Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e21458-4d6b-36df-8e9f-fbd4d417c4d7.roa
File:                     c6e21458-4d6b-36df-8e9f-fbd4d417c4d7.roa (raw, json)
Hash identifier:          yvEZdpj7U5VjFK8D6QbqQuX7rrxBMNxFDzxHFVOIYWI=
Subject key identifier:   F2:D2:4F:70:30:E9:62:A0:24:CB:DB:34:C6:E6:8C:12:63:6C:D2:FF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B14CE7F33CFC33342A5F00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e21458-4d6b-36df-8e9f-fbd4d417c4d7.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        199.232.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:4c:e7:f3:3c:fc:33:34:2a:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=0c154a4c-3c9c-4bd8-af8d-1c15b6d2282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:80:4e:b0:fe:91:a0:fe:12:45:ad:be:32:
                    37:ab:10:46:9a:5e:25:6b:c7:dd:de:25:6a:a6:52:
                    dc:96:45:b1:ae:5f:71:a4:0c:da:47:24:c4:88:30:
                    69:2d:a9:d1:3d:07:94:58:1d:65:e7:99:60:e4:d1:
                    fc:4d:b4:f6:36:8d:fb:db:a1:d5:93:05:f3:26:11:
                    4f:67:1b:3a:38:cb:b6:4e:09:e2:c7:d8:1c:8f:99:
                    85:50:6b:a1:3b:8d:7c:35:57:27:19:8e:e7:87:fc:
                    e7:e2:06:a6:10:5b:af:b7:66:6d:e2:a2:4a:75:03:
                    77:06:63:b4:b5:44:f7:d7:2b:9a:ff:66:8e:84:5b:
                    e1:45:a8:ad:92:4a:33:f4:f5:f9:2b:42:08:01:ca:
                    fc:b4:dc:88:bf:24:3f:c7:d3:98:bb:30:65:d9:fb:
                    5b:e3:3e:c2:6f:97:d3:3f:17:3e:ba:83:8e:28:bf:
                    8a:36:fd:55:95:ff:53:cb:21:7a:1b:eb:94:2a:5a:
                    0d:11:11:ca:c6:d2:17:6d:23:86:9a:c9:8f:5d:77:
                    95:a9:1d:07:10:47:e3:df:5b:c9:57:82:bf:31:93:
                    e0:bf:72:23:d1:4f:06:d3:cc:e0:b1:10:d6:39:1f:
                    de:5d:02:45:c3:6b:2b:2d:2a:be:2d:22:80:14:d0:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D2:4F:70:30:E9:62:A0:24:CB:DB:34:C6:E6:8C:12:63:6C:D2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c6e21458-4d6b-36df-8e9f-fbd4d417c4d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.232.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:32:dc:04:32:be:00:93:b1:b5:e5:16:e3:05:b5:96:e7:
         11:d9:1e:39:a9:25:96:cd:53:33:28:48:99:de:0f:2e:44:96:
         e1:7b:24:80:cb:ce:72:35:9f:65:8d:7f:71:6a:ea:1b:2e:c7:
         63:7f:ab:18:65:9c:d2:f7:43:d0:90:9f:1a:cc:81:d2:c7:a2:
         87:60:60:d4:7d:25:04:45:08:75:84:67:6f:41:9c:57:70:6f:
         7f:3f:b6:7a:32:c6:6c:76:89:56:21:83:cd:69:96:42:27:c7:
         9b:d5:bf:7b:08:c6:bb:9d:01:87:30:7d:16:0f:55:0c:d0:f2:
         f4:a2:89:7f:99:43:c0:c4:1d:37:fd:6c:90:d1:51:50:76:e1:
         be:f2:62:e3:c6:ff:cf:85:80:cc:cc:f5:d8:21:1e:14:61:e5:
         4e:7c:b9:87:b9:a1:51:f4:94:56:25:ce:dc:33:12:10:5f:76:
         b0:7e:37:95:9c:68:51:7a:0f:78:36:47:e2:8f:fa:9f:a0:a5:
         14:87:71:f2:d8:7a:12:4c:f9:27:5c:00:06:7f:6f:aa:0e:91:
         7a:2a:84:4a:53:54:b2:bd:79:63:e5:15:15:4f:be:a1:9c:29:
         cb:c7:49:db:18:40:a5:69:df:37:73:ee:dc:1c:e5:7b:3f:90:
         21:60:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org