Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa
File:                     aefef297-d69c-3e8f-a44d-67a05d5e4438.roa (raw, json)
Hash identifier:          XRtDwJjnwSjBm87bZ0hbPDOwb+btyYDj8hpY84iqtdk=
Subject key identifier:   61:08:9C:A7:01:87:D2:F7:0B:19:E0:0B:7A:07:63:43:D8:68:B3:92
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C3273B0DC2647BD55AC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     397630
IP address blocks:        199.101.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c3:27:3b:0d:c2:64:7b:d5:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=403337ad-3b91-47fb-8ed0-430f374fc724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7c:16:cd:48:44:cd:21:7d:73:94:96:d0:8e:
                    dc:93:08:bd:44:c3:cc:44:94:50:df:b8:01:06:35:
                    8e:9c:04:63:16:25:63:4e:3e:5d:b7:0e:40:1c:ff:
                    f4:fb:02:9e:03:59:da:e1:d6:a7:df:c0:70:26:76:
                    de:a2:6a:1b:7a:a5:30:d8:2e:a8:6b:9b:9d:58:a3:
                    06:c5:44:d9:bc:74:aa:66:43:4b:00:96:2a:a9:68:
                    d0:8a:6c:a5:66:f7:c2:26:99:5d:f7:62:17:2d:f8:
                    61:a2:09:ec:5e:08:b6:74:c9:47:57:74:63:ae:0a:
                    3f:4b:f9:bf:d0:e8:ff:d4:90:28:6c:3f:ad:eb:f3:
                    f1:a0:74:bf:87:6a:3b:2e:f8:c3:bf:8d:85:f1:95:
                    cb:3e:07:42:45:d9:e5:7b:6e:3f:63:d8:cf:a0:28:
                    ba:2a:e0:86:79:a3:b5:51:1d:15:3c:5b:19:08:14:
                    0b:3c:36:f7:17:03:2a:de:32:77:13:b5:30:ac:87:
                    be:56:59:55:f5:14:a6:27:c7:3b:d3:fe:30:1c:6c:
                    aa:14:35:44:64:6a:61:8b:50:f7:e5:09:7f:4b:19:
                    a9:2e:e7:14:8f:bf:f0:8e:7a:78:76:d0:e4:7a:c2:
                    a5:6c:4e:61:ce:72:7f:d0:01:ac:5d:b2:b5:5c:0e:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:08:9C:A7:01:87:D2:F7:0B:19:E0:0B:7A:07:63:43:D8:68:B3:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aefef297-d69c-3e8f-a44d-67a05d5e4438.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:cd:82:d6:e4:c8:da:04:97:7f:2f:bc:21:ec:19:cd:8d:
         b5:cf:35:6e:5e:a9:90:0c:d3:fc:1b:67:6b:f5:70:ae:32:12:
         55:5b:02:22:3b:9b:43:8a:fa:a0:78:6d:41:2f:90:58:e2:10:
         3a:22:8b:62:6a:d2:41:65:14:cd:70:d8:0a:59:57:6b:11:3c:
         6c:40:10:ed:90:a2:a7:07:bd:0a:0e:95:75:c6:9f:d9:82:c8:
         3f:b6:e3:a7:74:3a:9f:9e:28:d4:ee:72:c1:f8:73:21:06:ec:
         6f:94:5f:f7:77:b8:82:1e:1d:4d:64:a1:46:27:91:80:11:00:
         77:12:5f:f3:34:1f:59:f3:8a:80:41:de:79:16:6d:db:45:66:
         15:f3:d1:32:0e:f2:e6:94:c0:7a:6c:74:86:80:21:dc:e2:4e:
         bc:bf:3a:1a:e1:62:fd:82:2b:4a:92:77:5c:d6:ae:67:05:43:
         e5:f3:aa:40:2c:01:65:4e:13:87:70:73:81:00:47:3c:7e:86:
         0e:fa:e6:19:92:4f:e1:d3:26:0b:36:b5:20:6b:b8:04:1e:13:
         21:1e:8f:d7:61:9b:45:79:b9:c6:df:55:73:c8:3e:16:46:2b:
         59:ff:3f:b1:39:34:84:f8:62:74:07:10:98:c3:1a:ec:07:f9:
         d7:f4:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:46 2024 by rpki-client on console-fra.rpki-client.org