Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
File:                     54777a52-8422-366b-87a2-b6e3af1ba3db.roa (raw, json)
Hash identifier:          yBDBhaS+AEnnfbK52Byol8mbhHlg8MTtssirg7WHgZU=
Subject key identifier:   AD:2D:C5:F9:89:7F:84:66:D4:2B:F0:7B:E3:28:A8:E6:A7:8B:F9:07
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F43285847E094C290DB2F1368B7D39C00
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     8100
IP address blocks:        199.7.210.0/24 maxlen: 24
                          199.7.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c2:90:db:2f:13:68:b7:d3:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=937adcaf-1a4c-47e7-a6c3-31b6cb25c711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:88:bb:b1:44:cb:a0:a9:a6:7d:45:3d:a5:
                    e1:79:05:67:28:a8:5f:e4:04:f8:32:e5:8b:c5:61:
                    48:86:9e:10:2b:95:02:b8:08:9e:d8:16:bd:72:06:
                    bc:db:40:d5:cd:02:18:a9:a6:d3:2f:98:64:03:82:
                    31:da:ef:cd:1f:ed:80:5a:3f:67:21:9c:99:20:33:
                    f3:06:fd:27:dd:ef:bc:d6:47:9e:50:98:9a:35:40:
                    da:64:e2:46:98:f9:56:c3:4c:56:ee:20:9d:88:c1:
                    61:3a:e9:0e:d8:99:50:d4:ba:71:a3:f0:6b:6b:a7:
                    63:d4:28:94:f1:53:dc:d7:f3:2c:fb:2f:42:62:0d:
                    f4:37:c0:7a:e6:72:a7:87:c7:bf:68:db:6a:7c:be:
                    4c:33:32:00:b0:60:73:fc:39:6d:40:90:2a:42:57:
                    bb:cf:23:95:ab:1a:dc:fa:8a:80:b4:0d:f9:4d:cd:
                    96:cd:d6:6d:59:87:9e:44:c4:d4:79:65:3e:6e:2f:
                    57:1a:03:d1:6d:00:78:f9:07:4e:5f:21:9e:0f:ab:
                    4b:4f:7f:bc:45:d7:6c:40:5c:02:98:bf:fe:62:05:
                    cc:c0:06:e3:c0:fc:07:cc:9a:13:46:7c:41:97:f5:
                    fb:82:c2:73:d6:95:a4:a3:5d:97:cd:e3:73:1d:fd:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2D:C5:F9:89:7F:84:66:D4:2B:F0:7B:E3:28:A8:E6:A7:8B:F9:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/54777a52-8422-366b-87a2-b6e3af1ba3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:56:c9:1b:d5:ae:98:6f:30:df:4c:dc:b3:af:78:78:3e:62:
         27:a8:74:2a:c3:54:ec:bd:d0:0a:76:42:e8:81:59:cd:0f:6e:
         aa:31:01:1d:4d:b6:74:bb:02:8c:3d:73:20:6e:21:f7:48:ff:
         35:ed:2a:14:43:9f:fb:97:cb:b2:fd:e9:e7:db:0f:71:c9:30:
         c0:fb:22:26:c3:95:e9:e4:00:aa:bd:16:3b:65:72:d3:56:83:
         40:79:18:67:9a:50:36:72:f0:fc:75:3a:af:b0:4e:11:13:6f:
         f9:9b:39:2a:ea:39:82:2a:c2:8a:74:f9:03:14:39:b6:b3:cd:
         c4:9f:17:7f:a8:cd:35:36:4d:fd:62:11:f0:a3:41:97:d9:a1:
         6d:37:58:d3:3e:be:98:aa:5f:44:44:2e:f2:86:54:12:47:e7:
         c5:93:7e:94:0b:b0:b1:da:98:9f:c7:a3:7c:c2:b5:48:58:8f:
         c5:d4:ee:f1:68:86:2e:10:ac:7d:52:c1:5e:30:49:cf:d0:21:
         04:46:1e:9e:c0:9a:d4:89:ac:77:8f:0e:67:9a:fd:32:b6:38:
         05:f4:19:68:f9:f7:5a:c0:f8:5a:bd:01:8b:21:bd:a7:ba:71:
         02:9d:64:da:e8:d7:5b:be:0d:e1:3e:af:37:00:af:57:5c:50:
         74:21:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:58 2024 by rpki-client on console-fra.rpki-client.org