Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa
File:                     1409aa94-2531-37d3-b5ae-f6234514777e.roa (raw, json)
Hash identifier:          L5c52BbNW5m55O9IE3Cv/PnDUImDHktVJXt3bLMetKA=
Subject key identifier:   B4:8C:65:90:62:F8:A8:07:1F:26:E8:17:CB:9C:13:53:B9:7C:41:AF
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F43285847B9616A12F35A19A9CB986394
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa
Signing time:             Thu 31 Oct 2024 13:00:41 +0000
ROA not before:           Thu 31 Oct 2024 13:00:41 +0000
ROA not after:            Wed 29 Jan 2025 14:00:41 +0000
asID:                     400269
IP address blocks:        142.190.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:61:6a:12:f3:5a:19:a9:cb:98:63:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Oct 31 13:00:41 2024 GMT
            Not After : Jan 29 14:00:41 2025 GMT
        Subject: CN=e3803313-890c-41fb-ad27-4b0bb306635f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:ac:06:75:06:f2:31:98:ff:cb:f0:db:d5:
                    d6:82:02:8c:3e:6e:a2:ca:2b:70:33:81:d1:00:88:
                    76:2c:c6:95:d8:3f:ba:b6:aa:fb:4d:c9:11:bf:69:
                    5c:75:dd:ef:d7:0e:a7:47:5a:b3:b6:f8:43:85:f5:
                    9f:a7:b7:92:d8:53:20:db:a3:59:fb:7d:d8:48:6c:
                    30:92:56:f3:a6:d2:a9:5c:fe:bf:94:4f:75:1d:54:
                    3d:5e:87:e1:86:41:15:79:e5:af:0b:f1:96:a2:bd:
                    fa:97:cd:75:64:6e:f6:42:e5:58:3a:b3:b4:ec:57:
                    2c:c5:0c:19:9f:39:cf:1e:22:0b:14:03:08:e7:ec:
                    59:24:09:84:a5:7c:fa:4f:3e:41:dc:b3:de:2d:9d:
                    fd:14:79:d5:2d:3e:ca:6d:ea:ea:3e:5e:df:38:dd:
                    7a:c4:ef:9b:09:e3:2c:2d:35:e4:33:d9:f8:7e:0e:
                    d3:73:ec:44:f9:43:cb:ae:28:d7:ab:e8:46:ff:ef:
                    b8:6f:79:53:ff:66:3e:8e:a3:57:3e:b6:06:cd:e0:
                    78:c9:98:71:3e:28:61:c0:f1:40:42:94:49:a3:46:
                    e9:f3:71:99:d3:89:e6:a3:8f:49:8d:3a:63:58:ec:
                    7e:8d:8a:2f:dd:5a:ce:ac:91:dd:ab:62:10:ed:4a:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:65:90:62:F8:A8:07:1F:26:E8:17:CB:9C:13:53:B9:7C:41:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:70:05:17:2d:67:a8:fb:76:fa:a7:44:3b:1d:af:34:f7:48:
         f0:ec:d7:2e:d6:c9:00:2b:50:52:fe:91:f9:4e:8b:fe:ba:c1:
         c2:2a:f8:cd:c8:82:2a:c8:50:b0:7d:e1:73:be:3e:9f:47:7a:
         06:28:e4:4b:ef:cf:75:2f:bf:8b:52:65:30:e1:4f:4a:8b:26:
         b8:2b:fe:81:9c:24:52:ab:de:bd:8b:e3:c4:30:11:c3:de:41:
         df:0a:09:95:99:a9:ea:e4:b3:40:f9:8c:72:dc:1b:8b:b9:04:
         7e:07:1e:7b:dd:76:a7:a9:03:9d:82:50:91:4f:b2:50:25:ab:
         06:b8:f7:b6:43:20:a8:da:3e:af:67:6e:c4:71:75:5f:34:8a:
         05:b4:18:f4:d3:3d:63:34:4e:c0:20:30:c5:62:6d:53:54:7d:
         5e:12:41:fa:09:5e:b4:48:f5:ad:f5:e5:71:1f:3c:ed:b1:11:
         6a:7a:9b:e1:b3:46:7a:31:a4:00:46:fc:4e:ed:f8:bb:c7:7a:
         91:32:3d:45:68:8c:b0:4c:c6:e0:b9:b8:44:ce:69:fc:21:6a:
         aa:40:47:9d:06:77:e4:97:7a:6a:6f:94:00:90:e5:8f:88:3e:
         9d:5b:ab:73:ab:7e:ee:f0:8a:8d:d8:31:31:96:1d:68:58:e4:
         5c:c6:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:21:08 2024 by rpki-client on console-ams.rpki-client.org