Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa
File:                     9a555038-c6bf-32aa-a116-4d2bebb13665.roa (raw, json)
Hash identifier:          2ZEx2O5wvU4z+sV4ctT1trzm83eh4zxLuqQPJ3O56kY=
Subject key identifier:   63:42:32:34:81:87:02:A9:26:E8:7D:38:5A:10:9B:4B:F9:94:A1:8B
Certificate issuer:       /CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
Certificate serial:       010D0C9F432858474420B002D50824A3F7B87000
Authority key identifier: 7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     14618
IP address blocks:        172.99.14.0/24 maxlen: 24
                          172.99.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b0:02:d5:08:24:a3:f7:b8:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f245d2-ace9-4f2b-ab8e-927934d9805f
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=2f09be03-92a3-421d-83c7-6319d1ef21c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:83:7e:24:a2:13:de:18:ea:06:68:cd:8b:ce:
                    5f:da:cb:2e:08:e5:9f:54:4e:f0:6f:e8:0b:17:af:
                    3c:20:15:0a:c5:3d:b7:79:ea:55:1c:49:eb:bf:2d:
                    b1:6a:a4:b8:c3:a8:62:ff:06:db:cc:e5:0d:3a:6e:
                    5d:9b:aa:bb:51:93:ea:d5:50:cf:12:fa:63:75:dd:
                    34:db:33:86:e3:a0:92:a2:1d:1d:b6:82:ec:38:94:
                    50:6e:61:2a:57:dc:71:f7:c2:49:87:f7:4e:ff:e1:
                    60:e2:b0:0d:1e:70:0a:a1:1b:02:87:f9:08:3f:88:
                    b1:d5:8e:d8:e3:a9:38:01:a3:44:a9:68:4d:78:2f:
                    9e:55:07:c9:62:b8:f8:08:08:00:7b:09:7c:f9:d5:
                    46:f6:d4:c2:8c:f0:d4:58:72:fe:b8:12:51:0f:20:
                    03:03:24:09:c8:e7:88:14:f2:0a:4f:d1:e6:04:b7:
                    98:ed:d8:bc:c9:46:b4:5b:88:e8:82:3d:3b:1d:0c:
                    ac:23:f8:83:c6:40:40:62:76:ab:98:ae:71:7e:5c:
                    5d:5e:c4:d2:2d:92:60:22:1a:b7:b7:b0:fc:2d:18:
                    60:67:e4:ea:69:12:c9:c8:76:82:5f:0c:0c:12:b9:
                    48:2a:37:31:06:fe:e2:3f:79:da:91:af:91:51:7d:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:42:32:34:81:87:02:A9:26:E8:7D:38:5A:10:9B:4B:F9:94:A1:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/9a555038-c6bf-32aa-a116-4d2bebb13665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f/91f245d2-ace9-4f2b-ab8e-927934d9805f.crl

            X509v3 Authority Key Identifier:
                keyid:7B:81:F3:E6:29:C6:08:6B:E8:1A:B4:36:4F:D1:89:2E:37:B5:0C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/91f245d2-ace9-4f2b-ab8e-927934d9805f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:4f:69:34:f0:72:8a:55:29:55:31:bf:99:d9:73:ac:37:
         31:1b:3d:09:f5:71:e0:23:f2:08:78:d8:e6:bc:49:1f:5c:1e:
         69:ed:7b:a7:a9:91:e4:f1:c8:80:60:98:1c:3f:6b:84:44:c7:
         cc:f9:9c:b7:d7:f1:33:88:f7:ad:a0:78:37:d1:20:80:2b:0b:
         e0:9f:0a:f8:60:49:3b:d7:4f:36:c7:51:a5:3b:91:63:c4:a2:
         6c:de:20:05:b6:0e:d1:60:13:8b:e4:a2:bc:e3:10:24:69:a6:
         d5:24:0a:58:d4:94:f5:a1:c3:66:50:af:0c:ca:eb:f6:4c:3c:
         b0:46:f3:c1:06:18:2d:6a:48:5f:b8:ca:af:31:8e:c7:d7:8d:
         b7:66:06:b5:0b:7c:a9:0b:5e:bc:b3:80:c8:4d:c2:bd:fa:af:
         4f:29:25:8a:7a:3d:ea:ea:84:56:1d:07:aa:ba:ea:c4:2e:85:
         1a:13:3e:31:aa:6d:a9:6f:21:3e:73:60:d0:7f:10:5f:13:9e:
         40:f9:06:0a:4a:69:af:3d:d4:8e:82:77:74:d1:ee:ef:53:89:
         84:9e:b7:12:60:cb:ff:1d:3d:a9:da:27:38:95:d7:4a:f6:2f:
         25:7c:14:99:05:bf:79:57:52:1e:2b:c5:97:36:da:d0:04:e5:
         c5:eb:48:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org