Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa
File:                     24e059eb-d333-3356-a32f-da320655c8fa.roa (raw, json)
Hash identifier:          Hzh5ZA5/RzgcuLFeeVmhqLrjB2SmMT2GkCjdzRFB+zE=
Subject key identifier:   2D:4E:DC:14:19:41:ED:74:35:A7:86:67:49:A7:1F:7B:73:CB:5D:71
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F43285847924BE2EA07108093D9F15C80
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     22612
IP address blocks:        199.188.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e2:ea:07:10:80:93:d9:f1:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=7a00e46d-835a-40c1-a279-82bc1d6ac13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:a8:c6:62:d0:89:db:77:d0:4a:2f:c7:38:
                    21:c4:b9:fc:73:1a:d3:26:85:48:17:4e:ce:3a:e7:
                    b7:86:58:83:57:73:10:7d:e9:5f:cb:e3:f8:72:ca:
                    df:ed:60:ce:ae:d5:bd:7a:4a:69:5f:80:34:18:7d:
                    b6:9a:a2:6a:32:fe:de:e6:a4:3e:21:45:bb:e6:aa:
                    f7:fc:c6:57:e0:fe:d7:69:ac:b6:1c:de:7b:54:49:
                    93:9a:4a:ec:b1:88:a2:03:4b:10:2a:08:0d:ae:cf:
                    e5:bf:12:d1:7f:a5:59:81:0b:9a:59:43:b1:e2:6f:
                    ea:70:7b:9e:37:57:03:a9:ba:59:d1:0d:a0:e4:ea:
                    4b:57:c2:80:0f:1d:83:10:ab:00:54:50:75:f3:8a:
                    2d:e9:a9:a0:1d:fc:fa:ff:e7:bc:2e:94:8c:93:3b:
                    48:ac:7c:3c:be:cc:ce:f5:5a:7c:db:05:d3:a3:3a:
                    b0:e6:b4:1c:7d:81:f0:71:9c:d1:bf:a3:ae:7a:a8:
                    fb:77:ae:2a:c1:bb:d9:2d:d0:a5:0e:e6:5e:83:49:
                    2d:37:18:a2:a4:57:08:f5:b4:67:53:21:bb:5e:13:
                    af:46:e8:c9:43:81:f9:b4:86:9d:ff:81:dd:9e:ee:
                    db:a1:04:fd:03:74:dc:20:41:13:c1:ff:f4:f4:4c:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:DC:14:19:41:ED:74:35:A7:86:67:49:A7:1F:7B:73:CB:5D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:3d:af:dc:57:e0:76:96:46:34:95:18:ae:cb:88:de:82:
         63:37:4e:9d:d8:ca:bb:7e:54:54:01:c3:f8:86:0b:98:54:49:
         47:1e:a4:eb:68:7f:7f:6d:d5:11:0d:07:d7:d1:5b:02:49:30:
         a7:1a:db:31:c1:14:18:45:63:04:da:0a:fe:b4:98:3f:d2:99:
         34:6e:f3:8a:5f:a3:e1:aa:6f:48:b8:08:5f:49:ff:a2:5f:a4:
         86:dd:08:ca:53:1c:e3:d2:66:71:8e:e2:c7:37:c7:a5:53:62:
         11:19:ca:38:d1:8c:30:d1:00:48:2a:a7:b2:1f:68:b6:95:d5:
         6e:39:f3:a5:64:66:bd:98:fc:05:e9:89:b3:9f:97:cd:04:9d:
         4e:e0:11:ea:ee:3b:76:c4:9e:6b:de:2d:d1:23:cb:9f:10:e9:
         49:97:af:89:be:ec:00:ea:6d:44:55:82:e7:aa:e6:26:33:7d:
         86:01:bd:a1:d7:a0:9a:fe:a1:d3:9b:1f:10:ff:5a:05:60:22:
         05:a0:42:87:76:ee:1e:f6:80:43:00:93:f5:99:ec:80:6f:79:
         a4:81:a8:ca:29:eb:2a:58:16:ec:f5:9d:5c:b9:94:ed:20:7b:
         4b:22:9a:09:e0:1d:fb:e2:32:8c:f9:3c:55:01:d8:19:71:bb:
         c5:12:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:11 2024 by rpki-client on console-fra.rpki-client.org