Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa
File:                     12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa (raw, json)
Hash identifier:          LgOEEHTA0i7Bjoa1g5YZUfvJg8klTielsMfPZFB8EW4=
Subject key identifier:   E9:1F:22:0A:7F:C7:2D:B6:1E:89:69:7E:51:42:53:FC:1A:D0:C1:86
Certificate issuer:       /CN=d2bbf297-079d-4c91-9341-1297e788c325
Certificate serial:       010D0C9F4328584731FB9A89724ECC1ABDFDAAC0
Authority key identifier: 15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa
Signing time:             Fri 13 Sep 2024 01:00:32 +0000
ROA not before:           Fri 13 Sep 2024 01:00:32 +0000
ROA not after:            Thu 12 Dec 2024 02:00:32 +0000
asID:                     21775
IP address blocks:        199.15.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:fb:9a:89:72:4e:cc:1a:bd:fd:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbf297-079d-4c91-9341-1297e788c325
        Validity
            Not Before: Sep 13 01:00:32 2024 GMT
            Not After : Dec 12 02:00:32 2024 GMT
        Subject: CN=d1ee74ba-9291-43d6-8626-b93163651ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:77:86:69:87:56:8f:c4:3a:3c:16:7d:e7:
                    cf:68:90:8e:11:25:96:71:49:a8:a6:6f:04:cd:b7:
                    d2:b5:2d:0b:d0:1b:1e:6c:66:75:e6:6b:a3:0a:d3:
                    a4:8e:95:18:f0:dc:ea:43:7a:b9:71:7d:1f:49:71:
                    ea:77:14:ba:80:c0:f5:23:54:93:7a:12:8a:c6:43:
                    a3:49:bf:84:ae:d3:84:34:19:5e:f5:f7:20:3c:31:
                    66:ac:f4:70:c1:e0:bc:4c:3a:7e:b1:49:66:88:fb:
                    bb:2c:85:68:5e:14:81:46:70:f6:47:8f:f5:50:87:
                    d8:09:83:e1:35:40:16:d5:fc:cb:cf:0b:b6:c5:30:
                    dd:95:13:68:13:c7:1f:ef:44:ad:f9:be:90:2c:7a:
                    2a:be:be:c6:e1:f0:ec:65:44:f5:df:a7:c8:0c:c6:
                    cb:14:ea:5b:76:aa:0b:9d:01:d1:af:a6:c5:22:f5:
                    47:aa:36:e1:0f:fa:a6:38:8d:40:8a:01:8e:8e:3e:
                    fa:56:6b:f9:61:90:35:0c:6b:c7:96:df:62:1e:b2:
                    b0:bc:8e:3a:43:25:f5:b2:ce:c1:e3:bf:9e:ce:03:
                    c9:79:a0:8c:72:0a:ad:3e:bd:db:f6:a5:39:df:18:
                    e0:1b:bf:1a:00:d6:53:8b:0f:a7:33:fa:7b:be:c4:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:22:0A:7F:C7:2D:B6:1E:89:69:7E:51:42:53:FC:1A:D0:C1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/12ff5e27-9eab-3cce-bff7-88150fab9f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325/d2bbf297-079d-4c91-9341-1297e788c325.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:E5:D1:07:F1:7F:C7:CF:6D:B1:5D:2D:49:F0:C0:2C:78:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d2bbf297-079d-4c91-9341-1297e788c325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e1:f2:73:bf:61:70:be:c6:ff:4d:76:44:38:e4:f6:6c:29:
         ff:db:df:ed:fe:c8:e6:a8:27:7d:94:07:55:db:9c:f6:44:22:
         ef:3b:e6:cd:bc:00:a5:3a:f0:05:28:88:03:65:ee:74:84:f4:
         25:60:3f:99:21:73:14:74:01:79:6a:51:ec:1e:68:7f:80:a7:
         34:2b:a9:92:4b:3f:a3:41:33:45:5a:70:b6:c1:ca:da:e8:ce:
         21:b0:91:ef:1b:9b:16:e8:9a:40:6f:b9:59:7f:7e:50:69:cd:
         26:6f:af:fe:ba:98:75:0d:ce:f9:5e:a4:d5:5a:24:d5:59:3d:
         86:fd:c7:e9:2e:c2:06:2e:0f:59:7d:2c:41:4c:55:46:34:5b:
         3f:ed:9a:d5:df:e5:6a:d6:86:c7:e2:e8:8d:d5:3b:e3:a2:01:
         77:d5:bf:0c:a4:85:14:64:32:56:cd:d8:5d:ed:6b:0e:40:80:
         74:84:15:25:5a:fc:04:13:10:f8:4d:78:e2:e0:af:16:26:07:
         c5:91:7a:e3:6c:b2:0d:d5:ef:22:66:6a:5e:e5:cc:67:07:cc:
         e6:06:27:75:ef:4d:a5:f2:4d:bd:11:f4:c3:f2:34:b9:6e:91:
         bb:3b:e3:5e:e3:a6:ef:bb:5d:9b:93:88:74:dc:6f:4d:4b:92:
         0b:53:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:00 2024 by rpki-client on console-ams.rpki-client.org