Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa
File:                     ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa (raw, json)
Hash identifier:          eXPkZxZk/SEnKCMbU0DsZYVNbk/NYefFzPqUBo8J4wM=
Subject key identifier:   24:7D:66:DF:BA:68:B0:81:B1:65:BB:56:9E:BB:BD:6B:0F:9D:49:9E
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285847CD73F77B5C4E3B40247CAA00
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa
Signing time:             Thu 07 Nov 2024 17:34:19 +0000
ROA not before:           Thu 07 Nov 2024 17:34:19 +0000
ROA not after:            Wed 05 Feb 2025 17:34:19 +0000
asID:                     199856
IP address blocks:        192.154.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:73:f7:7b:5c:4e:3b:40:24:7c:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Nov  7 17:34:19 2024 GMT
            Not After : Feb  5 17:34:19 2025 GMT
        Subject: CN=ec1e2fe7-72f6-4914-914c-65e9aeaa3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:1a:2b:66:21:c2:7a:05:a0:b5:88:82:fe:
                    4b:45:34:ff:0a:8e:58:38:ef:a4:a8:55:a9:b2:a9:
                    60:97:aa:5c:90:5e:9e:46:68:49:c2:6e:96:38:15:
                    42:62:41:89:77:0c:b5:28:d9:0a:26:19:15:9d:b5:
                    f8:96:6f:30:fd:cf:fc:8f:94:d6:d3:07:b4:c3:88:
                    71:4b:a8:27:93:35:17:80:15:65:ab:1a:00:87:ef:
                    2a:c4:47:64:85:dd:45:c7:64:e3:40:a5:29:df:38:
                    54:9a:01:68:01:f3:42:37:1d:2a:98:27:45:47:c4:
                    a0:9e:5e:1f:a7:95:01:8e:79:e3:c8:5e:e5:45:2c:
                    f7:5c:48:2d:ca:b9:84:d6:cc:31:f2:2a:1c:d5:4e:
                    e3:ca:b5:8b:7a:58:48:83:63:af:bc:9c:aa:be:ce:
                    82:e5:09:bd:42:3f:09:26:17:65:c1:34:45:9e:ad:
                    7b:b0:e3:5d:c3:df:5d:b0:16:a5:70:c9:c6:32:cf:
                    d0:76:96:ed:d0:5a:49:b4:fe:01:2c:3c:cb:6f:03:
                    34:0f:49:fe:c8:21:e3:1b:8f:8a:8f:8a:48:91:36:
                    ca:5d:fb:09:f3:cf:5f:0c:d3:0e:4c:5d:bd:ee:d0:
                    03:7c:de:07:6c:9b:11:84:00:9e:14:26:97:fc:48:
                    a5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7D:66:DF:BA:68:B0:81:B1:65:BB:56:9E:BB:BD:6B:0F:9D:49:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/ee19c462-f69d-38ce-87d2-7cd1b3b38eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:8d:1f:0b:80:d4:9b:be:e8:4a:99:9c:ae:a8:92:de:91:
         7e:09:1b:01:9e:ab:84:01:d8:46:70:4d:e8:61:60:2f:91:48:
         a2:77:57:1b:56:51:65:06:89:ac:15:11:6d:e4:fa:50:91:1a:
         90:db:09:83:25:1f:de:98:82:69:75:70:23:9b:b9:7c:33:12:
         dc:63:e2:e6:08:f7:74:2d:d1:90:de:72:81:7c:36:de:e9:04:
         7a:3f:67:59:ca:6d:24:2c:ab:84:fd:c5:9b:20:ee:9b:c5:3f:
         09:8d:45:2d:05:bb:08:61:38:47:d0:0c:7a:89:41:3d:33:76:
         7a:2d:91:ea:1b:b5:cb:81:93:f0:5b:a1:4e:40:1c:6c:5d:6e:
         91:a3:7d:45:d5:cc:9b:08:cc:6c:38:43:79:0b:45:98:3f:ae:
         03:36:f3:40:a5:07:7b:aa:17:1d:83:51:26:88:f0:27:89:c8:
         34:33:f5:5d:fc:2a:3a:17:dd:da:0c:2e:8f:6c:f2:3d:e7:43:
         99:ab:26:88:5a:e0:77:3e:af:b7:78:aa:e9:77:d7:3e:c7:df:
         73:6f:f7:b1:cb:27:02:fc:a7:70:9a:30:c3:33:0d:84:62:0c:
         16:7c:cb:17:55:08:8e:ed:84:30:5d:23:05:c8:31:16:ac:39:
         b3:aa:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:50 2024 by rpki-client on console-ams.rpki-client.org