Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa
File:                     968d55c1-3d47-3687-9745-1a682aaf935d.roa (raw, json)
Hash identifier:          rgKT1z8n5Egu4BomKA7YWmTK3i6tfgtfIEMgCnklaCo=
Subject key identifier:   EA:06:BA:09:4F:EF:C1:9A:44:0F:33:68:32:25:33:D2:67:03:5E:AB
Certificate issuer:       /CN=39901aa6-e826-47dc-9f16-612ab05bfcfd
Certificate serial:       010D0C9F43285847256B26D674A86A996201BA00
Authority key identifier: 56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa
Signing time:             Sun 08 Sep 2024 13:00:41 +0000
ROA not before:           Sun 08 Sep 2024 13:00:41 +0000
ROA not after:            Sat 07 Dec 2024 14:00:41 +0000
asID:                     54539
IP address blocks:        199.182.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:25:6b:26:d6:74:a8:6a:99:62:01:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39901aa6-e826-47dc-9f16-612ab05bfcfd
        Validity
            Not Before: Sep  8 13:00:41 2024 GMT
            Not After : Dec  7 14:00:41 2024 GMT
        Subject: CN=3d99c68b-9d00-4a70-a68d-2c462d2bb6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:f1:bc:cd:f2:29:98:f6:63:a0:a8:1f:08:
                    20:1a:3e:77:95:11:05:6d:73:10:6b:0a:d7:b1:c8:
                    da:a6:85:cf:7e:00:50:77:80:e1:d9:00:61:19:5b:
                    d1:dd:68:d2:22:e0:e0:70:f0:2e:02:8f:b2:e3:da:
                    96:5c:5f:f7:71:00:40:f0:d4:24:9d:f9:ec:71:41:
                    91:db:f7:32:80:47:1b:d5:c3:f4:16:9d:7d:5e:68:
                    c5:ee:e4:8f:1d:a4:3f:f8:be:90:a9:49:c3:62:f1:
                    58:90:7f:ec:ec:db:5c:8f:b0:81:2d:7b:09:77:f3:
                    5c:a4:63:34:de:2c:34:06:f3:b5:25:8b:e4:ce:77:
                    97:86:37:ee:02:99:63:27:9b:08:95:ba:fe:a8:e8:
                    7d:83:dc:ff:88:73:30:24:6a:37:c9:61:07:a6:85:
                    8e:9a:35:db:f5:98:5a:fb:8b:4e:a1:76:42:20:49:
                    9a:0b:b6:b8:cd:d6:fa:61:9b:66:9d:4f:ec:34:3c:
                    0a:9a:51:61:42:7c:35:4a:c1:f8:61:9d:c5:f6:e7:
                    e8:f0:97:c4:43:ca:56:ee:83:11:9f:5d:6b:6c:28:
                    bb:c6:aa:17:2b:41:f2:37:55:77:dd:c0:1c:c3:a6:
                    8d:c5:9b:d3:f7:6d:dc:87:11:65:15:01:99:f7:7b:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:06:BA:09:4F:EF:C1:9A:44:0F:33:68:32:25:33:D2:67:03:5E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/968d55c1-3d47-3687-9745-1a682aaf935d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd/39901aa6-e826-47dc-9f16-612ab05bfcfd.crl

            X509v3 Authority Key Identifier:
                keyid:56:E6:46:1A:3B:CB:78:C8:80:E5:A6:DB:A8:91:FF:F3:38:AD:9B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/39901aa6-e826-47dc-9f16-612ab05bfcfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:98:f8:69:d6:9d:f2:0c:be:28:ba:7c:76:d7:6d:a0:5c:
         f8:ce:cb:59:ee:93:c8:fd:c6:94:70:a8:b0:67:0e:97:46:66:
         7d:f6:42:06:65:34:82:83:d9:8b:1f:bb:9b:43:15:95:ad:51:
         7a:51:a2:be:78:dd:85:ba:43:57:f6:35:d4:c5:10:25:3b:b7:
         c4:0e:af:07:b9:fe:3c:e8:3e:39:3f:93:4a:c1:ff:07:b6:47:
         53:0e:60:24:7c:4b:e8:f9:cd:95:8d:ce:04:09:03:74:db:ae:
         c3:62:e8:81:8e:9c:36:4d:45:32:2f:ff:ea:43:3b:27:86:75:
         f2:05:a7:7e:40:03:b4:9a:e9:05:af:ed:73:d4:b7:33:93:3a:
         d2:1b:a3:07:82:e6:dc:cf:1c:c2:8e:aa:0a:e1:08:6a:7c:59:
         3b:ff:fa:11:aa:fe:3b:a9:28:b1:db:66:73:e0:01:34:d9:71:
         06:0b:fd:fe:fb:dc:1f:35:73:46:23:34:d8:26:a8:ff:6a:f8:
         6d:64:e2:36:73:c4:b8:d1:81:09:61:ce:54:0c:59:74:08:e0:
         99:2a:8a:dc:43:35:13:33:5b:4d:0f:b7:0b:f6:a7:87:ae:32:
         a5:e5:8a:11:da:75:de:5c:a2:4f:e4:f9:4f:01:72:88:cd:c7:
         9b:37:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org