Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa
File:                     991e404f-8d3f-3233-a41d-35ee0ba90723.roa (raw, json)
Hash identifier:          6WK4QUer9pvCb9VE83eHrAnW4QiKYD9AkjbTh1lo6DE=
Subject key identifier:   EA:FA:33:0A:4C:F7:A1:41:82:93:45:57:7A:4F:14:17:1C:41:CD:A4
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F432858475EA631BBF1A9A64776B3C400
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     400725
IP address blocks:        199.45.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:31:bb:f1:a9:a6:47:76:b3:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=ded18646-cac9-4183-9f1b-67d37a813f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:dd:36:3c:0c:86:5f:21:72:11:3c:1b:f4:
                    fd:a8:bc:f6:e6:fe:72:94:e3:a4:b2:35:38:70:7e:
                    0e:5b:5d:7b:47:e8:68:ba:be:12:bb:46:1d:e5:6c:
                    9b:08:6e:b7:14:fe:8b:a9:c1:79:13:a4:b9:d8:1e:
                    90:17:e4:cb:80:6a:93:18:0c:63:10:b4:53:10:13:
                    86:85:b3:06:1c:14:4f:be:e1:64:5e:9e:d9:be:19:
                    a8:32:40:bd:f5:d6:aa:19:5c:f7:7a:ed:85:60:33:
                    35:16:fb:39:b5:34:72:42:53:9c:06:d9:45:47:e5:
                    7b:b3:0b:15:1a:a3:fa:0e:27:e3:9c:07:83:e1:55:
                    30:a0:62:24:46:f3:74:17:ef:ae:ae:34:26:39:59:
                    3a:cf:68:e2:a9:c2:72:b0:93:c1:ec:eb:bf:24:6c:
                    10:c6:6b:0f:06:d6:85:c7:fd:1a:37:34:d3:19:8f:
                    09:a3:c9:a8:2e:2f:34:03:cf:51:9f:76:81:0a:54:
                    12:bd:d2:7b:d6:4b:f0:80:d1:9a:8c:86:08:8d:8b:
                    e3:a3:14:0d:36:df:b1:35:fd:38:f5:b3:cb:b1:8e:
                    35:cc:04:6f:b9:76:f4:35:81:41:d0:db:46:74:f8:
                    5f:c7:f7:74:ff:77:a0:ed:51:5d:a5:a9:3b:5a:d7:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:33:0A:4C:F7:A1:41:82:93:45:57:7A:4F:14:17:1C:41:CD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/991e404f-8d3f-3233-a41d-35ee0ba90723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ba:6b:0d:f5:6e:bd:eb:b6:b4:6d:e6:c3:db:1a:44:0d:5e:
         d5:ea:53:b2:ae:71:66:bc:28:e1:53:0f:62:04:09:a1:1b:a8:
         c2:b1:28:74:b0:4f:70:9b:60:52:00:4a:7f:d5:ed:de:5e:65:
         07:87:5c:8d:49:2c:eb:ea:ed:04:72:2b:55:af:d1:cd:d0:72:
         7e:f9:96:ef:73:79:6b:17:18:72:bb:8b:81:42:bc:c5:17:96:
         1b:ac:29:47:81:8e:30:a5:e6:4e:a0:d3:1a:69:01:50:f3:25:
         f7:dd:92:30:79:2c:bb:59:17:ee:a2:c1:4a:8e:d7:99:e5:b0:
         4a:98:46:17:9e:3f:73:7f:6b:f8:77:a4:f4:e3:7c:25:08:15:
         70:5b:2d:8d:5a:67:02:ce:97:55:f6:0f:35:7b:28:1e:3e:22:
         38:17:f1:37:d7:9d:71:df:67:de:47:ef:dd:09:bd:3f:24:04:
         71:a3:99:44:d4:77:a3:b0:2c:30:d5:4e:a6:69:8c:79:3c:21:
         a6:4c:e2:de:ac:4e:3f:08:19:f6:5c:f7:ca:2a:64:5f:b3:c1:
         58:95:6d:a2:89:a9:28:7b:c8:ce:cd:05:f5:12:88:59:84:71:
         6a:8c:1f:f9:f3:41:e6:f7:4f:bc:fa:68:05:86:c0:5b:2b:06:
         06:b0:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:01:58 2024 by rpki-client on console-fra.rpki-client.org