Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa
File:                     d2517bc4-e992-3287-ac87-c5b15da1b10b.roa (raw, json)
Hash identifier:          /JtjiI3d2U3uUFoSBNZ+Q65FGf7ot+JPk7mWa6HX2nY=
Subject key identifier:   91:F8:60:A8:11:FD:0B:68:B2:1A:A6:2D:8A:08:96:DA:8A:BC:4E:6A
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F432858473D2605F620AF24F425F03C40
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     2734
IP address blocks:        199.119.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:26:05:f6:20:af:24:f4:25:f0:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=dcf354b2-8632-4f62-bbdf-680cbbc40979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:ad:98:55:ac:83:ce:6d:c5:7a:ae:7e:f1:
                    66:ea:a3:96:41:22:74:05:93:93:d1:29:7b:66:f1:
                    d1:66:1a:5f:de:10:3b:c7:62:9b:b0:1d:8d:21:da:
                    bc:d1:18:b4:7a:ac:bf:24:7b:90:15:bf:4a:0c:90:
                    c1:46:19:b5:3a:48:6a:64:0f:d5:91:ba:3e:e3:b4:
                    a7:1c:a6:88:5f:91:94:b3:08:aa:bf:94:6e:43:ec:
                    73:49:d1:24:78:59:46:e0:9f:ff:9d:cd:66:da:68:
                    4d:1e:91:21:dc:f5:8f:94:93:aa:c9:62:fb:01:f5:
                    5b:b9:68:96:4b:2c:0a:06:1b:5a:a8:cd:35:9a:94:
                    66:d8:fd:d5:df:a5:cb:56:61:c7:fc:24:49:e7:32:
                    42:52:a5:14:ac:b1:de:04:aa:10:33:a6:af:d5:37:
                    5d:6c:a2:90:7e:20:42:72:d7:2b:8f:6c:bd:ee:41:
                    02:35:1a:fa:0b:b9:37:7c:ce:0a:db:f3:9e:a7:b9:
                    d7:df:61:a0:3f:36:5d:d2:f6:f8:a0:ed:a3:79:82:
                    18:5a:c9:e9:04:c2:2f:47:5f:0e:2d:fb:b5:a9:62:
                    36:78:d5:b0:38:0f:b9:7b:c5:2b:54:44:46:b2:42:
                    dc:55:6a:65:16:da:20:37:2f:7f:86:67:f1:0d:16:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F8:60:A8:11:FD:0B:68:B2:1A:A6:2D:8A:08:96:DA:8A:BC:4E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:80:c1:18:81:0c:0a:77:0e:6a:d2:a6:18:d5:57:b5:f6:
         05:fb:ef:95:ae:f0:d6:a1:79:26:44:3a:3e:62:62:a8:9b:7a:
         bb:d3:97:23:58:1d:8e:05:c6:c2:b5:86:93:ab:21:16:e2:71:
         c5:9f:2f:ff:bd:b0:8b:95:0a:35:e5:fb:f8:28:9e:3c:c6:11:
         7f:ac:72:55:40:7b:cb:2c:60:60:28:b0:e8:30:ef:81:c2:26:
         c7:e3:01:e4:0a:18:47:77:a8:5a:dc:b3:98:89:c4:48:de:c0:
         c1:61:14:f8:38:9b:3b:a4:64:29:7d:5c:a1:3a:71:6c:91:93:
         af:90:30:ed:31:5e:f6:bc:e0:e9:1f:dc:e7:37:b4:e4:6a:54:
         d7:92:8a:04:81:df:8a:4d:dd:9f:3e:51:df:c2:bf:07:59:5e:
         7d:b4:ca:16:ef:19:13:46:8a:32:3f:7d:4e:38:26:86:11:dd:
         1a:30:66:7a:b7:e8:4a:99:09:22:5e:a8:53:75:74:3b:88:de:
         0d:98:1c:9c:88:a9:df:f5:28:3f:41:10:10:78:dd:04:d4:90:
         c2:a3:48:bf:26:c1:a5:a1:da:6c:4c:5c:f5:0b:a4:0c:ae:4b:
         4e:29:32:1f:2c:fa:89:5f:97:b8:3a:8b:14:d9:37:a5:21:85:
         46:2f:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:29:00 2024 by rpki-client on console-fra.rpki-client.org