Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/594538ac-d8b6-30fc-935d-a4856367022d.roa
File:                     594538ac-d8b6-30fc-935d-a4856367022d.roa (raw, json)
Hash identifier:          OTSCxuoGW8ToBDxybI/BHJVo+wjEuXwW2R9MDk+DWJc=
Subject key identifier:   7F:F9:CB:6B:AD:4F:73:2C:2E:BA:FD:6F:E8:43:24:79:B4:A1:61:62
Certificate issuer:       /CN=cf146642-7b71-41f6-b82f-62c0fe1634f3
Certificate serial:       010D0C9F432858473A5B816B32182464DFF31220
Authority key identifier: B6:0E:67:F6:4E:FC:CD:54:0E:2C:92:79:62:68:F0:2B:C5:D0:BE:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/594538ac-d8b6-30fc-935d-a4856367022d.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46401
IP address blocks:        192.135.199.0/24 maxlen: 24
                          199.10.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/cf146642-7b71-41f6-b82f-62c0fe1634f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/cf146642-7b71-41f6-b82f-62c0fe1634f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:81:6b:32:18:24:64:df:f3:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf146642-7b71-41f6-b82f-62c0fe1634f3
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=13e30547-5c96-45de-8530-6e4f119b0e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:05:d6:82:70:80:3f:37:64:ca:51:51:85:
                    fb:02:4d:36:64:9e:f3:db:be:92:46:63:45:4f:bb:
                    30:e6:b5:71:71:28:2e:23:a7:2d:ec:63:b8:ad:7d:
                    6b:08:0c:2c:3f:42:1b:b7:22:82:4b:27:76:90:cc:
                    bb:f5:ba:95:1c:71:f5:8c:96:d0:5d:14:6e:51:c4:
                    52:51:1f:67:ff:ad:7c:d4:e8:94:c8:fb:7f:d6:6a:
                    e8:ad:0b:3a:b4:ef:e1:8a:5d:b4:57:54:6c:28:84:
                    19:a5:84:a5:f2:22:b8:8b:9d:f6:8b:63:30:70:6c:
                    81:d5:9d:dc:66:97:b2:d1:a0:64:fc:5a:f3:62:1e:
                    57:5d:fb:ee:90:45:4b:a7:b0:49:c7:94:6d:9b:8c:
                    80:07:7e:72:42:51:21:bb:c6:a7:44:c1:ef:2f:24:
                    e3:ce:55:68:6a:87:90:1d:23:f9:b4:50:db:94:4f:
                    ba:6d:d3:a8:82:2d:91:6f:27:68:60:06:86:9a:fa:
                    eb:ed:b9:ad:4e:8a:e5:b8:ca:35:17:49:8c:b9:9c:
                    7d:c6:d9:46:e7:02:67:a1:7b:10:f3:81:87:34:0c:
                    0b:31:e2:94:a3:50:5c:db:7e:ca:85:d8:cb:e9:a6:
                    ea:67:90:d9:43:de:64:0d:2d:b6:72:68:5e:f3:ed:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:CB:6B:AD:4F:73:2C:2E:BA:FD:6F:E8:43:24:79:B4:A1:61:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/594538ac-d8b6-30fc-935d-a4856367022d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3/cf146642-7b71-41f6-b82f-62c0fe1634f3.crl

            X509v3 Authority Key Identifier:
                keyid:B6:0E:67:F6:4E:FC:CD:54:0E:2C:92:79:62:68:F0:2B:C5:D0:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cf146642-7b71-41f6-b82f-62c0fe1634f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.199.0/24
                  199.10.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:27:16:0b:32:f5:24:42:0a:97:2c:12:7a:7d:b1:14:68:a1:
         84:16:3d:85:6e:70:92:74:d3:05:94:cc:ae:fc:7a:00:49:04:
         84:b1:1e:e0:99:dd:ec:1c:64:0e:2f:b8:8c:40:75:2a:14:7e:
         02:cd:6c:86:8c:50:ad:43:a8:bc:80:b8:43:43:6e:01:28:92:
         46:c9:9c:50:c5:1b:3c:fd:16:a5:68:ad:30:6f:86:83:3d:2c:
         05:ee:d4:41:5c:76:81:b3:6b:32:d7:8f:56:1f:ce:ac:29:91:
         c3:42:f3:fc:35:2d:ce:12:36:42:b8:ee:2e:16:d8:ed:84:0c:
         39:5b:64:17:0b:1b:d5:f5:db:fc:08:47:1e:5d:2f:f2:ef:36:
         d6:4a:e3:09:f1:e3:3a:fe:59:d9:fc:87:9c:04:7c:b3:96:aa:
         d8:0d:f1:60:eb:c8:12:4a:73:4f:ec:c2:ba:8d:17:74:c8:c4:
         3c:84:9c:af:56:16:61:98:80:e8:38:f4:40:ff:c6:18:95:ea:
         bc:af:79:1a:42:15:d1:ea:54:93:02:7c:2a:57:76:67:24:ff:
         2d:5f:f0:d0:2f:89:bf:68:49:f3:4c:30:c1:28:10:55:61:44:
         27:d3:b6:b7:2a:cf:1e:50:f3:4e:b9:f2:39:1d:c3:24:d4:ff:
         d4:eb:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:07 2024 by rpki-client on console-ams.rpki-client.org