Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
File:                     89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa (raw, json)
Hash identifier:          iDtR5+g/yDvlH6nVrptpq6AZ45b9tdhKzbyfFoIJ9y4=
Subject key identifier:   67:FF:37:26:44:79:11:C6:E1:5F:03:B1:1B:43:44:6A:77:1D:B5:9F
Certificate issuer:       /CN=7b430551-8bf9-4310-8a7f-b2233e29affd
Certificate serial:       010D0C9F43285847213B23E22EE5C7864335BB80
Authority key identifier: 6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     17456
IP address blocks:        199.127.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:23:e2:2e:e5:c7:86:43:35:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b430551-8bf9-4310-8a7f-b2233e29affd
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=a8176234-a857-4715-b1af-7cc18258f0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:9a:c3:15:46:c9:e2:3a:ec:e2:97:0e:52:
                    ca:18:9a:dc:14:ea:76:ee:45:0f:79:89:dd:09:11:
                    89:fd:83:8d:dc:5a:df:67:2a:92:55:ac:b8:79:68:
                    87:f0:d0:5f:4b:aa:12:68:85:cb:36:f6:10:d5:a9:
                    d5:fa:79:c6:68:d7:b4:9c:59:70:db:d8:11:f3:f9:
                    17:1d:2d:cf:5e:17:42:fb:37:1c:1a:a6:9e:ff:a4:
                    02:01:47:39:b6:0d:9b:02:a1:c4:c3:7d:63:98:95:
                    1e:34:0f:ba:98:b0:62:e2:67:3c:42:df:33:36:06:
                    df:66:24:92:5f:2c:c9:b2:37:05:44:93:9a:8d:2b:
                    36:d7:11:f9:60:44:6b:50:21:4c:ce:54:6b:51:97:
                    ae:f1:8d:1e:d8:52:73:42:33:5f:c8:e6:c0:0c:38:
                    af:23:07:a5:3a:4e:12:cb:22:eb:d3:56:27:fe:2d:
                    78:d7:de:e2:8b:d3:a9:ed:4c:8e:ec:08:f6:8e:d6:
                    8c:bd:c8:69:34:d5:fe:5f:85:63:09:a9:fc:06:3e:
                    55:b7:ef:9b:e7:20:73:f0:2a:d5:dd:33:20:00:c8:
                    b8:f6:3f:f5:bc:20:71:49:38:f9:55:40:af:a8:23:
                    32:b1:de:c7:0e:fc:7a:84:ba:27:48:93:ff:17:16:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FF:37:26:44:79:11:C6:E1:5F:03:B1:1B:43:44:6A:77:1D:B5:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/89ce6886-5a3c-3e1b-a8e7-211977089ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd/7b430551-8bf9-4310-8a7f-b2233e29affd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:BE:D9:86:8F:66:C6:07:35:6F:A7:B3:E7:50:17:8D:D8:22:7C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b430551-8bf9-4310-8a7f-b2233e29affd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:3f:ca:67:1d:b8:e1:82:38:e4:8a:bd:d8:39:b8:d1:28:
         9d:8b:27:b6:eb:f5:d9:e3:46:50:00:e8:5b:1f:3c:27:38:11:
         f5:c3:ae:d8:02:02:5c:ac:92:c2:40:7b:27:a7:b6:13:08:03:
         66:38:a1:f4:00:38:4c:6d:18:f0:b5:7d:43:5f:fb:26:98:f2:
         0c:72:8e:5f:ad:53:5f:d0:9b:21:86:57:6a:12:f9:8c:d3:6c:
         ba:a8:42:fc:d8:b2:fe:f7:2f:dd:f4:3d:8d:1f:14:5f:a7:ab:
         e6:9b:11:4d:d5:4c:0e:73:77:b4:d3:94:de:cc:d2:75:a5:0c:
         c0:7e:44:47:60:b2:f0:66:ad:1b:60:2a:37:15:22:12:a6:0d:
         40:b8:66:11:01:8d:c3:b2:74:ff:49:82:cc:e9:30:ba:d8:d1:
         89:00:a6:6a:28:dd:20:05:20:1b:c5:3e:4b:40:d5:98:a6:fa:
         8a:b7:b4:70:33:a3:48:28:4b:4c:a0:96:d7:29:1d:b1:07:a3:
         fa:4f:5b:bc:7b:9e:61:32:5e:9c:08:1d:bc:97:d1:64:7b:b7:
         a2:0a:e1:c5:c5:46:e9:5d:09:4b:44:ef:86:63:57:3f:8f:f8:
         f3:b5:a2:2e:06:51:6b:d3:ab:c1:34:7c:ca:33:5d:3c:a4:59:
         94:7b:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:09 2024 by rpki-client on console-ams.rpki-client.org