Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa
File:                     6f0b4047-bc30-3c91-af85-494789ac65e0.roa (raw, json)
Hash identifier:          JsgtMa/HTk8NA4X/f4qfeWgR7vXhHqOY/BCjepNv26w=
Subject key identifier:   9A:6B:94:27:B9:FC:1F:B9:F2:2F:C1:34:A3:36:3E:00:C6:2A:F7:0C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B14BD15236F37C7C27F400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        199.232.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:4b:d1:52:36:f3:7c:7c:27:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=4a95c296-0bab-4d50-a0c9-ced671abf317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:32:dd:98:21:7d:44:49:91:8d:d8:ce:cf:
                    77:15:d4:37:b6:24:72:d9:00:8f:d7:26:5e:85:23:
                    83:bb:c0:c3:b7:f9:d5:d7:1b:cb:55:a2:97:2e:5c:
                    9f:88:65:5a:36:55:0d:f4:df:03:78:9a:6d:e5:78:
                    a3:6f:45:18:d1:10:e8:1d:55:fd:84:52:b1:d8:7f:
                    bd:c5:35:e4:9b:dc:12:41:bb:4e:44:ce:37:1a:dc:
                    74:f9:b6:0c:7c:02:45:5e:29:78:da:8f:b8:0c:c2:
                    8b:37:c8:37:d0:8d:a4:02:43:2d:fa:c0:57:b2:a2:
                    cf:0c:5d:98:5e:62:2f:c3:8d:f4:18:fa:59:df:52:
                    f9:9b:47:cb:2d:7e:c9:9f:64:47:1f:59:54:d6:92:
                    e0:95:00:d3:60:36:64:1a:8a:95:e3:3f:35:6a:d5:
                    92:15:90:40:40:2c:f2:cd:35:4d:0f:13:9b:6a:58:
                    81:77:f4:89:0c:87:d7:cd:95:b9:8c:44:09:1d:35:
                    23:c8:70:a4:1a:68:31:ba:31:c5:ec:5e:da:e8:b9:
                    b2:a6:f9:db:15:e1:74:fb:33:ef:41:65:99:d7:d9:
                    07:9b:93:1b:9c:fd:c0:cf:2c:f3:8f:dc:aa:a4:59:
                    36:04:89:86:56:74:ec:a5:58:2c:6b:4c:b9:fe:dd:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:94:27:B9:FC:1F:B9:F2:2F:C1:34:A3:36:3E:00:C6:2A:F7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6f0b4047-bc30-3c91-af85-494789ac65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:95:19:f7:4b:94:c0:c1:d0:2a:62:01:40:55:d8:c0:3a:93:
         e0:f9:b0:bc:84:45:f1:3a:6c:d2:b6:d0:dd:62:84:f5:9d:12:
         6d:f4:70:90:e3:30:d1:4f:06:a3:9e:91:a4:b9:88:4c:2b:8d:
         31:b1:91:68:ca:3d:29:63:55:b5:84:c4:7d:27:98:90:9e:c0:
         18:90:22:27:77:39:f1:e6:84:ef:8a:d7:de:3c:db:b2:94:23:
         9e:21:9a:04:03:64:0e:ef:0f:64:10:44:76:77:0a:72:2b:71:
         ad:b2:10:08:af:cc:08:1f:70:0d:92:97:2d:96:be:5a:ef:ae:
         c0:a9:d6:9e:a0:0b:7c:d9:69:9e:ca:74:32:18:f8:d9:f6:16:
         4c:9d:4b:f7:40:a3:d4:90:5c:ff:c8:d7:05:6e:a1:46:a2:e6:
         cc:00:5b:17:ed:4f:d6:d0:08:45:ad:44:13:02:ed:38:ef:dd:
         47:25:a3:1d:b9:8d:d5:dc:01:64:fc:99:e0:ed:a2:76:5c:77:
         42:e0:d3:b1:5e:85:20:29:86:0f:c6:7e:30:9c:c0:30:47:a5:
         97:cb:b7:a4:fe:d4:b5:05:93:ee:cc:d3:7d:12:d1:92:6f:bf:
         4f:4c:96:6a:17:8e:a8:71:9b:1b:e9:b1:6a:cc:7c:b8:ec:cb:
         2e:a2:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org