Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab96ebe3-78a6-3c5c-ad89-421f1af23f3b.roa
File:                     ab96ebe3-78a6-3c5c-ad89-421f1af23f3b.roa (raw, json)
Hash identifier:          6ycjOKSpXABMkkrEbqgHxMsOp+wPnKZnVE2DaEJtxpU=
Subject key identifier:   62:A3:9F:72:B2:29:75:26:62:75:F4:89:70:79:12:B9:3D:E2:05:E1
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F432858471FD5F60C414E56AB12909B40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab96ebe3-78a6-3c5c-ad89-421f1af23f3b.roa
Signing time:             Fri 06 Sep 2024 13:00:41 +0000
ROA not before:           Fri 06 Sep 2024 13:00:41 +0000
ROA not after:            Thu 05 Dec 2024 14:00:41 +0000
asID:                     17359
IP address blocks:        199.200.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1f:d5:f6:0c:41:4e:56:ab:12:90:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep  6 13:00:41 2024 GMT
            Not After : Dec  5 14:00:41 2024 GMT
        Subject: CN=7898a56f-df0e-44ba-96e9-8752063f4cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:ed:ff:fa:9e:8d:cb:e5:13:a8:bf:d0:8e:
                    ee:8c:1a:56:f0:c9:08:3b:b2:79:cc:6b:b7:c4:b7:
                    ab:c5:8f:3c:6a:82:7d:44:85:9c:2f:b2:2a:f1:48:
                    6a:c1:a0:e6:5b:05:74:ab:db:56:db:cb:35:41:f2:
                    2a:f2:1a:bf:a9:f3:5e:38:f7:bf:12:7e:a8:de:ff:
                    3a:9b:f8:a4:8e:48:25:7b:0b:dd:9a:0e:71:56:b1:
                    aa:3c:16:da:c6:89:ed:84:56:ff:94:d8:8f:c8:f1:
                    73:71:44:68:e1:c6:d1:85:1b:45:bd:61:22:6e:b5:
                    bb:f3:fb:70:90:b8:e6:72:78:fb:82:77:94:3d:15:
                    80:06:6c:b8:b1:14:c6:60:b8:4b:1f:86:03:8c:dd:
                    cf:a7:ca:1e:b1:f8:2e:13:fc:76:c5:13:a9:a4:e4:
                    4d:c9:2c:39:71:46:fd:03:02:87:6d:92:47:aa:4f:
                    f5:01:46:33:e1:cd:35:19:a6:61:5a:25:a4:82:4c:
                    c9:7d:e9:a0:71:98:1c:28:73:1f:f9:19:8f:a3:55:
                    fa:d4:c6:32:3f:5c:f4:5d:03:9d:40:99:f6:ba:92:
                    0d:ee:5f:0b:7d:eb:74:9b:a6:99:39:a0:cb:dc:d9:
                    6e:1d:d7:d6:ab:67:f4:83:da:80:36:e1:eb:ab:c6:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:9F:72:B2:29:75:26:62:75:F4:89:70:79:12:B9:3D:E2:05:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ab96ebe3-78a6-3c5c-ad89-421f1af23f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:10:e5:ef:2a:46:1b:83:e3:5a:ca:85:55:08:5c:a9:60:
         d7:55:9c:b5:5c:9e:9e:4f:a6:e3:c1:b7:31:17:3e:7c:39:52:
         35:1c:04:e7:64:5b:ec:d9:23:ee:0e:7c:76:6c:37:20:87:f3:
         22:3c:dd:78:1b:5d:91:ce:d3:11:9f:ba:70:2d:3d:d6:90:80:
         ad:41:bc:00:02:88:ef:c7:ce:88:62:c1:9b:b7:0d:7d:72:ed:
         db:60:a5:f6:71:12:50:92:b9:68:74:ff:be:06:b5:70:c7:68:
         04:d0:50:e0:08:36:60:6e:07:28:38:ec:65:74:07:44:37:2c:
         5e:4a:20:56:22:ea:31:07:b2:34:05:8b:87:65:fc:cf:47:0d:
         a2:f6:a2:8f:df:6c:5f:22:c0:25:b2:33:ab:86:e0:6c:98:4c:
         17:06:d8:e6:28:12:eb:de:5d:95:c7:c5:f3:57:aa:70:b6:34:
         33:81:e6:06:50:c5:a4:45:e8:91:79:9b:f6:cc:ec:e8:6f:1c:
         c1:85:90:de:b2:46:96:06:c9:df:9b:24:7f:09:d9:a2:75:70:
         91:04:be:5c:95:12:dd:84:0e:2e:e0:4f:1a:ee:df:2e:2c:f2:
         12:0c:23:d8:6d:8c:69:e5:de:2d:fe:98:a3:47:2e:70:d6:a5:
         69:d1:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:26 2024 by rpki-client on console-fra.rpki-client.org