Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa
File:                     9ae2582e-294e-3281-bf09-2642a6663c7d.roa (raw, json)
Hash identifier:          YhWy/2OGIf92o8NevjOUn8v2vwGXMkqTYkphMEgewGo=
Subject key identifier:   1F:64:35:40:30:19:AD:5F:44:85:EE:A4:58:64:A3:34:2B:EF:E5:63
Certificate issuer:       /CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7
Certificate serial:       010D0C9F43285847EFEF8B3680361125AA728780
Authority key identifier: 14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     399386
IP address blocks:        199.88.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8b:36:80:36:11:25:aa:72:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293fd22c-acf2-43f5-bbd1-2b63ea7128c7
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=532429ba-84c9-4b95-8a3f-492591926bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:30:6e:2b:31:88:0a:2b:03:0a:98:06:9b:28:
                    f8:95:c6:9b:8e:1f:0b:4d:ca:f5:1d:30:49:30:a3:
                    d9:e1:f9:91:f7:5d:8e:6c:5c:05:5e:36:5a:d5:2d:
                    dc:4d:77:44:cc:27:24:cb:d1:1b:4d:3c:0e:2f:f6:
                    1f:c2:2e:8d:1d:09:29:63:2b:1e:26:8a:4c:23:6e:
                    16:eb:de:50:19:18:04:3b:ae:09:b8:82:a9:0d:9c:
                    53:f7:8e:f3:0d:ef:f8:ba:39:13:5e:ec:bf:46:57:
                    e0:d4:9d:2a:c7:8b:4a:42:8f:26:34:24:bb:af:bd:
                    98:c6:a5:6a:a6:62:c0:58:a6:31:29:c5:5c:d7:80:
                    48:23:1e:fd:8e:b6:61:6a:14:b0:db:89:4f:37:e8:
                    64:62:5d:10:fe:8c:0c:4d:c7:e4:3c:4b:9b:df:dd:
                    bb:7c:1a:c2:e5:1e:1e:cd:1d:35:64:ac:cc:30:d9:
                    6c:13:52:10:0c:00:8d:a8:27:8c:4d:89:89:21:3e:
                    b3:78:1e:84:36:5c:1b:97:1c:85:43:3e:0d:03:2c:
                    7c:fd:7f:f6:c2:b1:cb:ac:da:b1:45:2e:4a:60:78:
                    db:b3:cd:4e:34:3a:1a:d2:16:ee:fe:07:5a:61:8d:
                    b6:00:96:c1:a8:ef:89:aa:03:59:80:5a:25:a7:a4:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:35:40:30:19:AD:5F:44:85:EE:A4:58:64:A3:34:2B:EF:E5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/9ae2582e-294e-3281-bf09-2642a6663c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.crl

            X509v3 Authority Key Identifier:
                keyid:14:D6:F1:9E:F8:E5:BA:88:DB:08:5A:22:98:FE:68:86:61:1D:EB:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/293fd22c-acf2-43f5-bbd1-2b63ea7128c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.88.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:aa:d4:ab:88:84:bd:ae:76:6b:cb:51:be:d2:de:54:51:
         f9:c0:b3:93:95:73:74:7b:35:fd:ae:6c:ec:10:40:bc:84:cc:
         05:7a:0a:87:3e:69:a6:85:dc:24:73:4a:02:83:b6:0b:75:e0:
         25:4c:3f:db:5e:1f:bf:8f:54:37:a1:15:e9:40:8e:bb:42:08:
         16:a0:3d:08:a1:8a:80:e8:0e:20:63:71:c3:c8:79:84:c9:fd:
         1f:54:5a:d4:ac:ef:14:96:03:78:4a:01:6f:e9:97:f0:51:e0:
         6c:88:b4:c3:d1:0c:6c:4c:a3:6b:8a:45:cf:6d:76:fd:8e:7a:
         d7:f6:5e:b3:a8:f6:36:9b:ca:04:bd:7c:02:6f:e7:84:85:d1:
         91:d0:53:5b:53:4a:ad:7b:fb:ef:14:a4:fd:87:71:7c:6c:ff:
         0f:50:ea:7a:d0:7e:0f:13:63:40:bf:d2:02:35:b6:41:68:c0:
         ab:c6:1b:9e:e5:ee:fe:d2:e6:fd:22:d1:ec:31:8a:1f:77:f4:
         61:d5:a2:24:9d:c2:5d:aa:2d:5f:77:c9:88:83:31:81:39:e3:
         0a:31:c2:76:2d:a6:42:d0:60:1b:3b:59:6c:2e:7c:70:fc:6e:
         f5:d5:a7:62:e5:e4:22:2b:eb:0f:e8:94:1d:a5:d9:47:f5:4b:
         c1:1e:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:10 2024 by rpki-client on console-ams.rpki-client.org