Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
File:                     0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa (raw, json)
Hash identifier:          KsgNUkdVY6suuMWN4DeSaggo/JTVa/H+ebXJh5Fg7o0=
Subject key identifier:   E9:03:3D:9F:86:E5:0F:07:0F:D2:90:8F:29:B7:E7:9D:2C:A8:2C:74
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F432858474420B5B962C72EDE8F375840
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     10929
IP address blocks:        199.193.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:b9:62:c7:2e:de:8f:37:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=573a153c-9193-426e-b303-d4c5469f3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:79:af:29:01:bd:67:b5:0f:d7:3c:14:6b:
                    05:74:db:fe:20:ac:db:9e:64:b1:ce:77:6a:68:2e:
                    35:09:d3:7e:00:1f:4b:6c:18:24:18:27:af:4a:a1:
                    73:da:77:b2:71:bb:9c:17:75:fa:4c:0e:78:10:b8:
                    90:73:56:a8:06:22:6d:7c:8e:94:64:92:00:57:79:
                    94:2a:a6:c0:90:3d:96:a6:ab:c0:12:16:e3:2b:50:
                    4b:96:ad:07:ac:a8:56:70:6b:5b:72:c8:a5:b8:25:
                    41:4b:c6:10:39:ca:d8:02:4a:91:ef:fe:cd:b5:35:
                    8a:dc:54:f6:f9:54:f5:13:8e:a9:50:d6:6c:1c:c8:
                    e8:2b:a3:ac:60:c6:0b:a7:be:a3:51:46:be:b7:26:
                    0f:c9:71:93:a4:2f:39:14:c5:32:83:ea:30:5a:8f:
                    6f:39:73:74:1b:39:10:ae:97:d6:83:a8:ec:e0:62:
                    d9:23:46:39:06:70:a7:b7:4c:0b:90:69:71:13:2f:
                    a4:38:6a:e8:e8:27:6f:17:72:9e:dc:65:79:64:22:
                    d3:e5:7a:03:64:fe:6a:06:90:c2:22:c3:a5:c2:e7:
                    57:6a:d7:cc:4d:1d:d8:52:6f:9d:0f:44:62:ca:43:
                    64:ba:5c:1c:7c:c8:72:c3:8d:6a:8f:ad:19:66:46:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:03:3D:9F:86:E5:0F:07:0F:D2:90:8F:29:B7:E7:9D:2C:A8:2C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/0228f9b6-6544-3a33-992b-0c5cd8f990ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:38:55:ed:c7:51:51:27:82:11:03:67:0c:58:38:60:63:
         c5:6d:f5:a9:1f:35:6a:cb:62:54:d1:89:84:82:04:ad:87:3c:
         42:68:ae:fd:78:a1:b6:cb:3b:78:32:56:f0:95:2d:70:4c:bf:
         ea:41:f1:46:e7:ae:88:29:11:06:c5:75:2e:2a:dc:3f:f3:74:
         92:91:9f:5f:a6:bc:49:b9:c5:c2:f4:0d:d5:f2:ee:86:42:7a:
         8c:9c:bc:71:ca:6a:16:f9:9d:00:b7:8a:a9:6f:1c:21:f7:69:
         73:9e:2e:de:1c:33:b1:3c:43:d7:b2:69:03:28:3e:ff:1a:3e:
         2c:84:c6:0b:37:1b:4d:40:49:ab:7d:8f:27:15:05:ae:04:73:
         7f:ed:c5:42:37:1b:a6:78:84:85:f7:26:6d:94:1f:ac:e2:04:
         f5:34:b3:8a:17:86:ad:81:94:14:a6:81:fb:94:e4:7b:eb:c7:
         01:84:a7:b4:85:66:29:73:32:e7:bc:3e:7b:eb:0e:a5:30:8a:
         58:19:1c:e9:1c:6a:92:66:73:fb:17:81:8f:42:1c:05:b5:2c:
         45:18:65:fb:b4:49:8a:37:59:b9:33:17:e4:58:e0:a9:92:15:
         da:15:d9:d1:d9:ab:99:fc:ae:f3:0b:af:dd:1e:ec:c0:15:37:
         e4:24:8d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:05 2024 by rpki-client on console-ams.rpki-client.org