Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa
File:                     337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json)
Hash identifier:          jJtB+CYA1kipjmNW9RJ5r8YNkFsKL7HRhOBe/Iqt0kI=
Subject key identifier:   99:A0:EF:A0:82:60:2F:60:66:38:E7:5F:E4:50:8E:95:DD:8D:F3:26
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F432858473095E3A5AEFC13E183FC9BC0
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     14630
IP address blocks:        199.230.0.0/21 maxlen: 24
                          199.230.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:e3:a5:ae:fc:13:e1:83:fc:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=9027dfe9-73e8-4c30-a130-60fe0e366613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:6f:7e:65:11:47:cb:fb:2d:41:d5:ef:28:
                    1d:b0:99:07:d9:d0:c3:32:49:c6:3e:22:78:44:d4:
                    2f:ef:61:da:23:32:24:b8:7f:27:ec:1f:c6:ad:1d:
                    34:6e:ce:94:3b:25:b8:5f:45:e3:73:08:e0:d4:8a:
                    06:c8:41:0c:3c:5b:2b:8f:b5:8d:9e:a9:21:0b:9c:
                    63:62:ce:7c:c9:ba:dd:dc:49:69:2d:8c:49:9f:98:
                    b0:e1:41:42:91:a9:f5:10:ea:7b:15:10:59:fc:31:
                    43:78:25:66:66:a8:86:2d:f9:85:b3:07:45:ae:69:
                    8c:15:d1:cc:ca:62:94:5f:4f:a2:a6:eb:42:b1:33:
                    56:ae:eb:72:ce:0b:56:9f:6d:6b:10:df:cb:ab:12:
                    c2:95:4c:7c:4f:39:03:aa:ab:59:e1:dc:3a:25:63:
                    8f:17:ca:dd:27:4c:a7:18:39:6d:50:9a:ee:be:4b:
                    ed:7f:cc:70:18:ff:04:4c:79:ac:6d:a6:7a:27:47:
                    b8:d6:5c:5e:7c:af:d3:38:43:96:5c:f3:6c:13:0c:
                    81:df:43:cf:6e:66:58:74:6f:b4:5b:d5:e4:a4:89:
                    cc:57:82:48:83:28:bf:45:0a:82:da:7d:13:6b:2d:
                    6d:1e:70:ce:5c:c8:74:a3:10:ea:0b:54:0b:69:27:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:EF:A0:82:60:2F:60:66:38:E7:5F:E4:50:8E:95:DD:8D:F3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.0.0-199.230.9.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:49:d7:10:72:84:84:ed:db:a3:74:77:fe:81:10:ba:cb:
         e0:d5:c6:ab:96:d8:6b:8e:81:2e:26:68:fc:59:5a:05:13:6d:
         ee:8e:ef:96:57:9e:37:8a:20:8d:10:99:18:57:f1:ce:15:a6:
         d0:63:2c:b2:19:03:c0:0b:88:7f:4d:43:a7:fc:29:40:ef:17:
         bc:7c:99:2d:c4:7a:b8:73:52:44:93:1f:e5:4e:63:19:3e:0a:
         52:10:e0:7a:31:36:b7:7d:0b:14:e2:2e:78:f1:05:ec:02:ef:
         3e:71:3b:e9:9a:b9:9d:90:3e:07:0c:2a:59:b0:98:bb:28:4f:
         75:98:f1:cb:db:30:e2:fd:f4:7f:2e:20:15:74:5f:49:b5:01:
         b5:ab:ee:1e:8b:bc:55:99:1f:ea:1b:f2:94:d3:a9:6d:6f:8d:
         03:9e:ae:81:da:8f:54:42:66:d9:5c:47:d4:8e:fa:b1:47:18:
         34:3e:60:ad:ed:43:71:cd:c0:a2:21:a4:9b:5e:39:7a:98:2d:
         02:d3:1d:a4:55:85:9c:26:20:8e:2e:c9:5f:74:75:e3:71:e4:
         c6:6a:e3:e9:4d:98:de:b4:d2:d1:27:91:ef:81:22:a6:79:31:
         ef:96:63:d7:41:c8:0a:29:31:89:57:86:3d:9a:0c:bd:20:40:
         d2:b1:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:46 2024 by rpki-client on console-ams.rpki-client.org