Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa
File:                     1142bffd-0379-388f-ac81-778e265c4b3f.roa (raw, json)
Hash identifier:          R1zMV4y9tP2bcOtfMT7f4sM7fVspYpqyvdh4yppYYwQ=
Subject key identifier:   6D:C9:1B:C3:59:E2:B3:8C:C4:78:E8:7E:18:76:5E:37:62:27:84:EE
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285847E78F56E303DB759F1F442C40
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     398395
IP address blocks:        199.253.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:56:e3:03:db:75:9f:1f:44:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=0cba728b-5e9d-4c7d-a757-cee1c1adb509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:18:28:7a:aa:98:18:27:37:8c:e7:69:bb:
                    29:ca:d1:a7:6d:d1:78:3b:7b:65:3c:fd:84:6d:52:
                    21:0d:08:22:bf:6a:6d:da:e5:7a:c8:c7:e9:0b:9f:
                    76:c5:a9:ff:f8:cc:45:cc:24:19:27:b5:cf:24:18:
                    02:89:f6:4c:6c:d4:c3:fb:c3:20:83:f6:fc:4c:d5:
                    96:a4:70:22:08:5d:d2:f6:c2:37:50:17:be:17:1f:
                    3f:f3:e2:26:bd:6f:fc:2b:38:a6:fe:dc:ea:8d:1e:
                    18:97:48:0e:49:25:fc:27:3c:16:e6:3c:d0:c7:40:
                    4b:8d:ad:95:58:fc:b6:20:47:b0:86:07:a9:99:f0:
                    e0:50:d8:32:38:c7:e0:a0:10:19:68:1f:bb:88:cd:
                    c9:c8:c1:41:5c:44:8f:86:06:cf:ff:46:af:af:6e:
                    a9:39:86:29:41:3b:f4:5f:90:21:b7:e1:b5:7b:b8:
                    4b:ed:0f:14:78:08:89:91:88:39:f6:a2:bc:6a:02:
                    39:64:42:59:73:0f:2b:f2:a0:ba:16:04:aa:64:bb:
                    52:57:55:84:90:c3:76:c5:84:d0:e3:4c:8a:40:69:
                    2a:98:52:8c:e2:56:2a:29:ba:cd:db:f0:a9:d9:44:
                    23:2c:ad:bb:84:32:ac:c4:2b:41:a9:42:b7:52:55:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C9:1B:C3:59:E2:B3:8C:C4:78:E8:7E:18:76:5E:37:62:27:84:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/1142bffd-0379-388f-ac81-778e265c4b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:c8:43:90:1c:3f:50:91:3c:53:30:c4:a9:01:c3:77:ab:93:
         b4:ef:4d:42:9e:79:0e:95:7b:76:fb:24:d9:5b:de:67:f0:d0:
         e5:d4:8b:7d:85:ef:f1:6a:36:a5:4d:19:bc:7d:c1:ba:58:3b:
         b1:c6:89:57:1c:95:ab:1d:6c:5b:6d:b7:9d:a3:27:0b:08:fd:
         3d:d2:9a:9f:e5:5a:5e:fa:75:78:d9:45:e9:be:dc:f9:54:4d:
         3e:f6:ba:1e:5c:86:24:b1:c6:80:ba:1d:73:ef:eb:05:88:94:
         ed:c6:fe:d9:d2:b0:6b:28:80:31:d8:41:7d:49:71:86:7b:64:
         dc:3a:d0:f5:d6:b8:f1:5b:5c:0e:4a:fe:36:d6:29:fd:9c:35:
         8d:13:fb:c5:50:b1:f4:46:56:f4:3b:6c:d3:cc:d7:ab:5f:8f:
         15:78:f7:1d:ab:a3:85:6c:d7:df:50:70:07:bc:f8:d0:54:c5:
         2a:22:33:df:b4:82:87:87:9c:d3:2d:20:b4:8e:83:0b:fe:b8:
         8a:b9:4d:e7:4e:26:bf:9d:54:16:fa:5a:ba:7a:8d:77:ab:5a:
         18:c1:9b:41:55:f8:4c:26:ea:17:2c:e5:8b:35:ee:4f:5e:2a:
         53:b8:4d:ca:99:44:c5:83:a7:c1:e8:76:8f:0e:41:4f:69:98:
         ef:dc:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:47 2024 by rpki-client on console-fra.rpki-client.org