Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
File:                     af46517c-ca12-3893-94bf-56e17eb024f2.roa (raw, json)
Hash identifier:          R7IHsYc97Y0nWbKV2WJSwcdY25+m75bIBKtYTpQosCk=
Subject key identifier:   36:D7:C4:84:C2:F7:BB:C8:0A:15:2B:27:2D:50:BB:C3:BC:FB:70:8C
Certificate issuer:       /CN=72de343e-ded3-43ae-b207-e492c0f88566
Certificate serial:       010D0C9F432858472C65D5865CB04974B1B7E800
Authority key identifier: D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     22803
IP address blocks:        199.59.234.0/23 maxlen: 24
                          208.92.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:d5:86:5c:b0:49:74:b1:b7:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72de343e-ded3-43ae-b207-e492c0f88566
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=0ae8f0ec-7893-4cca-901b-1352e25458a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:aa:69:3d:59:44:ca:93:3a:7b:1c:71:7e:
                    62:3e:f4:0d:d7:b3:d4:39:b2:73:ae:03:54:8d:2e:
                    d2:a0:8e:63:f9:48:ec:bc:db:31:ad:93:b1:ce:e6:
                    18:56:f1:dd:d0:91:d7:65:a9:5a:0e:3b:de:41:53:
                    78:e8:0d:9b:a0:dc:15:09:c8:22:40:0d:b4:10:43:
                    44:9e:ee:20:35:37:7a:9f:8c:7c:e6:52:8d:9c:3d:
                    46:49:32:fd:91:7b:74:4e:5a:03:f4:db:25:30:ee:
                    5a:4a:1d:80:81:61:da:15:00:38:34:98:35:82:7b:
                    e9:e5:8f:49:35:75:06:e3:7b:b4:40:a9:41:8b:07:
                    62:b7:98:ed:ff:99:d5:88:20:ea:df:7f:98:e7:d9:
                    ab:40:63:04:82:06:e2:b1:1b:7e:31:89:08:92:74:
                    1f:38:37:f9:a0:65:3f:43:e4:f5:e7:f0:41:38:cd:
                    ac:de:f0:00:61:f3:20:97:da:eb:b8:79:1c:27:60:
                    76:7a:47:f1:ec:5e:be:b7:74:cd:ac:ca:83:ef:c5:
                    0b:a8:77:8a:ac:cb:22:d2:31:0c:e8:ad:83:59:51:
                    2e:35:07:20:b4:4c:e8:eb:d9:19:77:ad:e9:f0:06:
                    fc:42:15:e3:92:af:03:24:4d:28:91:92:bd:a8:a7:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D7:C4:84:C2:F7:BB:C8:0A:15:2B:27:2D:50:BB:C3:BC:FB:70:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/af46517c-ca12-3893-94bf-56e17eb024f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566/72de343e-ded3-43ae-b207-e492c0f88566.crl

            X509v3 Authority Key Identifier:
                keyid:D7:CD:F0:28:8D:BD:33:51:4C:85:B2:5F:B8:3E:4A:09:A5:8F:3C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/72de343e-ded3-43ae-b207-e492c0f88566.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.234.0/23
                  208.92.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a4:24:df:46:c5:47:5e:1d:f8:b1:be:a0:37:90:c6:c0:5f:
         a7:f4:fe:a9:64:f9:71:66:e2:88:29:4a:e7:63:00:72:9e:e6:
         de:8e:4f:33:37:23:f5:e3:93:5f:72:e3:c6:0f:a8:00:d3:4a:
         0c:e6:d8:6c:37:ff:9e:b0:b2:0f:eb:e4:dd:e1:40:a7:58:b4:
         a8:6a:3d:55:1e:6f:fa:ff:10:79:7c:4d:d3:78:50:74:21:17:
         5f:2a:2d:69:39:94:a6:44:3a:c2:09:ac:2c:b6:2b:ed:4a:f4:
         f1:93:80:92:0a:bc:74:de:17:42:df:18:67:4a:d8:9c:d1:93:
         93:ef:34:b5:96:1c:6a:66:77:07:de:2b:ba:00:06:c5:14:9d:
         de:8f:bc:1c:b3:a7:e4:b6:92:7c:01:32:24:36:c2:d3:fc:e8:
         7a:51:be:fb:75:dd:da:60:a2:71:e4:42:83:1d:51:65:25:13:
         5c:db:22:ff:1c:31:dc:79:39:21:2e:21:b1:78:ef:4c:a7:f9:
         e6:b8:af:f2:c7:6b:a7:96:c0:b0:43:25:ad:ec:41:4c:56:84:
         c6:65:2b:0a:17:76:9e:cf:23:23:60:43:c0:bb:a5:ed:51:63:
         3d:55:d6:5c:40:8c:05:a1:4b:bc:96:9a:5e:e2:cb:6a:99:e4:
         1e:58:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:08 2024 by rpki-client on console-ams.rpki-client.org