94:95:3f:c0:
         6e:46:c5:55:0b:13:ad:ed:07:92:da:a0:64:d3:cb:3b:70:81:
         56:bd:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:01 2024 by rpki-client on console-ams.rpki-client.org