Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa
File:                     66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa (raw, json)
Hash identifier:          vE7qU0q/VANS6r5xAIYQMFYR+U/kNMWmtGoZVXr970k=
Subject key identifier:   2E:46:2E:40:03:EC:BF:AF:6A:3C:16:A0:45:18:6E:F6:8F:F1:AB:9E
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F43285844F7300278A696ACEF63349100
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa
Signing time:             Wed 21 Feb 2024 14:00:32 +0000
ROA not before:           Wed 21 Feb 2024 14:00:32 +0000
ROA not after:            Tue 21 May 2024 13:00:32 +0000
asID:                     138699
IP address blocks:        199.103.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f7:30:02:78:a6:96:ac:ef:63:34:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Feb 21 14:00:32 2024 GMT
            Not After : May 21 13:00:32 2024 GMT
        Subject: CN=2798d04d-7b1e-48b0-8f44-4203533403d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:5f:8b:60:45:63:de:ef:6b:81:82:32:ca:
                    31:23:83:ea:80:7d:71:d4:5d:cd:f4:e4:ef:d1:4b:
                    5b:b5:fc:25:1d:5d:c4:06:2c:71:d8:c3:1b:31:77:
                    ac:64:68:91:29:68:2a:d9:75:b3:90:09:0e:23:f2:
                    52:48:79:1b:0d:e9:80:be:55:da:09:63:0b:cc:a5:
                    fd:a4:bc:ec:20:25:cd:6a:cd:84:76:81:e6:5b:b4:
                    28:d8:dc:d7:d9:07:2b:d6:aa:83:87:9f:1b:e8:b0:
                    6a:e5:8c:1c:ca:eb:99:5d:53:70:0d:bc:d1:46:a7:
                    63:6f:f0:a8:cd:f5:6f:48:e6:ac:8f:cb:80:86:fc:
                    8d:89:ce:15:16:dd:8a:a3:e8:94:cc:42:00:b6:d4:
                    32:dd:73:32:dd:19:eb:e1:ad:d2:95:b5:83:0e:c1:
                    36:80:5a:d8:21:cc:b8:48:e1:5b:0f:b1:1e:9e:25:
                    2a:6b:3a:d2:b6:14:a5:41:34:46:4a:e8:8a:83:c6:
                    4c:de:2f:4d:63:b8:81:39:d8:ef:e7:1c:39:cf:01:
                    a7:05:38:55:cb:0b:86:cb:43:73:41:9a:53:ab:d3:
                    01:94:70:ad:19:ea:ad:e9:1f:1f:30:ec:12:b2:91:
                    f0:18:73:4b:f4:8e:81:5a:71:ad:98:b2:c3:73:32:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:46:2E:40:03:EC:BF:AF:6A:3C:16:A0:45:18:6E:F6:8F:F1:AB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/66d59e41-92c5-3191-aafe-3d13ea15ed3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.103.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:df:6a:de:9d:33:d0:38:91:19:2f:b3:4b:19:38:50:2b:71:
         06:04:39:c6:1b:0c:64:34:dc:43:74:ef:41:a9:ef:23:37:f4:
         dc:30:b6:e7:56:4d:e2:f4:35:cb:29:98:7e:15:3a:11:d1:10:
         6d:37:ff:b4:9d:74:d9:49:51:91:9c:0f:f3:49:83:19:48:04:
         c3:5d:2b:43:eb:be:3d:45:b3:68:42:0a:af:96:1d:00:96:e8:
         ee:c0:03:09:0c:e4:f1:c5:51:92:e9:af:37:ca:3a:58:7a:b8:
         78:3b:b6:48:0f:0e:a4:f2:29:28:04:37:b4:03:00:82:05:d0:
         52:22:af:b6:5f:72:5d:58:77:ae:05:a7:db:f4:cc:43:45:de:
         92:07:85:2c:ce:20:f0:98:9c:ba:a0:e1:66:a1:ba:4c:66:a2:
         03:aa:19:38:4d:2b:47:d8:9a:26:c7:43:7c:f0:12:77:b2:9c:
         47:8a:fe:5b:e8:4b:fb:a4:0f:5e:5c:d9:14:15:40:65:81:08:
         ae:8d:40:a7:16:b2:3c:c4:24:ec:48:1c:c6:35:a0:1a:90:87:
         a3:66:0b:49:b1:08:6f:cc:7f:22:09:6e:12:97:c1:2a:63:b6:
         4e:14:d6:b1:9c:e7:73:5c:32:f6:c1:5b:55:0a:f2:18:72:9e:
         bf:a4:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 01:31:32 2024 by rpki-client on console-ams.rpki-client.org