Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa
File:                     a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa (raw, json)
Hash identifier:          bVeZ4oMeZ+AcF9eW0qY8LOTWZxvoMELLR3EYNPRE2yU=
Subject key identifier:   84:9E:6E:EF:5E:7F:34:D8:B6:AF:D9:87:FB:0A:6D:B9:EB:26:3B:A7
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F43285847792BB4EC3C4887F1BBAD2F00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     30133
IP address blocks:        199.6.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b4:ec:3c:48:87:f1:bb:ad:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=84fe79c7-5f95-4e5e-b44b-d3854deaf3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:2b:91:90:a7:0f:47:24:d1:f8:05:3c:de:
                    7b:b9:23:7c:62:77:90:e6:87:cd:f7:46:d5:0f:d5:
                    a2:40:fd:8e:c7:9d:4f:cb:53:f6:1c:9c:e2:14:09:
                    53:ba:2e:bb:e6:4e:67:ee:62:e6:42:33:c9:00:e7:
                    3e:d6:94:d7:86:31:e9:53:fd:e1:fb:c7:6d:dc:62:
                    68:64:01:25:71:d2:74:2d:88:e2:28:79:a4:68:66:
                    68:a6:24:fa:42:a8:5e:e6:35:6d:0b:c0:05:2d:a9:
                    6a:f8:4e:86:c8:22:4c:2c:2d:3e:16:84:27:6b:93:
                    f4:ac:2e:05:47:57:b6:2f:ce:8a:94:49:8b:9d:0a:
                    55:c7:fb:9f:16:0a:9a:90:db:9c:47:5c:65:f8:a9:
                    e9:82:8f:cf:d0:b9:b8:69:d4:50:e9:9a:51:63:0b:
                    80:42:ae:6b:28:dc:71:62:67:52:f3:46:0d:ea:26:
                    40:ba:6c:75:55:70:e6:d5:27:64:a1:9a:61:d2:d5:
                    df:59:76:92:57:d0:60:5b:57:33:9e:4a:51:9f:58:
                    b3:1d:1a:77:b9:8a:fe:be:51:57:35:ce:07:95:2f:
                    79:98:8c:4e:4b:12:b7:82:42:02:d6:8a:5b:ca:98:
                    a9:2c:e2:94:38:63:62:dd:2f:7b:50:5a:d0:81:b2:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:6E:EF:5E:7F:34:D8:B6:AF:D9:87:FB:0A:6D:B9:EB:26:3B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3f:42:1f:04:f4:57:6d:ee:55:e4:28:f2:38:28:ca:6c:1f:
         5a:9e:82:db:1a:b7:4b:92:ed:ff:e3:b6:a6:63:41:33:a7:40:
         1a:67:c4:d8:ac:cb:9a:10:f8:b7:f9:0e:37:37:ab:97:91:ad:
         6c:9a:6d:35:5d:b0:10:5c:88:ca:ce:e4:d4:b7:7b:db:fa:5e:
         16:80:22:4d:b9:4a:e2:3b:ae:85:94:98:ec:d0:b0:fc:22:33:
         ce:53:37:67:17:09:5a:f1:13:76:35:c4:5e:9a:b5:4a:c7:dd:
         47:a1:56:14:b1:33:a5:4f:d5:c1:a1:79:6a:12:ea:cb:18:40:
         06:1a:eb:aa:18:68:3d:51:0c:67:28:6b:79:a4:03:3b:85:ad:
         3c:6f:c6:26:85:84:e6:47:17:b7:e4:61:7c:fb:2b:40:50:ea:
         91:c2:79:4c:7e:69:8c:4a:06:45:98:0a:96:c7:70:1d:22:a2:
         43:da:66:3d:b5:01:7e:bb:54:a4:af:22:0c:de:ef:d0:62:b5:
         4d:5a:30:96:2e:bd:a1:7f:fb:97:78:84:ef:22:bc:7a:39:b1:
         5e:15:fe:a0:94:16:9f:23:8e:92:d2:8d:41:71:e2:80:a0:0a:
         15:eb:66:ac:9a:9d:6a:55:82:80:f5:e9:b7:72:3a:ca:32:05:
         0c:dc:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:48:27 2024 by rpki-client on console-fra.rpki-client.org