Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa
File:                     2dc9f341-325f-366e-a73d-dc2863b557b8.roa (raw, json)
Hash identifier:          3C5K7KuQJ9BrnadUTKSSWiJG1Wq5nH/STOOWaEOvRng=
Subject key identifier:   77:D9:EE:3F:C7:C2:84:6B:AB:82:D9:20:0C:55:1F:E6:8A:EF:DD:55
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584734C884A405F97168A3BBD780
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     53459
IP address blocks:        199.254.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:84:a4:05:f9:71:68:a3:bb:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=171276f3-1e3e-4d71-a0be-6caca027b6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:06:d4:b1:56:4a:7a:77:4d:d4:a3:5b:44:
                    c4:9d:10:c0:86:3a:52:d9:9c:2a:4b:99:d4:c2:33:
                    a8:21:41:0b:ba:19:52:f7:a1:9c:35:44:12:4b:89:
                    de:95:26:ce:ec:22:c5:22:e3:3f:7d:42:a9:9c:89:
                    5a:69:68:d5:ee:53:e7:5a:90:30:67:5b:f6:56:60:
                    cd:24:e0:87:52:58:e0:e0:ef:cd:87:8e:b7:8d:ed:
                    db:3a:e9:4c:0c:3d:4a:c7:3a:05:eb:40:5f:94:ef:
                    c4:e6:ca:d3:97:fb:09:35:b3:fc:85:b2:29:a9:3e:
                    44:dc:1d:1c:1e:9f:6a:04:75:48:0a:6f:92:f6:04:
                    eb:52:83:fa:0d:c8:43:16:3d:50:e4:9e:e5:63:c5:
                    85:0f:2e:04:23:e7:30:db:d5:47:05:2a:fa:04:41:
                    fe:d1:97:43:6a:71:31:6e:82:79:0e:a9:e3:67:72:
                    20:80:f3:d8:74:69:c5:2d:e0:da:dc:22:1c:13:a0:
                    3f:17:31:66:63:fc:bb:04:0a:4a:b8:f4:4f:74:e4:
                    2b:ff:1d:17:b3:d7:30:40:75:2e:83:c0:a8:01:2c:
                    45:15:da:cf:37:f9:07:eb:42:25:f4:72:31:ff:3e:
                    bb:8f:2b:fa:86:6c:da:bb:74:6a:b4:4e:bb:7b:f5:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D9:EE:3F:C7:C2:84:6B:AB:82:D9:20:0C:55:1F:E6:8A:EF:DD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/2dc9f341-325f-366e-a73d-dc2863b557b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:2f:41:58:8a:ec:c4:34:3d:82:23:82:b8:1d:21:02:58:30:
         ea:70:bb:44:47:90:b3:93:7b:7f:00:eb:f5:f2:de:38:0c:07:
         3b:0f:56:73:22:ef:61:a7:41:b7:00:b6:6e:b5:a6:0c:58:58:
         9d:1f:9c:89:53:5b:95:7c:4d:6a:ac:c4:99:c4:01:95:53:19:
         52:3b:bc:1c:74:3c:99:9d:ca:8f:07:44:08:ea:de:92:4e:d1:
         db:cc:90:bd:91:e2:ec:14:07:2d:b3:ba:b1:f3:cb:c9:79:29:
         1b:c3:55:ff:be:73:c0:87:a6:93:ff:33:df:f6:5e:d5:7a:4f:
         04:99:f9:4b:2f:e1:09:67:43:2d:61:16:83:29:d8:29:79:da:
         67:a6:da:c8:bf:e2:4b:1a:3f:24:16:0a:0e:03:6c:1b:a0:7f:
         93:a2:d5:16:35:6f:5c:dd:33:fc:a7:27:fd:24:39:e1:71:fa:
         fc:85:24:d5:59:bd:26:f0:8b:7e:b5:b7:03:ce:39:ee:78:4e:
         80:24:58:e1:0c:79:9d:14:6d:2a:e0:5c:73:25:11:77:4f:0b:
         fd:40:91:96:d1:f6:60:3c:97:9f:11:3d:4e:d2:41:4e:e5:53:
         38:8d:02:fb:77:5e:20:bd:c7:c8:70:a3:9d:1f:16:82:32:32:
         68:5b:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:16 2024 by rpki-client on console-ams.rpki-client.org