Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa
File:                     b4075263-5a25-377f-ac40-317be5b66415.roa (raw, json)
Hash identifier:          fKK4L15D/7quxUMN6V84UeEs6UgmGsVH5J2LGCHZNFo=
Subject key identifier:   A8:CB:35:25:E2:44:C5:25:F1:31:6F:14:7E:97:5A:92:24:85:CE:02
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328584793B119F9500E75205FD453A0
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     134521
IP address blocks:        199.27.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:19:f9:50:0e:75:20:5f:d4:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=7f38f947-6e4b-442b-a996-4afa6e6dccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:f5:18:5d:2e:29:ac:69:80:28:b1:7e:74:
                    66:b2:b6:04:41:55:fd:c6:5f:ad:aa:79:7c:4f:96:
                    e6:5c:a1:c0:1a:69:e4:5b:d8:f1:24:7c:99:89:f5:
                    a2:10:6d:e2:a7:4c:70:40:8b:fe:fe:bc:24:27:66:
                    5a:7f:5c:e6:a3:64:5d:6d:c6:2d:0a:2b:3a:2d:6f:
                    4b:82:dc:a6:8f:61:16:1a:99:35:6d:4f:bd:78:85:
                    7a:4f:2a:d8:30:42:d8:60:1a:bb:e2:e2:93:1a:97:
                    3a:d1:0c:35:5a:dd:6d:07:be:d3:16:67:6d:dc:1d:
                    fc:c1:94:31:66:3c:1b:8a:65:73:15:89:ff:ec:c3:
                    53:28:36:f7:5f:0b:3a:88:71:7d:01:a0:75:4b:af:
                    4e:5c:f6:3d:53:b1:90:21:ee:9a:3d:86:53:20:79:
                    27:17:63:12:0d:1e:fe:48:1b:5b:5d:49:97:23:90:
                    26:d9:59:c1:20:4d:a8:3b:8f:34:17:d3:c0:15:a4:
                    27:03:fe:2e:74:94:93:f4:f0:e2:a0:db:a6:57:c9:
                    1d:4e:84:5a:bd:29:08:b9:88:35:da:5c:aa:22:23:
                    57:c5:f1:f3:ea:f2:15:23:ac:fe:52:85:fa:24:2c:
                    5b:08:03:86:cb:10:10:02:d1:61:10:8e:1e:76:30:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CB:35:25:E2:44:C5:25:F1:31:6F:14:7E:97:5A:92:24:85:CE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/b4075263-5a25-377f-ac40-317be5b66415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9f:82:9e:c5:54:7c:f9:bb:5d:19:62:ba:0e:6c:33:81:2e:
         93:29:d1:44:96:5c:c5:e5:ab:9e:81:a2:b0:da:6a:98:d8:97:
         f0:a3:cf:af:4b:ff:ef:31:54:9c:05:a8:1d:06:da:21:4a:d2:
         d4:93:72:d7:27:17:ff:41:37:05:cb:2a:6a:27:2c:e4:65:e8:
         ac:4b:65:ed:f4:8a:67:e2:cf:de:2b:4b:e7:6f:0b:84:bc:f9:
         6e:48:32:d9:0c:e5:06:64:7b:6c:79:23:38:55:b9:22:af:ff:
         2b:24:98:9c:3d:83:69:4d:1e:ed:ae:ec:b5:88:09:10:0c:71:
         f0:0c:fb:c4:0c:a2:65:9f:eb:08:e3:2d:e2:1c:1f:10:bd:30:
         96:b2:a0:15:fc:e3:1e:16:e0:0b:f5:01:de:e8:90:4f:06:11:
         1d:ee:c3:18:d5:75:42:c4:bc:64:70:4f:7d:41:01:00:79:dd:
         9e:a2:db:5b:07:3e:ef:6a:17:55:c7:18:65:48:6d:40:15:79:
         1c:05:b9:4f:0d:4d:79:9e:13:c5:8b:79:d5:2a:e2:a0:25:18:
         72:ec:1e:37:a5:02:b9:ee:4b:9f:de:d6:a1:01:d9:fc:70:26:
         52:05:7c:5e:84:b3:ad:5c:bc:cd:0d:16:bd:bd:92:4c:24:c9:
         37:f0:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:11:59 2024 by rpki-client on console-ams.rpki-client.org