Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
File:                     fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa (raw, json)
Hash identifier:          kz0H0LdKL8Q7U/wBA77KghyJl/CF1t06hwjAJSpclAM=
Subject key identifier:   8D:9C:21:8A:26:8F:43:D4:31:DB:52:F0:FF:9E:2C:C7:E0:BC:B8:F4
Certificate issuer:       /CN=91c894d6-b991-4966-bec4-7c58dac779b5
Certificate serial:       010D0C9F4328584762D6524E9B73A17495558420
Authority key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     27537
IP address blocks:        199.87.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:52:4e:9b:73:a1:74:95:55:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c894d6-b991-4966-bec4-7c58dac779b5
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=16518f0f-7cc1-4d46-bfa9-17c4b8b1237a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:fd:ec:e9:32:7f:96:86:16:29:6b:35:61:
                    9c:03:8a:ab:a9:70:9f:6f:aa:3c:61:f1:70:7a:b5:
                    32:be:ff:18:eb:fd:ec:27:14:5c:cb:12:14:ff:cd:
                    0d:3f:6c:f2:26:bf:6c:9d:51:f0:70:3d:67:58:3e:
                    ae:f6:5f:3d:8e:53:d3:42:75:12:2a:06:c9:d8:9e:
                    d5:5e:58:cc:6a:92:e7:a3:88:1e:ea:08:a3:e5:64:
                    9a:f2:95:07:5f:cb:08:f6:5d:c8:d1:ff:39:63:7a:
                    6f:64:e0:13:6d:7c:de:0d:43:e0:b3:21:1a:2e:83:
                    a2:10:85:c6:e5:20:1b:d5:a1:dd:d2:74:09:22:48:
                    91:40:ce:62:73:db:4f:32:b9:8c:5c:96:92:f1:e3:
                    72:c9:2c:4d:39:a9:b3:47:47:03:ea:33:0c:ce:97:
                    91:5c:57:96:67:6c:3f:5a:04:d1:be:30:6b:8a:8f:
                    34:13:34:d7:86:1f:ad:4c:d9:fc:a4:87:85:8a:6d:
                    ac:ac:fa:62:da:ac:1d:55:ef:c9:40:29:13:88:42:
                    02:bd:f7:dd:63:0b:65:40:10:9b:52:2d:89:17:bf:
                    b6:98:3c:90:79:93:08:45:de:83:a7:d7:32:00:3f:
                    31:f7:5a:c6:e2:ff:ee:47:71:af:8e:68:8f:a8:4f:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:21:8A:26:8F:43:D4:31:DB:52:F0:FF:9E:2C:C7:E0:BC:B8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/fdbb69fe-b9b0-3266-b784-4d8845e65f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.crl

            X509v3 Authority Key Identifier:
                keyid:13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:8e:d4:af:34:f2:20:7a:a6:67:a2:45:7c:af:52:3a:5a:
         b4:15:8e:81:7c:ea:d7:c7:da:5d:6a:c7:bd:0e:fe:37:5d:63:
         65:84:14:ed:b3:d5:70:5b:55:39:e4:e2:3c:d6:43:97:94:54:
         4b:4c:e9:a0:81:fd:8c:d5:bc:6d:ac:da:54:2f:c5:9f:c3:e6:
         c0:42:22:0e:43:2a:0b:4b:ec:9e:fc:37:f5:9d:b8:02:9b:1b:
         c8:e5:1e:10:4d:62:d3:73:64:0b:c6:f6:a5:c2:de:6d:9a:bd:
         e2:b2:f8:0f:04:77:5b:b7:c5:c0:0d:a9:b6:21:98:96:57:84:
         0a:20:81:7d:c3:0b:ca:44:de:33:33:d6:26:46:c1:37:f8:c1:
         26:29:c9:b5:e3:07:3c:52:61:4d:06:42:06:b7:61:4c:13:42:
         59:26:83:c9:b9:0b:a7:ee:77:e8:14:b0:25:91:aa:26:63:5f:
         77:15:e0:da:66:81:fa:a3:a7:d5:88:15:d1:66:2d:ad:0e:ca:
         8a:00:3a:4d:76:6a:7b:ff:4b:e4:02:2b:40:f5:a1:51:c8:f2:
         a2:c5:b5:1b:e2:31:6a:c5:72:1d:36:90:a7:b9:05:55:fb:ae:
         c0:2e:2e:e0:0f:55:75:9a:00:d6:86:88:1f:ce:00:31:ba:a9:
         db:07:58:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:16:10 2024 by rpki-client on console-fra.rpki-client.org